www.luffanet.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:d2:43:c7:58:23:a6:ca:40:f6:4e:b4:40:88:77:76:f8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.luffanet.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:d2:43:c7:58:23:a6:ca:40:f6:4e:b4:40:88:77:76:f8
Serial Number (int): 275227642278305255685251442492121405683448
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:67:cd:13:0e:54:b1:39:04:fc:ee:18:55:38:aa:d2:da:85:02:29
Fingerprint (sha256): 60:e9:a1:a5:2e:8a:60:6b:e0:53:29:16:8b:aa:42:48:a3:02:4e:bd:ca:9c:50:02:1f:ef:ca:1a:2f:1b:fe:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.luffanet.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.luffanet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accessfoundation.in
agile-cards-trello.spartez.com
ant.design.pro.chenshuai.pro
apci2018.com
as-ta.net
auth.brainbok.com
awadhdreamdanceacademy.com
backend.pitchview.de
bandmatchapp.com
benjaminolmsted.com
beta.stepfood.com
button.rinkeby.like.co
chat.forgirls.jp
consultpartners.hu
dontstarve.chenshuai.pro
dslrwale.in
elsalvadorgps.com
emilypancake.com
fb.ohe.so
findmeamovie.yanishproduction.fr
fitheat.club
fxdtokens.com
galacticpigeon.com
gifu.pubrepo.jp
hrochasolucoes.cv
juntasleyde.com
kiwicompute.com
left-over.eu
leroymerlin.buenatelier.com
lhvdesign.com.br
lqart.ie
luffanet.com
mbirings.com
messenger-staging.workhere.com
mettle-studio.com
modernmeatmart.com
mrelbank.com
multirater-rating.talentlytica.com
navia.ml
neartrends.com
nyherpatlas.org
photonaio.app
prashantbarve.com
psychopyko.com
raceday.etchells.org.nz
ridatechsolutions.com
riekehelmers.com
rupex.in
sample.engpago.com
schoolze.com
sprintauto.club
swello.io
tapethebox.nl
techcookbook.com
thebeeskneesvintagebar.com
theflybikes.com
tracking.redskyengineering.com
treatsby.me
tsar.traffic-up.ru
turbineinteract.com
turtleapp.online
ustcfcu.org
vesper.barkas22.ru
whatsapp.postcron.com
wuensche.maxweiss.rocks
www.apci2018.com
www.b2lunch.net
www.bandmatchapp.com
www.camberi.com
www.dee-haney.com
www.dslrwale.in
www.fitheat.club
www.fxdtokens.com
www.group.paradox.hr
www.hrochasolucoes.cv
www.jbc-sef.com
www.katpark.me
www.kiwicompute.com
www.klickspiel.net
www.left-over.eu
www.lhvdesign.com.br
www.lqart.ie
www.luffanet.com
www.mrelbank.com
www.podcastlaunch.pro
www.rayark.com
www.riekehelmers.com
www.runandy.com
www.sprintauto.club
www.techcookbook.com
www.temposensual.com
www.theflybikes.com
www.thexap.com
www.tvorimezlin.cz
www.tylucaskelley.com
www.viet.run
www.voltee.io
xn--vf4b17jsctv.com
xpromo.lotum.com
ymwtd.com

Other certificates including the domain name luffanet.com

(limited to 100 certificates)
rustonia.tk
www.mercedcapital.com
sni243666.cloudflaressl.com
app.realmendontporn.com
crystofab.com
www.paintsei.com
sni243666.cloudflaressl.com
www.torifuku-kaiou.tokyo
link.libere.co.in
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
www.juegosgratisya.us
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
terminator.sanbao.app
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
app.entreprenants.be
moreklatring.no
sni243666.cloudflaressl.com
www.produvar.nl
simpleservice.app
iptv.json.cl
sni243666.cloudflaressl.com
www.tscr.in
www.lendis.io
sni243666.cloudflaressl.com
nammy.luffanet.com
sni243666.cloudflaressl.com
news.fedium.com
gesticom-lda.com
www.urbankirana.in
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
www.rcubesystem.com
sni243666.cloudflaressl.com
console.kanoak.com
luffanet.com
dafidea.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
developer-overview.tk
www.mcareauto.com
sni243666.cloudflaressl.com
vmmc.strongline.smplabs.com
www.darshilpatel.com
sni243666.cloudflaressl.com
www.eceos.app
sni243666.cloudflaressl.com
nockdeighton.demo.movello.se
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
dineshbalaji.com
www.nalinj.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
galacticpigeon.com
sni243666.cloudflaressl.com
www.agaration.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
www.goconstruct.be
www.imobiliariameloimoveis.com.br
sni243666.cloudflaressl.com
www.eceos.app
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
valhalla.turnosweb.app
qrew.com.au
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
new.wefio.id
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
www.luffanet.com
ainomichelsen.com
taxdocuments.assure.co
www.klickspiel.net
nomeravto.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com
sni243666.cloudflaressl.com

Certificate

The complete raw certificate details for www.luffanet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275227642278305255685251442492121405683448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 07:14:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 07:14:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.luffanet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1913 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessfoundation.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agile-cards-trello.spartez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ant.design.pro.chenshuai.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apci2018.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as-ta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.brainbok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awadhdreamdanceacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.pitchview.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandmatchapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminolmsted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.stepfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'button.rinkeby.like.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.forgirls.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultpartners.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dontstarve.chenshuai.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dslrwale.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsalvadorgps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emilypancake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.ohe.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmeamovie.yanishproduction.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitheat.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxdtokens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galacticpigeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifu.pubrepo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrochasolucoes.cv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juntasleyde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwicompute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'left-over.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leroymerlin.buenatelier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhvdesign.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lqart.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luffanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbirings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger-staging.workhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mettle-studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernmeatmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrelbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multirater-rating.talentlytica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navia.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neartrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyherpatlas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photonaio.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prashantbarve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychopyko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raceday.etchells.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridatechsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riekehelmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rupex.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sample.engpago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprintauto.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swello.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapethebox.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebeeskneesvintagebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theflybikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.redskyengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treatsby.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsar.traffic-up.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbineinteract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turtleapp.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustcfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesper.barkas22.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsapp.postcron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuensche.maxweiss.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apci2018.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2lunch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bandmatchapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camberi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dee-haney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dslrwale.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitheat.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fxdtokens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.group.paradox.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrochasolucoes.cv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbc-sef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katpark.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwicompute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klickspiel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.left-over.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhvdesign.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lqart.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luffanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrelbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.podcastlaunch.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rayark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riekehelmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprintauto.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techcookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temposensual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theflybikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thexap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvorimezlin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tylucaskelley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viet.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voltee.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vf4b17jsctv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpromo.lotum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymwtd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001642168864c00000403004830460221008f506571a5aaa3e6a6f3a1874823caf65c02a237b864fb11a4e04dde9d1640f2022100f781378645c93137f927285dfb29e954a0b7761d3802d6298c97bfbd78ad6c8d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001642168864b0000040300463044022025d77d4199614372992b4737e5e190f36cf40c392eb17564aa805d648f064cfb02206372312ac4278a170343ba463423fe01d2f20f2cb769363a78c124b9cad0d34d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00799af58230017d4cba43bca71619605a1256b4e81ffe024477f46fc8b24abf7c0b5a366c6ed511ea7e06483a65ea17330b594a9d6ba35bb0ad57ca87af2231d154988a34a884df0f4e7cc6a66b58ec6f7f7c033dea353d0aef53a2f0af284bafaa804a4bd3a569834faf0469946ed7e52a149c82d086d35ecec9dbc55e53e5fb0f85312cca433794eeb1b7b774aa37f33aa7a83170689f413a2fb9a367c762c49e3632bac688edb3b18e29a42ea07f988cd03cfd06b2de6511b976177c66a5cdc6a53c5815e33c1d52db3381ccdf1863c0d917068295f981c18ac5a8a32db486a5007d80cc5cf805b4193a7069713579da5d7b669c92d2ad571e0c84242e065f