www.sos-childrensvillages.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number ef:da:34:d3:06:86:c6:0a:f9:0c:14:52:36:c2:a8:e4 was issued on by Sectigo Limited.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sos-childrensvillages.org

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): ef:da:34:d3:06:86:c6:0a:f9:0c:14:52:36:c2:a8:e4
Serial Number (int): 318818483112217007793400033708723054820
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d4:31:b5:63:4f:25:20:98:e6:46:78:52:38:80:c9:23:8b:71:54:5d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): f5:41:7d:af:b6:8a:61:b0:9e:51:a7:b7:3a:5f:c6:03:ef:5d:65:87
Fingerprint (sha256): 5d:5a:5e:bf:9a:cb:e9:ce:01:da:60:44:d5:bf:47:b5:86:34:8d:86:24:2a:3f:e4:24:09:f5:54:25:d4:23:d2

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.sos-childrensvillages.org

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sos-childrensvillages.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sos-childrensvillages.org
aldeasinfantiles.org.co
aldeasinfantiles.org.pe
aldeasinfantilessos.cl
dona.sositalia.it
future.sos-kinderdorf.at
give.sos-usa.org
mein.sos-kinderdorf.at
meine.sos-kinderdoerfer.de
mitglieder.sos-kinderdoerfer.de
nataleaziende.sositalia.it
rataufdraht.at
soscambodia.org
soshongkong.org
sosvietnam.org
wichtelpost.sos-kinderdorf.at
www.4raum.at
www.aldeasinfantiles.or.cr
www.aldeasinfantiles.org
www.aldeasinfantiles.org.ar
www.aldeasinfantiles.org.bo
www.aldeasinfantiles.org.co
www.aldeasinfantiles.org.ec
www.aldeasinfantiles.org.gt
www.aldeasinfantiles.org.hn
www.aldeasinfantiles.org.mx
www.aldeasinfantiles.org.pa
www.aldeasinfantiles.org.pe
www.aldeasinfantiles.org.py
www.aldeasinfantiles.org.ve
www.aldeasinfantilessos.cl
www.aldeasinfantilessos.org.do
www.aldeasos.org.ni
www.aldeassos.org.sv
www.aldeias-sos.org
www.aldeiasinfantis.org.br
www.hermanngmeineracademy.org
www.hermanngmeinerakademie.org
www.juquest.at
www.lehrher.at
www.ombuds-sos-childrensvillages.org
www.rataufdraht.at
www.sos-bangladesh.org
www.sos-childrensvillages.ae
www.sos-jamaica.org
www.sos-kinderdoerfer.org
www.sos-kinderdorf.at
www.sos-somalia.org
www.sos-syria-ar.org
www.sos-syria.org
www.sos-usa.org
www.sos.or.id
www.sosacrowdfunding.org
www.soschildrensvillages-arabic.org
www.soschildrensvillages.lk
www.sositalia.it
www.sosnepal.org.np
www.sosphilippines.org
www.sossouthafrica.org.za
www.sosthailand.or.th
www.sosthailand.org
www.we-r-sos.at
www.wichtelpost.sos-kinderdorf.at

Other certificates including the domain name sos-childrensvillages.org

(limited to 100 certificates)
www.sos-childrensvillages.org
www.sos-childrensvillages.org
www.sos-childrensvillages.org

tls.automattic.com
www.sos-childrensvillages.org



tls.automattic.com



www.sos-childrensvillages.org

soryan.us


www.sos-childrensvillages.org


www.sos-childrensvillages.org
tls.automattic.com




www.sos-childrensvillages.org





www.sos-childrensvillages.org














Certificate

The complete raw certificate details for www.sos-childrensvillages.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFAXqRBgsuvuoJJLQOOp
146RptxnBLn6FVkxIRMEr9EVJfbzoN+nLJvf4nc3QdK7cqITlHdDrS84CWNe5A7J
/98LXkhnMp4EV5loGBE8m+XBqAu7t41qlDyNSnUXZ+HIhk/s2QMcQzRWtmuV39Dx
HsoIuUz/NGE7sFWPIcrzwPaQLgMLHvvox/Q8GYs+MMO2MitxUVD5RBKrHW7Fqf1h
ufj9tNXdxJmPjc+uMsz7fN+SRrEd0iXVP+x7yf/9qLhw01puoXo614+M176SFxKy
NoU5zyAlWya6Qohb4sn3TgdIXrQGtCCse4i5qbF4hHNI3QEPlcTtop4+c3o2H5kg
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318818483112217007793400033708723054820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sos-childrensvillages.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24277249599492664222187810977401385345974704867685453628441668701667113833235618684413819747434869084453583229040997674311899080936511929322099144920103554596946950305878456176807767126387854852506103375251821503183048702858887965825973306868446286036262876767051044538128590387359186206163645635994169438845990218719177657244459326845827651856261856741156737496320952553138357967010602351467937620348143653548608637278849525810278283619912581168288854215851427717415140101111047381673140770110169832728888953477582007308024474418442166991906899409783630726275574147870510878189693430098825847567147909793117267107961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d431b5634f252098e64678523880c9238b71545d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1571 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-childrensvillages.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldeasinfantiles.org.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldeasinfantiles.org.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldeasinfantilessos.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dona.sositalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'future.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.sos-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meine.sos-kinderdoerfer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitglieder.sos-kinderdoerfer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nataleaziende.sositalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rataufdraht.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soscambodia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soshongkong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosvietnam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wichtelpost.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4raum.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.or.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantilessos.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantilessos.org.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasos.org.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeassos.org.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeias-sos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeiasinfantis.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermanngmeineracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermanngmeinerakademie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juquest.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lehrher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ombuds-sos-childrensvillages.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rataufdraht.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-bangladesh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-childrensvillages.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-jamaica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-kinderdoerfer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-somalia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-syria-ar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-syria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosacrowdfunding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soschildrensvillages-arabic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soschildrensvillages.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sositalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosnepal.org.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosphilippines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sossouthafrica.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosthailand.or.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosthailand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.we-r-sos.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wichtelpost.sos-kinderdorf.at'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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