bees-stg.portosegurofaz.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:e8:19:0a:12:7f:b4:0c:d3:15:a7:eb:26:bb:4e:d1:09:5b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bees-stg.portosegurofaz.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:19:0a:12:7f:b4:0c:d3:15:a7:eb:26:bb:4e:d1:09:5b
Serial Number (int): 427427935850762990665835512727575161014619
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:91:cb:13:43:d2:ab:da:b3:de:57:ad:50:02:3c:ef:82:89:d7:fe
Fingerprint (sha256): 79:14:e6:1a:29:00:1e:de:38:0f:0e:57:ab:71:8a:d7:82:2a:1d:a4:06:52:a3:49:17:7d:d1:a3:5b:64:83:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bees-stg.portosegurofaz.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bees-stg.portosegurofaz.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abracaf.instaviagem.com
admin-web.hitthebox.com
admin.bilditon.com
admin.nathantravels.com
aduwata.lk
amtwain.com
andresarriagasrl.com.ar
anisurreza.com
api.ruiluntran.com
app.cuentea.es
app.photochromic.io
auth.opesjet.com
banked.me
barplazacurico.pedix.app
bees-stg.portosegurofaz.com.br
brain.psittacus.com
braxtondiggs.com
carbon.protectourwinters.org
cdn-staging.mmsfindthecrew.com
cdn.clix.app
classes.wowbyann.com
covid19.narxtech.com
dev.ydin.com
dl.melonkotak.com
docs.colfenixgps.com
dowjonesmidnight.com
driver.galyon.app
farah.iksandi.com
firmware-sdk-docs.golioth.io
fuelmanagementsystem.qimtronics.com
getapp.qawafel.sa
granadasocial.bracelit.es
host.catchergames.com
jameseppsinsurance.com
janaicoffee.tokyo
jhihyulin.tech
kindeep.me
lotti.vietswiss.io
massifcapital.com
mattiacci.com
milvetid-widget-dev.veteransadvantage.com
minerva2.hrbot.com.br
mumineenapp.savemydinar.com
myanimal.kokkiri.kr
olivershi.net
oracle.cornercart.io
panel.braingineers.com
piriapunkis.uy
plastic-omnium.civitimeapp.com
portal-beta.inmunocel.com
preview.datasciencegt.org
privacy-legal.subxtech.com
projectluca.com
public.zen-schedule.com
qr.rezajuliandri.my.id
sandbox-razorpay.poshvine.com
slides.rousseau.dev
smrtsgn.com
socio.svep.com
storybook-staging.a-combinator.com
test.gclocked.com
thebocksapp.meuspedidos.online
thereness.io
thitsarparami.org
trade.remodelingdata.com
twst.mekos.site
udn.lionbase.hr
video-conference.eventx.io
viko.org.ua
web.coala.dev
www.arik.sydney
www.atspaceport.com
www.canopykids.ca
www.chekam.com
www.essentialmed.co.za
www.fortunesettlements.com
www.getmooney.com
www.getmoreproof.com
www.gsloca.com.br
www.herbslongevity.com
www.ionrise.io
www.jualmesindigitalprinting.com
www.lauriercs.ca
www.magneandnatalia.com
www.mapgallery.online
www.menuhog.com
www.mprojext.com
www.mrtokari.com
www.msia.club
www.phares-decouverte.fr
www.staxxinvaders.com
www.stefankheider.com
www.tomstgeorge.com
www.truetomyart.com
www.unikhire.com
www.votepilipinas.com
www.watchnews.org
www.xbench.app
zaqtrade.anviko.it
zenmode.nuvelio.com

Other certificates including the domain name portosegurofaz.com.br

(limited to 100 certificates)
demo.midknight.co
api.portosegurofaz.com.br
newpeace.jp
paraworks.io
mybot.be
www.eatsteps.com
getter.co.in
meuportal-dev.portosegurofaz.com.br
gatorsnft.io
appsgoods.com
www.apptimestamp.com
www.medscienceanimations.com
monettcommunity.church
remitano-scam.com
laemcasa.portosegurofaz.com.br
frbimoveisbr.com.br
portosegurofaz.com.br
www.onlinetagebuch.de
www.fhslbw.co
www.trabee.co.kr
www.impresanera.ng
taqui.online
auth.iware.com.br
portal.portosegurofaz.com.br
www.vantty.co
soscasaitau.portosegurofaz.com.br
app.silicanetworks.net.ar
firesupper.com
amoeba.nu
join.gdgadoekiti.com
portal.portosegurofaz.com.br
www.genuus.com
www.tgawed.club
www.formulalabs.io
nagham.ae
api.portosegurofaz.com.br
identidadcom.com
foretop.ai
api.portosegurofaz.com.br
onegraphapp.com
www.trabee.co.kr
console.kanister.app
www.allofthisuk.com
javierfcast.com
auth.mana.town
portal.portosegurofaz.com.br
cms.tuv.portosegurofaz.com.br
api-fazmais-staging.portosegurofaz.com.br
app.shoppingsaobernardoplaza.com.br
greenmart.africa
myfootballcv.co.za
candymountain.io
nagham.ae
spunbeat.com
confess.link
fazmais.portosegurofaz.com.br
eigeneffort.com
fhtechtaiwan.com
studyhall.earth
www.opaste.app
ditalipizzaria.lupi.delivery
pipcoin.co
eject.io
eigeneffort.com
marketing.portosegurofaz.com.br
api-stg.portosegurofaz.com.br
portosegurofaz.com.br
gafisa.portosegurofaz.com.br
portal.portosegurofaz.com.br
www.myfretbuddy.com
www.portosegurofaz.com.br
caeruleus.tehfreak.com
remitano-scam.com
app.spisdinvaegt.dk
www.portosegurofaz.com.br
postalbibleschool.by
www.laundry.lk
wali.lumbungkasih.com
bpm.portosegurofaz.com.br
*.portosegurofaz.com.br
white-label-sectionalconfig-test.3dcloud.io
www.degrandisphysicaltherapy.com
www.doradoz.com
www.veraison.ru
welcome.frienli.com
homolog.portosegurofaz.com.br
www.slamathkku.com
dublostudios.co.uk
www.habitat.com.vc
www.oktoberfest.thepub.com.co
doskai.com
www.sparkline.app
outdoorflorida.org
telhanorte-stg.portosegurofaz.com.br
truestock.smallblueidea.com
scott.swapp.work
octpa.com
www.vaanisaifm.com
grizzlycomputing.com
mbfgroupholdings.ae

Certificate

The complete raw certificate details for bees-stg.portosegurofaz.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427427935850762990665835512727575161014619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 19:27:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 19:27:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bees-stg.portosegurofaz.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abracaf.instaviagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-web.hitthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bilditon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nathantravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aduwata.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amtwain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andresarriagasrl.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anisurreza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ruiluntran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cuentea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.photochromic.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.opesjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banked.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barplazacurico.pedix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bees-stg.portosegurofaz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brain.psittacus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braxtondiggs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbon.protectourwinters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-staging.mmsfindthecrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.clix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classes.wowbyann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.narxtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ydin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.melonkotak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.colfenixgps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dowjonesmidnight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driver.galyon.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farah.iksandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firmware-sdk-docs.golioth.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelmanagementsystem.qimtronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getapp.qawafel.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granadasocial.bracelit.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.catchergames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jameseppsinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janaicoffee.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhihyulin.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindeep.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotti.vietswiss.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massifcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattiacci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milvetid-widget-dev.veteransadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minerva2.hrbot.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mumineenapp.savemydinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanimal.kokkiri.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivershi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oracle.cornercart.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.braingineers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piriapunkis.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plastic-omnium.civitimeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-beta.inmunocel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.datasciencegt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy-legal.subxtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectluca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.zen-schedule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.rezajuliandri.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-razorpay.poshvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slides.rousseau.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smrtsgn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socio.svep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook-staging.a-combinator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gclocked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebocksapp.meuspedidos.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereness.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thitsarparami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.remodelingdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twst.mekos.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udn.lionbase.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-conference.eventx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viko.org.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.coala.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arik.sydney'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atspaceport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canopykids.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chekam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essentialmed.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortunesettlements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getmooney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getmoreproof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsloca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herbslongevity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ionrise.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jualmesindigitalprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauriercs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magneandnatalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapgallery.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menuhog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mprojext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrtokari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msia.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phares-decouverte.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staxxinvaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefankheider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomstgeorge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truetomyart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unikhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.votepilipinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watchnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xbench.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaqtrade.anviko.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenmode.nuvelio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00aaa19d40e7bb0a1803ae71798eabacbf0cbf8ffa3e6e9b88461c97fa8d0026d60e0fe8ac1b8ef50f2c4bea2730aa5bdd727437d5ae8695d95831483f06a27ff06164abf83b076385bd18cf9fb07bcea545f95d6f8bc94f750dbf346e7057e0b60a0f61769c443ec78db69c96c324bf3a45a375b870fdcf40d05efbcd21fbe90bb0ead106336e3819ba8a3cea427be3eac080c82df5cf0877b43303edcb112a4cedb67f06a9fa79afb872741dd6e7e90b912cc0ba07a2b79bbad388c64c3295850316ffe0da9c6f7c04eecffd3e827c237cc500de7f733e987274c96053a1be3d0424b856fba1240b10bc6b48faf96c144df401052078a202be7e57b354906526