xn--cigkfte-d1a.de

Issued by R3

About this certificate

This digital certificate with serial number 03:42:83:66:45:1d:c6:f8:f0:9c:f4:48:9b:96:e5:82:d5:bf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xn--cigkfte-d1a.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:83:66:45:1d:c6:f8:f0:9c:f4:48:9b:96:e5:82:d5:bf
Serial Number (int): 283970153895635531406912997682262457898431
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:80:bd:ff:35:66:26:74:50:fd:31:04:0a:97:53:8f:33:18:f3:03
Fingerprint (sha256): 5c:a6:e3:5a:8e:70:e6:51:37:ab:11:ef:ce:41:81:f0:92:3f:4c:e3:e1:79:5b:af:e8:cf:44:b1:4b:f0:4f:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xn--cigkfte-d1a.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--cigkfte-d1a.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

99bit.in
admin.hubroad.org
admin.msppaplu.com
admin.test.dyrket.no
ai.chatpro.pro
airdrop.web3pak.com
ankieta.pricely.pl
app.hourbank.mascdriver.com.br
app.mysterymolegames.com
app.sumiprodelacosta.com
applebite.orupools.in
ashishtiwari.website
auth.gsales.io
beta.developers.dstteam.com
bileski.com.br
boeken.gardentours.nl
buccedu.com
chataztrend.online
cv.abhilash-pm.com
devel.healyeah.pl
drtcrew.com.br
ecm.cradlecode.com
geo-geosyntech.com
healero.in
historiaclinica.etereafisioestetica.com
infoscience.in
janniemczyk.pl
jmsconsultancy.in
kapil.info.np
legacy.app.telebroad.com
list.app.5ls.de
loethery.rickyvadala.com
login.bluelink.org
maratonatv.com.br
melardie.fr
mosqto.site
mta-sts.seanstaffiery.org
nft.defisingapore.io
nida-pajar.itsyourdayofficial.com
ntqk.me
old.saraf.mhaswadkar.com
orebro.wideving.se
pacientes.pred.cl
pedrosugai.tech
qriositynet.com
roomviewer.allsteeloffice.com
shadowgames.in
signage-dev.waffle.city
signature.waffle.city
skysmobileapps.com
sloviks.lt
snaptickets.in
socios.avalesdelcentro.sgroneclick.com
songvetkasem.com
soporte.humanware.com.ar
stores.piklocal.com
sundapp.io
test.ecm.cradlecode.com
to.teplo.app
uba-ghana.net
urbanhillstudio.co.in
veyselcan.tech
waterassistanceprograms.org
weweland.xyz
www.apple-teams.live
www.chiesisayls.mx
www.clicktogain.tech
www.cryptofarms.me
www.designerkalyan.space
www.gokhanersoy.com
www.jilswebapp.pikkopay.fr
www.jimmyrustle.com
www.jmsconsultancy.in
www.kamdstudio.com
www.kwode.in
www.managerservicesgroup.com
www.mercamio.com
www.meu.cash
www.monteriaestalista.com
www.muneebtech.in
www.nightskydivinationstudios.com
www.poptagg.me
www.roletylider.eu
www.shop.grapefruitmoon.hu
www.testingapp.fun
www.werunathletics.online
www.xn--72c9baljo7c7i4c.com
www.xn--arlneshoes-xubc.com
www.xn--o80bp9m9nk8kj.com
www.xn--viadonjose-u9a.pe
xn--80aa6bcbcfq.xn--p1ai
xn--cigkfte-d1a.de
xn--q20bx22da519b.com
xn--rsvenpgasquen-9ebv.com
xn--stveitvgenpark-kibh.no
xn--viadonjose-u9a.pe
xn--voldinrerelasjoner-tub.no
xn--wielosowie-f0b.pl
zacniasm.tech
zennithgh.com

Other certificates including the domain name xn--cigkfte-d1a.de

(limited to 100 certificates)
theacademates.com
xn--cigkfte-d1a.de
jmsconsultancy.in
trekella.com

Certificate

The complete raw certificate details for xn--cigkfte-d1a.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283970153895635531406912997682262457898431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 23:47:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 23:47:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--cigkfte-d1a.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99bit.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hubroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.msppaplu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.test.dyrket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.chatpro.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airdrop.web3pak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankieta.pricely.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.hourbank.mascdriver.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mysterymolegames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sumiprodelacosta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applebite.orupools.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashishtiwari.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.gsales.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.developers.dstteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bileski.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boeken.gardentours.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buccedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chataztrend.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cv.abhilash-pm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devel.healyeah.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtcrew.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm.cradlecode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo-geosyntech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healero.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiaclinica.etereafisioestetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoscience.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janniemczyk.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmsconsultancy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapil.info.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.app.telebroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'list.app.5ls.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loethery.rickyvadala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.bluelink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maratonatv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melardie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosqto.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.seanstaffiery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nft.defisingapore.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nida-pajar.itsyourdayofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntqk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.saraf.mhaswadkar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orebro.wideving.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacientes.pred.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedrosugai.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qriositynet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomviewer.allsteeloffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shadowgames.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signage-dev.waffle.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.waffle.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skysmobileapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloviks.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snaptickets.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socios.avalesdelcentro.sgroneclick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songvetkasem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.humanware.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.piklocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sundapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ecm.cradlecode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'to.teplo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uba-ghana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanhillstudio.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veyselcan.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterassistanceprograms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weweland.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple-teams.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiesisayls.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clicktogain.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptofarms.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designerkalyan.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gokhanersoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jilswebapp.pikkopay.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jimmyrustle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmsconsultancy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamdstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwode.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.managerservicesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercamio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meu.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monteriaestalista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muneebtech.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nightskydivinationstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poptagg.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roletylider.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.grapefruitmoon.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testingapp.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werunathletics.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--72c9baljo7c7i4c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--arlneshoes-xubc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--o80bp9m9nk8kj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--viadonjose-u9a.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--80aa6bcbcfq.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--cigkfte-d1a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--q20bx22da519b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rsvenpgasquen-9ebv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--stveitvgenpark-kibh.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--viadonjose-u9a.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--voldinrerelasjoner-tub.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wielosowie-f0b.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zacniasm.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zennithgh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad94131e90000040300473045022100eecc1911ad2de21a14d316ff3d90c49f5e2f18cfe10c2e98e101057e58f5a68702201cf82177156c52db778aaadf349d9669cbcea83b40415a471921bf42bf1078a7007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ad941322b00000403004730450220662b397f52bf523838c8a5c185980a5e55d16867d34b3cb3d29d05ba7eb5171b022100e768ad86431aff3013d3754c83271a36ae7e93b58536c6241ecb31664fb10c7b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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