basen.sparkntnu.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:5e:8f:ae:85:2a:3f:0c:01:24:20:58:13:43:2b:44:d6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=basen.sparkntnu.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:5e:8f:ae:85:2a:3f:0c:01:24:20:58:13:43:2b:44:d6
Serial Number (int): 341769189858366461128848334183358058415318
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:11:e8:b7:b7:64:c9:16:91:6c:0e:eb:cc:7e:1a:7e:10:b2:2a:92
Fingerprint (sha256): 5c:d8:be:2c:0c:66:59:15:35:8c:47:0b:2e:c5:2e:c7:a0:17:12:eb:dd:18:6e:b2:08:93:63:e8:a9:ba:30:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate basen.sparkntnu.no

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for basen.sparkntnu.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accurateanalytic.com
aigemini.com
algebros.org
andregoncalves.com
anuartists.com
app.apphoven.com
app.ihomie.se
arsenalfirearms.nz
ashutoshbilla.com
basen.sparkntnu.no
bokuran.com
brooksupholstery.com
business.onify.com
code2vec.org
daleandray.com
dashboard.onify.com
dbhatt.org
dev.warswarms.com
docz.online
eazy.events
edo.nyc
fabler.renqvistsverkstad.se
fireboy.devrel.pub
gear.run
halffullheart.com
hccnva.org
hiregamma.com
illusio.show
influx.tv
intiainen.org
jeffshin.com
kasa-sushi.com
lanbonindia.com
lapisentertainment.com
lappfold.com
liesbethdoomen.nl
lists.collegeai.com
lperezp.com
marshallmutualinsurance.com
merck.higoalsapp.com
nightofthelivingdad.net
nms.noshufou.com
novusclub.org
onlinesolutionsgroup.website
orthoculture.com
pacemaker.press
panel.ihomie.se
pixenapp.com
points.asokoinsight.com
poke.mxp.tw
polymertest.ipswichstake.org
prism.conjure.space
resalehouse.tk
snapshot.raisedtolove.com
squirrel.coopers.pro
tactilepicturebooks.org
training.levolor.com
workouts.robertmorrison.com
worldpeacegame-hokkaido.org
www.1link.vn
www.agrapana.app
www.aliaijaz.com
www.amitjuneja.com
www.andrognito.com
www.appelerdeletranger.com
www.appseas.com
www.averyvine.com
www.bokuran.com
www.code2vec.org
www.docz.online
www.eventfulapps.com
www.facebooksearcher.com
www.fatihkaratay.net
www.flixplay.com.br
www.followthrough.systems
www.fongsea.com
www.green-piezo.com
www.hccnva.org
www.hopedekalbcounty.org
www.janp.app
www.joannacox.rocks
www.jonas-jensen.com
www.katowulf.com
www.lapisentertainment.com
www.lperezp.com
www.manishgautam.com
www.marksilverwood.com
www.naturalluxury.nl
www.playbypost.online
www.potluckhub.com
www.practical-architecture.com
www.precisiontherapybodyworks.com
www.runicapp.com
www.sasxa.net
www.tactilepicturebooks.org
www.tiktaktik.tk
www.traffic.photos
www.where2.run
ystats.pw
zangofficetesting.esna.com

Other certificates including the domain name sparkntnu.no

(limited to 100 certificates)
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni114622.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni114622.cloudflaressl.com
firebaseapp.com
sni114622.cloudflaressl.com
sni114622.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni158972.cloudflaressl.com
thehunters.agency
firebaseapp.com
firebaseapp.com
sni.cloudflaressl.com
firebaseapp.com
astroslay.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni158972.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
broxbournemusicacademy.com
firebaseapp.com
firebaseapp.com
www.robo.im
firebaseapp.com
firebaseapp.com
sni114622.cloudflaressl.com
wcodes.org
quantri.mon-kids.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni114622.cloudflaressl.com
firebaseapp.com
sni114622.cloudflaressl.com
firebaseapp.com
firebaseapp.com
sni114622.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
beta.workzilla.co
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
ds.ekstraordinary.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni114622.cloudflaressl.com
sni114622.cloudflaressl.com
firebaseapp.com
pocker.dinnovos.com
firebaseapp.com
sni114622.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com

Certificate

The complete raw certificate details for basen.sparkntnu.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341769189858366461128848334183358058415318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 01:14:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 01:14:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'basen.sparkntnu.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1958 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accurateanalytic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algebros.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andregoncalves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anuartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.apphoven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ihomie.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsenalfirearms.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashutoshbilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basen.sparkntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bokuran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooksupholstery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.onify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code2vec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daleandray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.onify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbhatt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.warswarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docz.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eazy.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edo.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabler.renqvistsverkstad.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireboy.devrel.pub'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gear.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halffullheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hccnva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiregamma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illusio.show'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'influx.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intiainen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffshin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kasa-sushi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanbonindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapisentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lappfold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liesbethdoomen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.collegeai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lperezp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshallmutualinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merck.higoalsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightofthelivingdad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nms.noshufou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novusclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinesolutionsgroup.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthoculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacemaker.press'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.ihomie.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixenapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points.asokoinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poke.mxp.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polymertest.ipswichstake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prism.conjure.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resalehouse.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshot.raisedtolove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squirrel.coopers.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tactilepicturebooks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.levolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workouts.robertmorrison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpeacegame-hokkaido.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1link.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrapana.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aliaijaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitjuneja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrognito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appelerdeletranger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appseas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.averyvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bokuran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.code2vec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docz.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventfulapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facebooksearcher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatihkaratay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flixplay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.followthrough.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fongsea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.green-piezo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hccnva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopedekalbcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janp.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joannacox.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonas-jensen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katowulf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapisentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lperezp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manishgautam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marksilverwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalluxury.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playbypost.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potluckhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practical-architecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.precisiontherapybodyworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runicapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tactilepicturebooks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiktaktik.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traffic.photos'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.where2.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ystats.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zangofficetesting.esna.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001668a19fed40000040300483046022100a3bb93246d09f5354df98b373890de5efcbc0b89fbc57aab2b429422528da614022100ccd5279ad8f4a3fc79fd623fa4c24fd20732bd021f954b8667bf11c913d582790076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001668a1a006200000403004730450220181c7755a5ee1e2563d816d1059b7846ab8d1ae71d6e601a8be72919fb5cc5750221009e389cce449325fbcf11d68bfd1eaf41485a3d7334ea8fe17884371e03223587
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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