www.bijaysapkota.com.np

Issued by R3

About this certificate

This digital certificate with serial number 04:e7:5d:9e:11:c9:e2:b4:fa:ad:32:5d:7f:6e:68:bc:ba:37 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bijaysapkota.com.np

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e7:5d:9e:11:c9:e2:b4:fa:ad:32:5d:7f:6e:68:bc:ba:37
Serial Number (int): 427178809433085403655579714523234014378551
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:e6:f2:3b:80:7b:39:9c:38:0b:d8:c5:fc:7d:eb:0e:93:1b:0e:74
Fingerprint (sha256): 5a:2b:b4:89:0c:d2:6d:4a:b1:3b:f9:81:b2:21:4f:d4:ff:0a:d4:ce:4d:15:cc:4c:ff:48:0e:37:9b:f7:5e:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bijaysapkota.com.np

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bijaysapkota.com.np

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0z.nz
admin.click2order.online
affidea.idenfit.com
app-talea.expresssteuer.com
app.anonacy.com
app.riverr.app
app.sieutinh.com
apporderd.goyirunway.com
apps.gafi.network
arkvalleynews.enotice.io
assets.bitestechnology.com
avnt.io
base.happylearning.tv
beebleradarblip.vidhunnan.design
bitlliant.io
bittalk.shanzid.com
blog.securely.app
blogs.pixcloud.xyz
bnndev.com
bohocasinopromo.com
brunamarinhopsi.com.br
calculator.earnr.co.uk
chamtracnghiem.com
ciberlegal.es
codesign.al
colbyfreepress.enotice.io
commodity.biz.id
common-new-dash.currents.fm
console.merkado.io
d.diskone.my.id
dashboard.parquesnacionales.gov.co
demo.fuzed.io
dev.ctvsim.vn
diagnopool.com
dickquistautos.com
dicom-tools.carinaai.com
docs.modelify.ai
docs.yolo.blue
docvita.app
ds.vhslab.com
echosec.xyz
elf.elitestrategictraining.com
emaku.com.mx
evanwilcox.com
ffasanojrgastronomia.com.br
fiscosistem.com.br
karnataka.villagecodes.in
kookoostudios.my
kplasonline.com
learn.codeschool.co
manheim-kcaa.cox2m.com
manheim-nade.cox2m.com
mapfleet.ca
market.socialbureau.io
mismatch.app
mstankiewi.cz
neb.edusanjal.com
new-api.mytingo.co
newtonnow.enotice.io
order.canto.sa
passlifeuk.com
preetam-tiwari.incubxperts.com
previa.levofarma.com
qk.com.vn
qt.kayserish.com
renow.io
report.pitiplus.app
ridejam.app
roll.guide
sales.order.place
simule.itscred.com.br
siteform.io
sunburn.niels.codes
triage.trykiroku.com
trysamar.com
vullnetlimani.com
web.ever.surf
www.airportweather.app
www.avenash-kumar.com
www.backupbatteryusa.com
www.bijaysapkota.com.np
www.cfbdev.gg
www.cre8games.com
www.cryptohoomans.club
www.devjavu.space
www.doentry.com
www.echosec.xyz
www.itiswritten.study
www.pmtgadventure.com
www.portoriverside.net
www.prdelnimed.cz
www.rapicr.com
www.rkdev.co.uk
www.sanregofc.com
www.sodatab.com
www.solrazr.com
www.sushani.com
www.tecmash.com.br
www.texturenexus.com
www.weget.me

Other certificates including the domain name bijaysapkota.com.np

(limited to 100 certificates)
desenfila.com.br
www.bijaysapkota.com.np
www.jinhechinese.com
fairway.work
www.bijaysapkota.com.np
www.godoffate.com
scores.livebyte.de
origin.cn.presar.app
athlemouy.fr
bijaysapkota.com.np
schoollinkclass.auxswot.com
www.thomascowder.com

Certificate

The complete raw certificate details for www.bijaysapkota.com.np in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427178809433085403655579714523234014378551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 19:49:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 19:49:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bijaysapkota.com.np'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1963 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0z.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.click2order.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affidea.idenfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-talea.expresssteuer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.anonacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.riverr.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sieutinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apporderd.goyirunway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.gafi.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkvalleynews.enotice.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.bitestechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avnt.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base.happylearning.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beebleradarblip.vidhunnan.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitlliant.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bittalk.shanzid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.securely.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.pixcloud.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnndev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bohocasinopromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunamarinhopsi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculator.earnr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamtracnghiem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciberlegal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codesign.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colbyfreepress.enotice.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodity.biz.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common-new-dash.currents.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.merkado.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.diskone.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.parquesnacionales.gov.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.fuzed.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctvsim.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnopool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dickquistautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicom-tools.carinaai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.modelify.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.yolo.blue'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docvita.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.vhslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echosec.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elf.elitestrategictraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emaku.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evanwilcox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffasanojrgastronomia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiscosistem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karnataka.villagecodes.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kookoostudios.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kplasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.codeschool.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manheim-kcaa.cox2m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manheim-nade.cox2m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapfleet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'market.socialbureau.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mismatch.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstankiewi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neb.edusanjal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-api.mytingo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtonnow.enotice.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.canto.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passlifeuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preetam-tiwari.incubxperts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previa.levofarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qk.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qt.kayserish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'report.pitiplus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridejam.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roll.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.order.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simule.itscred.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteform.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunburn.niels.codes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triage.trykiroku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trysamar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vullnetlimani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.ever.surf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportweather.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avenash-kumar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backupbatteryusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bijaysapkota.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfbdev.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cre8games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptohoomans.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devjavu.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doentry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echosec.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itiswritten.study'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pmtgadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portoriverside.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prdelnimed.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapicr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rkdev.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanregofc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodatab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solrazr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sushani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecmash.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texturenexus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weget.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afc74350c0000040300473045022100eb0d390ef4bda7c5f18a7f190d507e315834f5a54d5c1839263db410170fae47022032f422f862ede1465673d4e56f443a5be08d2d968a764e0f0d4d51329d44a9510076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018afc7434f80000040300473045022100caac6333d8b36e7ed1a1fcf1251c3c7df1a75a0208547e27f9edcd232fd297cc02207444b9e0ec5e6f3367123e039d94bac3ad033e081119ffeaec4a6b8a63b11166
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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