pai.parquesnacionales.gov.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:46:67:f3:1a:1a:7a:af:3f:66:0e:91:e6:9d:3c:21:e3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pai.parquesnacionales.gov.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:46:67:f3:1a:1a:7a:af:3f:66:0e:91:e6:9d:3c:21:e3
Serial Number (int): 288312750479009912591343064737702395781603
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e4:f2:96:aa:97:47:c8:a3:aa:a4:19:30:cc:6a:8d:1e:6b:20:41:96
Fingerprint (sha256): 5f:45:af:bf:1d:ba:28:62:27:ec:95:a6:52:b0:6c:0d:48:74:07:54:dc:86:d7:f5:fd:0f:f2:20:cb:81:5f:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pai.parquesnacionales.gov.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pai.parquesnacionales.gov.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acordoaereo.com.br
acrypto.io
acto.moreapp.com
admin-stg.tio.works
admin.conny.tech
admin.myketler.com
adminapp.syage.bluspark.io
alexwiley.co.uk
apostate-code.com
app.beerboy.online
app.contentflow.tv
app.edupulses.io
app.saint-maurice-montcouronne.bluspark.io
awardcrowd.com
beta.dev.logbee.com.br
branchbound.com
campusstore.co.za
candybar.kiev.ua
ccbpigeons.com.br
cdn.directed.ir
chuanyan.live
dearbudget.com
demo.dor-e.com
design.hoefer-hansen.de
dinuka.space
discountera.de
exchangevalet.com
formisfunction.io
getfoundevents.com
getscout.io
gggathering.com
goto.shimazu.me
grading.ywc.in.th
hazu.swiss
iaia.app
jaacie.com
karntrehan.com
kdsoctrang.xbot.com.vn
larnee.com
magnets.victorjouin.com
materialize.tech
meyer.town
mistrally.idboats.pl
mobile.allvirtuous.com
ngrome.io
notes.jjc1138.net
pai.parquesnacionales.gov.co
palaciorojo.cc
partner-stg.tio.works
pilot.vnlp.ai
podkite.com
portal.fictiontribe.com
rechner.nominandum.com
s3rabi.info
shakyapp.ru
sivakumar.website
standbyme-inc.com
summer19.co.za
surffevah.co.nz
thegarage.kr
trackforest.net
v2.alixe.co
vision.erp.ngo
wherestheclaw.com
www.acrypto.io
www.checkcarfortax.com
www.codegi.st
www.crazydesigns.co.uk
www.csgoclicker.net
www.digitalplanet.life
www.discountera.de
www.dragon.ml
www.enjoyme.tk
www.finovationapp.com
www.getscout.io
www.impactprofiler.com
www.itasca.co.in
www.kolakow.ski
www.masterpass.xyz
www.moflo.me
www.offerme.today
www.onedrivelink.com
www.pongtip-fishsauce.com
www.posly.jp
www.premioalajuventudtuxtepecana2019.com
www.raak.com.au
www.runaway.es
www.s3rabi.info
www.sanandresitoprincipal.cc
www.shafikjininy.es
www.sharingthekingdom.com.br
www.sportsrecoverylounge.com
www.supertweet.jp
www.thegarage.kr
www.trackforest.net
www.w8mediaworks.com
www.yalcinayasli.mobi
xn--schlssel-aufsperrdienst-cwele-obd.at
yalcinayasli.mobi
yugenrestaurants.co.in

Other certificates including the domain name parquesnacionales.gov.co

(limited to 100 certificates)
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
www.nimblereports.com
www.factsonclimate.org
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
www.cheesebear.games
old.parquesnacionales.gov.co
eve.asmy.dev
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
dashboard.308proxies.io
sni104018.cloudflaressl.com
energiebeheerders.nl
sni104018.cloudflaressl.com
parquesnacionales.gov.co
orfeo.parquesnacionales.gov.co
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
randyluecke.com
parquesnacionales.gov.co
sni104018.cloudflaressl.com
app.daychoose.com
sni104018.cloudflaressl.com
www.signsquare.co.in
www.blueteam.app
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
primemx.lernit.app
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
parquesnacionales.gov.co
sni104018.cloudflaressl.com
hanumanth.live
escrivaninha.pt
sni104018.cloudflaressl.com
parquesnacionales.gov.co
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
docs.modelify.ai
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
drycleanerlocator.com
www.taruc.com.my
sni104018.cloudflaressl.com
gatsby.tv
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
my.exp.nor.by
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
split.spoten.live
s.symptohealth.com
test-auth-api.parquesnacionales.gov.co
transfootball.com
sni104018.cloudflaressl.com
expertmodels.fr
sni104018.cloudflaressl.com
thijsdaniels.com
ffstudios.com.br
sni104018.cloudflaressl.com
sni.cloudflaressl.com
sni104018.cloudflaressl.com
actionnaire-dev.monjuridique.infogreffe.fr
pmstaging.planetbinc.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
app.produp.co
www.elminde.com
saprogel.lv
parquesnacionales.gov.co
docs.channel.sandbox.redeam.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
gatsby.tv
sni104018.cloudflaressl.com
www.bijaysapkota.com.np
my.subgem.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com
sni104018.cloudflaressl.com

Certificate

The complete raw certificate details for pai.parquesnacionales.gov.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288312750479009912591343064737702395781603
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 13:18:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 13:18:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pai.parquesnacionales.gov.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1955 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acordoaereo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrypto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acto.moreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-stg.tio.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.conny.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.myketler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminapp.syage.bluspark.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexwiley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apostate-code.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.beerboy.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.contentflow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.edupulses.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.saint-maurice-montcouronne.bluspark.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awardcrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.dev.logbee.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branchbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusstore.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candybar.kiev.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccbpigeons.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.directed.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuanyan.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dearbudget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.dor-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.hoefer-hansen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinuka.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discountera.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangevalet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formisfunction.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getfoundevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getscout.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gggathering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goto.shimazu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grading.ywc.in.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazu.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaia.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaacie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karntrehan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdsoctrang.xbot.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larnee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnets.victorjouin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materialize.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyer.town'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistrally.idboats.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.allvirtuous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngrome.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notes.jjc1138.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pai.parquesnacionales.gov.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palaciorojo.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-stg.tio.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podkite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.fictiontribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rechner.nominandum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3rabi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shakyapp.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sivakumar.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standbyme-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summer19.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surffevah.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegarage.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackforest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.alixe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision.erp.ngo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wherestheclaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrypto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkcarfortax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codegi.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crazydesigns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csgoclicker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalplanet.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discountera.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragon.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enjoyme.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finovationapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getscout.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impactprofiler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itasca.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kolakow.ski'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterpass.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moflo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offerme.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onedrivelink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pongtip-fishsauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.posly.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premioalajuventudtuxtepecana2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raak.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runaway.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s3rabi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanandresitoprincipal.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shafikjininy.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharingthekingdom.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsrecoverylounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supertweet.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegarage.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trackforest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w8mediaworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yalcinayasli.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schlssel-aufsperrdienst-cwele-obd.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yalcinayasli.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yugenrestaurants.co.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec1d42c2f0000040300473045022078f38f1429316d68911ad5b451a6d1778643b2f29646fb6d13d0bccf1cf44cea022100f8518eea729236d04962ee2d38684b18b7b386eef3e02e584cee8d686e398290007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec1d42c220000040300483046022100b9fbd9afd308d6f643f6f0affdd1ad759fd2d9a7f4b65c2cae7454418ff83dbd022100aedeaa4d42c8138e55e15810134eeab4d3af52e7cbb153912e9e0c2a66809932
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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