app.thejourneycurriculum.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0c:77:43:d7:6d:bc:e4:f7:ae:6c:0f:bb:b3:a8:b6:de:2b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.thejourneycurriculum.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:77:43:d7:6d:bc:e4:f7:ae:6c:0f:bb:b3:a8:b6:de:2b
Serial Number (int): 265578776583132322809498138721222913351211
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:45:4e:2a:1c:12:ad:3d:94:16:e1:60:2a:6a:13:52:d4:59:c6:9f
Fingerprint (sha256): 79:4f:68:fe:a4:56:15:34:e5:d3:a9:55:cb:17:c3:33:c6:c2:9c:d2:a1:6a:7e:e4:43:25:4e:b2:82:34:3c:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate app.thejourneycurriculum.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.thejourneycurriculum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.australianhoneyventures.com.au
admin.vykimo.com
api-us.vidiocall.com
aporcupine.com
app.kryptoskatt.com
app.shambasmart.com
app.silo.nyc
app.thejourneycurriculum.com
appleid.freeje.org
apps.yugverse.com
archerious.com
assets.dolmusic.uk
backlog.4kissa.me
bryanpereyra.dev
celsius.entrii.com.au
cms.hkprosperity.com
co-stay.com
comcast.talknagish.com
coordinated-enrollment-demo.wonderschool.com
dental.zuub.com
dev-atalaya.loreal.es
dev.talkaboat.online
devapoyo.canariasahora.es
discipline.sagc.edu.hk
docs.zksync.dev
dogueria1111.com.br
es.misterpattern.com
escalaralcoiaicomtat.org
eyakub.me
f.evang.dev
game.playarker.com
gastacomigo.net
get-tap.app
get.peprs.app
gmbtool.com
gouat-partner.goselfup.com
hassansystems.com
ianmooreis.me
ibb-employees.fridaycollective.co.uk
iqbot.com.br
launcher.phoenixnetwork.net
links.macca.cloud
mashcanta.maytav.me
matiasparentti.dev.ar
opentechbox.co.th
piyaminkunarak.com
portfolio.sidharthkaushik.com
qa-i.landslide2020.org
queromaterial.tarcisiomotta.com.br
sam.plus
sandbox-healthpass.poshvine.com
script.test.propps.com
shrdsk.me
signal-enterprise.enotice.io
sirat.app
smart.mysmarthotel.com
solxyz.spitch.jp
stage.journeyfoods.io
staging.bhashasangam.com
sublineautorob.com
success.churchnotesapp.com
sukazavr.ru
swtorslicers.org
test.bepay.finance
tiptruerich.com
tripadvist.com
upbrand.asia
vote62.codedsir.com
vue.blisspot.com
webonboarding.scoreskills.com
www.akkengineers.com
www.barnsandnobl.es
www.body-elegance.co
www.callnowbutton.com
www.civilia.io
www.daflh.com
www.dogquirk.dev
www.e-erac-online.com
www.ehm.az
www.facebooksearcher.com
www.fonzmusic.com
www.gastacomigo.net
www.hasinfratech.com
www.kimmiemarge.com
www.michaelpretorius.com
www.mygocr.net
www.nobawellbeing.com
www.remembersholding.com
www.robertwinters.nl
www.sharingour.life
www.sodatab.dev
www.sublineautorob.com
www.tripadvist.com
www.tudabit.com
www.vexi.cc
www.wordhunter.app
www.xdomu.com
www.zokishmael.com
xdr.digitalkeeper.io
zigmond.me

Other certificates including the domain name thejourneycurriculum.com

(limited to 100 certificates)
www.easyoptions.app
www.thejourneycurriculum.com
journey.juxt.digital
www.thejourneycurriculum.com
www.thejourneycurriculum.com
www.wurple.app
journey.juxt.digital
cms.smartplant.app
thejourneycurriculum.com
email.thejourneycurriculum.com
www.thejourneycurriculum.com
www.thejourneycurriculum.com
www.thejourneycurriculum.com
www.thejourneycurriculum.com
app.thejourneycurriculum.com
www.thejourneycurriculum.com
onetest-dev.oneclass.com.tw
www.thejourneycurriculum.com
journey.juxt.digital
app.thejourneycurriculum.com
journey.juxt.digital
www.thejourneycurriculum.com
thejourneycurriculum.com
sni.cloudflaressl.com
journey.juxt.digital
journey.juxt.digital
journey.juxt.digital

Certificate

The complete raw certificate details for app.thejourneycurriculum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265578776583132322809498138721222913351211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 20:11:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 20:11:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.thejourneycurriculum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.australianhoneyventures.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vykimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-us.vidiocall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aporcupine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kryptoskatt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.shambasmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.silo.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thejourneycurriculum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appleid.freeje.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.yugverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archerious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.dolmusic.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backlog.4kissa.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryanpereyra.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celsius.entrii.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.hkprosperity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co-stay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcast.talknagish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coordinated-enrollment-demo.wonderschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dental.zuub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-atalaya.loreal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.talkaboat.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devapoyo.canariasahora.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discipline.sagc.edu.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.zksync.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogueria1111.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.misterpattern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escalaralcoiaicomtat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyakub.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.evang.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game.playarker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastacomigo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get-tap.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.peprs.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmbtool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gouat-partner.goselfup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hassansystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ianmooreis.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibb-employees.fridaycollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqbot.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launcher.phoenixnetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.macca.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashcanta.maytav.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matiasparentti.dev.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opentechbox.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piyaminkunarak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.sidharthkaushik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-i.landslide2020.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queromaterial.tarcisiomotta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sam.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-healthpass.poshvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'script.test.propps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shrdsk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signal-enterprise.enotice.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirat.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart.mysmarthotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solxyz.spitch.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.journeyfoods.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bhashasangam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sublineautorob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success.churchnotesapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sukazavr.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swtorslicers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.bepay.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiptruerich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripadvist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upbrand.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote62.codedsir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vue.blisspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webonboarding.scoreskills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akkengineers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barnsandnobl.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.body-elegance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callnowbutton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civilia.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daflh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogquirk.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-erac-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ehm.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facebooksearcher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonzmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gastacomigo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hasinfratech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimmiemarge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelpretorius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mygocr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nobawellbeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remembersholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertwinters.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharingour.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodatab.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sublineautorob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tripadvist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tudabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vexi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordhunter.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xdomu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zokishmael.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xdr.digitalkeeper.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zigmond.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018afc87ebdd0000040300473045022067d0d9ec5a2b69e8b8d5ed9420001706d48ac1fbb04a425e657e40d62a7ae18a022100d2f8306351c0ec7b0a6ac91bb925e994837f5a50e92c70fc13efe27811843e89007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afc87ebf3000004030046304402203d878b1b6a9df2c51b5adcfa9b005998dd1b6c2c6fcfc2c08394d3cd390f072302200407ff00fe59f9a4685c365b15d9aa5171ca330d46edbfa3b2725ad314573d9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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