assuras.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:40:eb:91:d3:01:94:c2:1a:95:82:cb:3d:ee:2b:8f:ed was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assuras.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:40:eb:91:d3:01:94:c2:1a:95:82:cb:3d:ee:2b:8f:ed
Serial Number (int): 323694824680971493196690397420235761881069
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:ca:b3:f9:fd:c1:e7:22:a8:60:37:2d:7e:3d:d3:53:11:b8:6b:c1
Fingerprint (sha256): 79:30:fe:8c:8e:30:8a:19:43:cc:f7:ae:13:8b:29:39:8f:ae:52:84:e3:ac:dc:e9:ef:f9:b3:0b:77:0b:0f:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate assuras.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assuras.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

add.auktionstipset.se
admin.app.tripp.com
admin.gug.cz
altamiraresponde.com
ambassador.youareaceo.com
amulet.design
anyware.software
apotek.commitcode.com
app.bandup.rocks
app.bornhardt.io
app.meup.com.br
app.selfiebmi.com
app.tripp.com
assuras.ca
bamboohutmv.com
barbaservices.com
braincuz.com
checkout.mischiefapp.com
cirugiabordallo.com
console.intrinsicskyline.com
cphtweedride.dk
dancerico.com
dev1.equixapp.com
djungelorm.com
easyfeedback.xyz
elinor.pro
emmy.fi
f.valc.re
fishingarchitecture.com
frustration.pw
gl.wbuy.pro
hightechtele.com
hodldek.io
instruct-me.com
jose-antonini.com
kelasmc.com
link-mk-dev.carebook.com
lucidvisiongamers.com
mclaurent.com
melodyfawn.com
mirror.pascal-iske.de
moneyplanner.io
mongeseguroviajero.com
nasahapps.com
numerise.in
nws.projectcpn.eu
onawake-software.com
prova.tinyprogrammers.ga
pusheen.dev
samhindley.com
sb-rl.interaktiv.sg
sportsorganize.com
ssmotorsportscars.com
staging.lopery.com
stockwork.minhdo.info
tellatale.se
test.microhustle.af
usergroup.viscuit.com
varun.xyz
www.anglove.pl
www.assuras.ca
www.bamboohutmv.com
www.bymeapp.es
www.chord-collection.com
www.cioforaday.works
www.cirugiabordallo.es
www.crossroadscreate.com
www.dewailly-multiservices.fr
www.dimodigital.lk
www.easyfeedback.xyz
www.edua.pw
www.frustration.pw
www.greencrestsolar.com
www.healey-mood-log.com
www.hodldek.io
www.indiepine.com
www.isthectadelayed.com
www.iv-club.com
www.jose-antonini.com
www.julianastrada.com
www.keepeurekastrong.com
www.kelasmc.com
www.lestnitsa-vladimir.ru
www.mclaurent.com
www.melodyfawn.com
www.namegeneratormachine.com
www.ormeaupimpama.com.au
www.papudorent.cl
www.rabreu.dev
www.streetartoronto.com
www.targetedthreats.com
www.tigermou.com
www.treenodesmedia.com
www.webit.com.pl
www.whereareyou.gangslab.com
www.xn--napitp-tta.hu
xn--kpenbok-90a.se
xn--napitp-tta.hu
zimmineralsprospecting.co.zw
zionbm.co.il

Other certificates including the domain name assuras.ca

(limited to 100 certificates)
sni103292.cloudflaressl.com
cdn.imani243.com
www.fashio.se
www.entelocean.com
www.entelocean.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
go.sheech.app
sni103292.cloudflaressl.com
webpopstudio.com
firebase.auth.bethesomm.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
www.lamalabs.io
m.modelchat.app
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
dev-api.tappable.io
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
app.fiell.com.br
cmx.prodeo-live.com
sni103292.cloudflaressl.com
www.physiochat.app
sni103292.cloudflaressl.com
herwigserpieters.be
assuras.ca
sni103292.cloudflaressl.com
nappn.kognitivet.se
assuras.ca
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
app.billauto.fr
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
links-meetnorth.westlinkclient.com
www.ffsb.co.uk
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
startups.sicrux.app
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com
webpopstudio.com
herwigserpieters.be
sni.cloudflaressl.com
sni103292.cloudflaressl.com
www.assuras.ca
wavelength.mattsolano.com
sni103292.cloudflaressl.com
gwgsprockets.com
www.fikhrie.net
firebase.auth.bethesomm.com
www.ormeaupimpama.com.au
sni103292.cloudflaressl.com
sni103292.cloudflaressl.com

Certificate

The complete raw certificate details for assuras.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323694824680971493196690397420235761881069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 05:14:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 05:14:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assuras.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1979 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'add.auktionstipset.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.app.tripp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gug.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altamiraresponde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambassador.youareaceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amulet.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyware.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apotek.commitcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bandup.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bornhardt.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.meup.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.selfiebmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tripp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assuras.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamboohutmv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braincuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.mischiefapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirugiabordallo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.intrinsicskyline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cphtweedride.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancerico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.equixapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djungelorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyfeedback.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elinor.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmy.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.valc.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishingarchitecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frustration.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gl.wbuy.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hightechtele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hodldek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instruct-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jose-antonini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelasmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-mk-dev.carebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucidvisiongamers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclaurent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melodyfawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.pascal-iske.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyplanner.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mongeseguroviajero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasahapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numerise.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nws.projectcpn.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onawake-software.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prova.tinyprogrammers.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pusheen.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samhindley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb-rl.interaktiv.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsorganize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssmotorsportscars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lopery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockwork.minhdo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellatale.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.microhustle.af'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usergroup.viscuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varun.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anglove.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assuras.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bamboohutmv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bymeapp.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chord-collection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cioforaday.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cirugiabordallo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossroadscreate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dewailly-multiservices.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dimodigital.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyfeedback.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edua.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frustration.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greencrestsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healey-mood-log.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hodldek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiepine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isthectadelayed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iv-club.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jose-antonini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.julianastrada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepeurekastrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelasmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lestnitsa-vladimir.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mclaurent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melodyfawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namegeneratormachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ormeaupimpama.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papudorent.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rabreu.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streetartoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.targetedthreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tigermou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treenodesmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webit.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whereareyou.gangslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--napitp-tta.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kpenbok-90a.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--napitp-tta.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimmineralsprospecting.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zionbm.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c50f7494e0000040300483046022100e85e3824855322b8a84e177994f81dd9d4c508d74561183e43f35ce1536b430b022100f155dc6a2a200edfd11011f13541edc8799901e2a60903da7375eece2963b557007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c50f74b5f0000040300483046022100f78adfd847b1c66a79447751147bedfa32e314cd604bf992535dd10a85b67aa40221008b314b9520d39f5fb6a8a6ad1fc791e3e55ce50eeb3c608fb852b629794e2c06
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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