r42.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:02:e7:6b:cc:9f:ea:17:d5:de:da:43:43:a5:87:91:70:b7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=r42.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:02:e7:6b:cc:9f:ea:17:d5:de:da:43:43:a5:87:91:70:b7
Serial Number (int): 349437319853954327598895186988491420561591
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c0:b1:d3:cb:34:9e:47:2d:58:4e:a2:07:cb:a7:78:48:33:2b:25:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:f7:79:d1:28:67:4f:0c:01:8b:5c:13:37:1d:64:f3:45:ba:e3:d3
Fingerprint (sha256): 57:8f:8f:ae:21:01:e2:ab:a8:02:21:d1:73:41:a1:54:b7:1c:47:5d:51:c1:fb:43:da:19:35:53:9a:00:61:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate r42.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for r42.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abm.fogiordano.com
acuity-dev.bop-tech.com
admin.ipick.com.my
amiyaranjan.in
api.ula.africa
app.acap.drclik.com
app.advertalytics.com
app.funfute.com.br
app.merqury.co.uk
app.thegodschallenge.com
assets-demo.inszu.com
authstaging.orchidhealth.com
awdziewicz.com.pl
beautiesofeden.org
bitsports.bitaam.com
chesstune.live
concours-de-nouvelles.phowork.fr
cookiespolicy.tamizhrealestate.com
dashboard.yesdefo.com
dev-mambo.iframe.survive.bet
dev.xn--btvakten-9za.no
diagnosticofinanceiro.medconsulting.com.br
domesticapp.com
elvycreations.com
gibbs.ltd
go.blackforest.org
go.rooftopapp.com
ideainnovationcell.org
ideas-app.karn.ratana.info
ieat.asia
jeremylanfranchi.com
kaczmarski.dev
kells-kitchenn.com
keralapei.com
kontakt.xn--labroso-p2a.ch
kwickly.app
link.delli.market
link.mysports.com
link.openology.org
luckymoney.moee.in
maatoshree.com
maddyinvestments.co.zw
mapicon.jp
marcelbaur.io
marmak.pl
metropolisasia.in
mira.geia-app.com
mkmahmud.com
mvg.vlatko.mk
my.lazylawn.ca
on.soundcloud.com
open-day.vu.edu.au
payment.thegodschallenge.com
phonepad-v2-dev.bop-tech.com
piyushgangwar.tech
r42.ch
rambousek.dev
s360-dev.bevy.pl
sarmadevents.com
seller.shipxanh.com
share.allinfo.co.il
simple-pay.fashionsuite.com
spurfund.com
sudoku.fuzailmuhammad.com
tchadia.tech
tecodinx.com
theuncorkchallenge.com
tienda.staging.plasmartcba.com
user-legal-dev.coconala.com
v2.staging.ventureiq.io
vote.codeshovel.com
weconnect.merckgroup.com
wish.kempf.dev
wrmbud.pl
www.admin.barbaravokatis.com
www.assus-components.nawebb.com
www.beautiesofeden.org
www.bodegabedz.com
www.chesstune.live
www.cuentamecomo.mx
www.excellentdesigns.in
www.fc-motorclub.be
www.gaudtech.com
www.ideabin.xyz
www.ideainnovationcell.org
www.ieat.asia
www.marcelbaur.dev
www.marcelbaur.io
www.sarmadevents.com
www.trevorlyonyates.com
www.typedigital.de
www.xn--bagedikli-12b.com
xn--31b0a4eg.xn--h2brj9c
xn--absconstrueseireli-hvb4z.com.br
xn--bagedikli-12b.com
xn--btvakten-9za.no
xn--bydner-yxa.se
xn--kreativittstraining-owb.ch
xn--m3caem1c5czc0a9dh8f.com
xn--tdk.xn--0dk.co

Other certificates including the domain name r42.ch

(limited to 100 certificates)
alaminamdar.tech
xn--3e0aon.xn--j6w193g
rss.r42.ch
dashboard.veniceprojectcenter.org
www.chanthomas.com
download.sheercustom.com
rss.r42.ch
m.ninetalk.tk
milestoneshealthcentre.com
xn--y8ja6ob5749g5na497h.app
rss.r42.ch
rss.r42.ch
investor-flow.salesmonk.co
rss.r42.ch
myvyoo.ai
mail.r42.ch
mail.r42.ch
typi.promirage.com
rss.r42.ch
rss.r42.ch
rss.r42.ch
alaminamdar.tech
www.nexigoenergy.com
milestoneshealthcentre.com
nacita.id
www.hypnochain.com
www.marzanoarchitects.com.ar
www.tracking.sb-group.dk
m.ninetalk.tk
r42.ch
rss.r42.ch
store.playforge.gg
rss.r42.ch
rss.r42.ch
rtupapers.in
www.tracking.sb-group.dk
nimabadiei.dk
www.eindjespelen.nl
www.tenderapp.co
rss.r42.ch
newseason.es
www.nexigoenergy.com
rss.r42.ch
rss.r42.ch
kwickly.app
admin.sloops.waat.eu
www.zacniasm.tech
www.chanthomas.com
rss.r42.ch
conn.sally.app
citizens.social
www.katon.cloud
xn--y8ja6ob5749g5na497h.app
agent.rtm.vnlp.ai
nacita.id
www.katon.cloud
rss.r42.ch
ipsapl.com
auth.tinito.app
rss.r42.ch
rss.r42.ch
www.hypnochain.com
satyamnx.store
www.gaudtech.com
www.marzanoarchitects.com.ar
vpgg.lt
cliohealth.aspire-dev2.com
mybattery.ausgrid.com.au
xn--frskring-2za1p.granat.app
rss.r42.ch
admin.sloops.waat.eu
www.banazak.io
ipsapl.com
meu.melhorplanob.com.br
satyamnx.store
xn--9meart-3ua.com
nimabadiei.dk
megart.com.br
rss.r42.ch
mercadoenergias.com.br
rss.r42.ch
passcard.psu.ac.th
www.gaudtech.com
sandboxnuts.app
r42.ch
rss.r42.ch
www.shayar.tech
www.luja.com.co
r42.ch
rtupapers.in
reviewsit.site
rss.r42.ch
rss.r42.ch
rss.r42.ch
xn--9meart-3ua.com
rss.r42.ch
xn--frskring-2za1p.granat.app
rss.r42.ch
www.marcussoftware.info
xn--voldinrerelasjoner-tub.com

Certificate

The complete raw certificate details for r42.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349437319853954327598895186988491420561591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 06:24:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 06:24:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'r42.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0b1d3cb349e472d584ea207cba77848332b25d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abm.fogiordano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuity-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ipick.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amiyaranjan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ula.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.acap.drclik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.advertalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.funfute.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.merqury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thegodschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-demo.inszu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authstaging.orchidhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awdziewicz.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautiesofeden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitsports.bitaam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesstune.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concours-de-nouvelles.phowork.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookiespolicy.tamizhrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.yesdefo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mambo.iframe.survive.bet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.xn--btvakten-9za.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosticofinanceiro.medconsulting.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvycreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibbs.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.blackforest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.rooftopapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideainnovationcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideas-app.karn.ratana.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieat.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeremylanfranchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaczmarski.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kells-kitchenn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keralapei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kontakt.xn--labroso-p2a.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwickly.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.delli.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.mysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.openology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckymoney.moee.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maatoshree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddyinvestments.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapicon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcelbaur.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmak.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metropolisasia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mira.geia-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkmahmud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvg.vlatko.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lazylawn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on.soundcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open-day.vu.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.thegodschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonepad-v2-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piyushgangwar.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r42.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rambousek.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's360-dev.bevy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarmadevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seller.shipxanh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.allinfo.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simple-pay.fashionsuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spurfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudoku.fuzailmuhammad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tchadia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecodinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theuncorkchallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienda.staging.plasmartcba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-legal-dev.coconala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.staging.ventureiq.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.codeshovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weconnect.merckgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wish.kempf.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrmbud.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.barbaravokatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assus-components.nawebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beautiesofeden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodegabedz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesstune.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuentamecomo.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excellentdesigns.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fc-motorclub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaudtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideabin.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideainnovationcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ieat.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcelbaur.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcelbaur.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarmadevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trevorlyonyates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.typedigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bagedikli-12b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--31b0a4eg.xn--h2brj9c'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--absconstrueseireli-hvb4z.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bagedikli-12b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--btvakten-9za.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bydner-yxa.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kreativittstraining-owb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--m3caem1c5czc0a9dh8f.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tdk.xn--0dk.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e17cce092000004030046304402207123cf9b30ba0b272f9a87cc477a74fc5f38c667327412d1541200716f9578e90220531720614bc0df29a3c4a04eda5ec8f61dc2bc67214942582dd331ce67f2f8df007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e17cce0b00000040300483046022100e41cd7fe457692b904ef6e82e6fd9be91b7ad4fba1cff522bf79bf8d82c0db9f022100c69291ceeaecfe9084cc7799ce8a65e909b332e79e9e96be4a241b5deab69d70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f16658d2a3dd5f2bd1f8a644d2a6e3d2d7ad5c63a02c3bd7ed1df4881d78600241097757168b0b96c2e95e78d2d9c2d0a8191326e04e2ddc0860fe476e5c1e61d5ceeb729a197e9407cdd4d8dafc8146f425669166a64a2c4eca5285267a2dbc03fde95f66f628639cd24a7a007b9b0054206d22b4c9b72ec0e9a57ad3062a56d89fbff80abd6f91f7a5a42c32fe93588becfbfdcd01875c9dcd99ba0b890cadc433b9f4991e5ff1f4bafb6027c184efd50bff493d942dc2e1c4f6e2b02f26ef3d122cb36315be43359d0d8d00bc1126f959f6c9a4c5d42c9087a5235b3064c182640a9e6b675a41e79b4b31c9179b2746cd091181fe37cf4525576e4f4118d