app.fit-q.net

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:39:c7:c6:5a:95:ab:1c:2c:02:47:02:9d:68:29:00:d6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.fit-q.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:7a:39:c7:c6:5a:95:ab:1c:2c:02:47:02:9d:68:29:00:d6
Serial Number (int): 302928109845563777392988146389662569136342
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:1b:4c:f7:65:b5:83:46:e8:bf:3d:2f:c0:46:3a:31:23:8c:52:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:21:87:d3:b5:71:69:57:85:ad:9a:72:95:49:43:11:d3:44:eb:a7
Fingerprint (sha256): 78:79:98:05:5f:3f:93:50:77:ee:a8:af:a8:cf:4f:63:77:ed:24:c8:c5:5b:c6:08:fa:32:4e:00:41:32:04:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate app.fit-q.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.fit-q.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2018.devfest.istanbul
2024.rachamechta.com
accounts.huntinggrounds.app
admin.legal.coconala.com
admin.marquee.activecove.com
admin.traitte.store
admin.v-pbx.net
agent.specialtraffic.nl
akshitharamalingam.com
alpha2.disedia.com
anvarat.com
api.raygum.com
api.telov.app
app.fit-c.com
app.fit-q.net
app.telemedicinacafam.drclik.com
app2.studyu.health
appadmin.globalpulses.com
auth-dev.stafftraveler.app
auth.karaokemassacre.com
auth.nucalm.com
auth.stafftraveler.app
auth.staging-account.kintoneapp.com
auth.techblogposts.com
bacsel.com
bigeacademy.com
brandonblackmon.com
candylanduae.com
cashy.pl
cryppig.com
demo.xn--adianteappsmxico-mqb.com
designer2.studyu.health
dev.tokenregistration.3rbehavioralsolutions.com
dev.wola.softkesla.com
drclik-qa.bop-tech.com
escrevame.cloud
eyoc2024.pl
giftcard.rituals.com
goldtime.online
hiru3.akting.eu
home.mindgeek.com
icnh.simuladodetran.com.br
indelearn.com
join.prayroom.io
join.quokkasac.com
jsd-online-demo.preemptive.com
jusmulticreation.ca
kris-mont.pl
labombetta.be
linbly.com
link-test.rituals.com
link.kura.se
link.seven.app
links.apexcapitalcorp.com
mivacunacol-dev.bop-tech.com
navkarstudio.in
nickiwoods.com
portal.swimtrack.com.br
refer.mslgames.com
seznamvkapse.cz
staging-api.ula.africa
test.myvyoo.ai
testnet.sharemanage.com
tm-mx-dev.bop-tech.com
tst-karcher.elrego.com
unidays.retorio.com
url.ginih.com
vivirmasfacil.com
www.agendafacilcliente.com
www.anvarat.com
www.candylanduae.com
www.ceabragado.com
www.easemysocial.com
www.enjoygaadi.com
www.ingops.com.co
www.jordimiro.com
www.kareemmbityaza.com
www.liam.kiwi
www.linbly.com
www.meese.pl
www.mercadophone.com
www.odisign.com
www.raqamshasy.com
www.rikzugames.com
www.sdvx.net
www.technologytoolkit.clevelandmetroschools.org
www.xn--82c4adcd7cf7cc7dnbe0a1d5uc.com
www.xn--lbben-kva.app
www.xn--rd-yia.app
www.yashgaikwad.com
xn--2t8h.puf.io
xn--82c2c.xn--12cnk7c9exbyetc8b.xn--o3cw4h
xn--aktivoli-brse-rmb.de
xn--chrt-moa.li
xn--comesaapropiedades-s0b.com.ar
xn--domicilioscaaveral-y0b.com
xn--l1acrl.xn--p1ai
xn--lbben-kva.app
xn--rssmann-n2a.de
xn--supaal-zwa.com

Other certificates including the domain name fit-q.net

(limited to 100 certificates)
www.editionsgrandschamps.fr
baywa.rgateway.it
fit-c.com
cadastro-develop.taniafruchi.com.br
fit-c.com
www.gasolineradio.com
app.fit-q.net
app.fit-c.com
fit-c.com
pixelart-ar.com
sorich.jp
fit-c.com

Certificate

The complete raw certificate details for app.fit-q.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302928109845563777392988146389662569136342
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 21:51:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 21:51:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.fit-q.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							331b4cf765b58346e8bf3d2fc0463a31238c5266
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2018.devfest.istanbul'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2024.rachamechta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.huntinggrounds.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.legal.coconala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.marquee.activecove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.traitte.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.v-pbx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.specialtraffic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akshitharamalingam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha2.disedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anvarat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.raygum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.telov.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fit-c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fit-q.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.telemedicinacafam.drclik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2.studyu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appadmin.globalpulses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.stafftraveler.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.karaokemassacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.nucalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.stafftraveler.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.staging-account.kintoneapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.techblogposts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigeacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandonblackmon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candylanduae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryppig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.xn--adianteappsmxico-mqb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designer2.studyu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tokenregistration.3rbehavioralsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wola.softkesla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drclik-qa.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escrevame.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyoc2024.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcard.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldtime.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiru3.akting.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.mindgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icnh.simuladodetran.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indelearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.prayroom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.quokkasac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsd-online-demo.preemptive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jusmulticreation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kris-mont.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labombetta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linbly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-test.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.kura.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.seven.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.apexcapitalcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mivacunacol-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navkarstudio.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickiwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.swimtrack.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refer.mslgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seznamvkapse.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-api.ula.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.myvyoo.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testnet.sharemanage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm-mx-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-karcher.elrego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidays.retorio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url.ginih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivirmasfacil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agendafacilcliente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anvarat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candylanduae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceabragado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easemysocial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enjoygaadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingops.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jordimiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kareemmbityaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liam.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linbly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meese.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercadophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raqamshasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rikzugames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdvx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technologytoolkit.clevelandmetroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--82c4adcd7cf7cc7dnbe0a1d5uc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--lbben-kva.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--rd-yia.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yashgaikwad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--2t8h.puf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--82c2c.xn--12cnk7c9exbyetc8b.xn--o3cw4h'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--aktivoli-brse-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--chrt-moa.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--comesaapropiedades-s0b.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--domicilioscaaveral-y0b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--l1acrl.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lbben-kva.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rssmann-n2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--supaal-zwa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ed482812200000403004730450220425dea2f9fed1ff8c6fcc9446da51e56080f08b02d58723079f2b3498e0b25d702210084ef7f7e5810bdfca9096aeef2e64a8334fa229e5f62fd10773643ee99a428c2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ed482813b0000040300473045022010669189f73b41be786acdffec428379b04c2a8df444a1847ecabcf6d05bf577022100ccdd6fca5ad293fa6992e7fef858a4e050db9644441983d2f881243bc671e09d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0051b6691eb524897a6961887adb9699c4bc1da7dd0336d400a2baa1abd3017f62ddb99fa5719f9631889461576007f0204980c1613fe14a6d1589c9848125cd6e4268caf9ae0cc1fe372281364ce9f5d06fc3baa1a1d6f5dc6e220cdd5c111620e65c091dfa5ee9e154b2ced30df0e7a1c7227d6c6d9719d0f5ca7b86a8675587625e5ec86036e29a30f0e873fc398a7d0c73156615ae8d471e4e2e4f2c1ffd11ce17b5a974872b0ed7c359b78f7434c49e2d9865f93a3a724b24a687428cfd44d5c238d894aa591a3f17b9bdf0e6c617101f2c09966fbe96e7b612f649ffa90d2fa5ad5e37c363a860cb82cac3c2d724cbbff43bc8fe4f895c378859c02491c1