chiin.org

Issued by R3

About this certificate

This digital certificate with serial number 04:ba:01:6c:df:c2:2f:a6:30:88:0d:89:13:c5:ff:29:1c:6c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=chiin.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ba:01:6c:df:c2:2f:a6:30:88:0d:89:13:c5:ff:29:1c:6c
Serial Number (int): 411743558508754399316360829077463883127916
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ce:41:22:1c:c3:db:e8:83:dd:10:90:89:cf:fc:29:43:98:e2:5d:98
Fingerprint (sha256): 66:f5:f3:bb:be:2a:35:39:0d:78:b0:b0:cd:c2:3e:34:6a:b3:41:ed:b4:86:3a:01:af:ad:ea:48:bc:ed:2a:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chiin.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chiin.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

achook.dev
admin.checkvin.org
admin.datarips.com
admin.postredi.com
admin.verdetrader.com
app.exploreeden.com
app.fishlabs.in
app.islafood.net
app.rrr.cat
app.xn--btvakten-9za.no
appdirectory.thebrent.net
auth.lnq.is
auth.octo.asuc.org
auth.seven.app
auth.whatnigerianswant.com
borealcode.com
cafeteriaessence.ngtec.site
chart.xn--bb0bw4mtof.kr
chiin.org
chiragdhorajiya.in
confessto.me
crm.avi-dev.com
dashboard.fr.skipr.co
dashboard.verdetrader.com
demo.platforma.agencjapower.pl
docs.gnvperformance.com
donate.shinningstars.org
dwoth.com
exame-inater.digitallabgratis.com
firebase.rudylee.cn
fixed.com.co
geneal.com.mx
gmontejo.com
home.opensites.io
iot.fishlabs.in
jlp.collaborative.fm
johntell.se
jslee.io
link.glowvietnam.com
live.xn--sirkusskjrgrds-vibn.no
mywordle.strivemath.com
packdoc.itsraghav.com
parkbird.dk
phonebookapp.in
piscada.online
pos.sterve.shop
promocion.proiily.com
provider.parentiv.com
remboxbo.com
rikzugames.com
rolls-skating.com
sejong.cz
sharing.idreamgs.com
siliconggv.tech
time8b.com
togesports.in
user-dev.legal.coconala.com
vcard.sharemeapp.de
vip25.mitting.de
vizio.blackdove.io
voidemon.online
web.parentiv.com
wedding-of-ardy-renita.itsyourdayofficial.com
wehack.dev
whatsnext.daryanritul.in
www.chiin.org
www.chrealty.com.mx
www.confessto.me
www.dyballoons.com
www.finfid.in
www.flvw.app
www.geneal.com.mx
www.kanapkaman.pl
www.liftexpo.es
www.medixs.jp
www.muntprijs.nl
www.neyx.in
www.novoinmobiliaria.com.mx
www.parkbird.dk
www.pono.com.pl
www.sagarbhure.com
www.schneider-robin.de
www.sejong.cz
www.wehack.dev
www.wyjazdycypr.pl
www.xn--elkevakuutukset-1kb.com
www.xn--elkevakuutukset-1kb.fi
www.xn--gleichgewicht-ernhrungspsychologie-r4c.at
www.xn--grunnbelp-s8a.no
www.xn--hlytyslista-l8a.fi
www.xn--ndibklia-e1ab.com
xn----8sbucdnecjjb4cf.xn--p1ai
xn--24-6kcadb7dwak4gzd.xn--p1ai
xn--24-ftidu.com
xn--56h.gg
xn--ardiseointerior-3qb.com
xn--berlebenmitklopapier-oec.de
xn--christianmagaa-2nb.com
xn--elkevakuutukset-1kb.com
xn--elkevakuutukset-1kb.fi

Other certificates including the domain name chiin.org

(limited to 100 certificates)
fchat2020.wpvi.ru
studyplan.questt.com
www.nextzoft.com
mhe.posstaging.point4more.com
www.ffftickets.com
chiin.org
text.snapcom.com
hoggwarts.com
jlp.collaborative.fm
www.ffftickets.com
d-vote.nl
moby.im
www.respirucr.com
stu.fastai.dev
jlp.collaborative.fm
www.discaste.com
chiin.org
uri.ginih.com
www.discaste.com
www.xn--0ns955jhnb.tw

Certificate

The complete raw certificate details for chiin.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411743558508754399316360829077463883127916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 22:14:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 22:14:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chiin.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achook.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.checkvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.datarips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.postredi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.verdetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.exploreeden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fishlabs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.islafood.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rrr.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.xn--btvakten-9za.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdirectory.thebrent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lnq.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.octo.asuc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.seven.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.whatnigerianswant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borealcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafeteriaessence.ngtec.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chart.xn--bb0bw4mtof.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiragdhorajiya.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confessto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.avi-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.fr.skipr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.verdetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.platforma.agencjapower.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.gnvperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.shinningstars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwoth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exame-inater.digitallabgratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.rudylee.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixed.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geneal.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmontejo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.opensites.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iot.fishlabs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlp.collaborative.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johntell.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jslee.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.glowvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.xn--sirkusskjrgrds-vibn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywordle.strivemath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packdoc.itsraghav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkbird.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonebookapp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piscada.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos.sterve.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promocion.proiily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provider.parentiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remboxbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rikzugames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolls-skating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sejong.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharing.idreamgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siliconggv.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time8b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togesports.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-dev.legal.coconala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcard.sharemeapp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip25.mitting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vizio.blackdove.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voidemon.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.parentiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedding-of-ardy-renita.itsyourdayofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wehack.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext.daryanritul.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrealty.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.confessto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyballoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finfid.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flvw.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geneal.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanapkaman.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftexpo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medixs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muntprijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neyx.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novoinmobiliaria.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkbird.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pono.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagarbhure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schneider-robin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sejong.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wehack.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyjazdycypr.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--elkevakuutukset-1kb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--elkevakuutukset-1kb.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--gleichgewicht-ernhrungspsychologie-r4c.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--grunnbelp-s8a.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--hlytyslista-l8a.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--ndibklia-e1ab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn----8sbucdnecjjb4cf.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--24-6kcadb7dwak4gzd.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--24-ftidu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--56h.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ardiseointerior-3qb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--berlebenmitklopapier-oec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--christianmagaa-2nb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--elkevakuutukset-1kb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--elkevakuutukset-1kb.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab4dff0c2000004030046304402202f4bb8bce7c069300686f793dc3393497248ca584709c94e2aa321af2aae24e4022019d1eff743431a7f6c24b6f61a9f975dd37a8d6ca4e49cd195d4aba42ed9971d007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ab4dff10100000403004730450221008e91d9ac0ebe177883e6ab1721f0b93599e3700424b5bdcf297b8ef094dd6f7002207ec18adaa211c95eb9168b21ecc0176fb7c2fd07f7d8a1d4aebc9f8919c4a7ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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