www.calculategst.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:59:da:a6:ee:fb:d4:c8:2c:db:b4:a4:b5:68:9f:4a:b6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.calculategst.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:59:da:a6:ee:fb:d4:c8:2c:db:b4:a4:b5:68:9f:4a:b6
Serial Number (int): 346526886123669608770438712251108319775414
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:16:fe:68:81:88:83:9f:00:60:48:21:53:74:d3:64:3c:b4:2f:29
Fingerprint (sha256): 7e:59:80:86:50:a9:5c:14:3a:eb:88:65:56:e8:c7:b7:9d:9a:23:b1:1f:f6:74:45:28:b4:9d:38:17:b4:d0:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.calculategst.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.calculategst.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

43qm-agentur.de
all-dayz.com
amazecreationz.in
ataximadrid.com
balancopatrimonial.xyz
baleroboys.com
barn2.market
beethoven.econyse.com
bitspocket.com
calculategst.co.nz
cerso.tv
cf-stage.bimlauncher.com
chucksapp.co.za
cm7.ycmjason.com
cobrand.it
cointsu.tokyo
datatile.eu
davidkamer.com
doneflow.app
emy.rickycorte.com
frontend.pe
funkygizmo.co.uk
gbl.cz
go.1tac.com
hbd.hiaham.com
integralservices.co.za
joan.dev
lemonmarketingagency.com
makemday.com
marion.ai
medlet.id
nbpt.eu
ninajumalaema.ee
orepormim.com.br
pixelhangers.com
prod.pixelhangers.com
projekte.spenoki.de
psims.games
radhasatam.com
ravichaudhary.dev
rhd.pta.schoolzesites.com
ritelo.id
roadtrips.antaragni.in
salihzain.com
se417-demo.mattconway.dev
simplepay.tk
skvere.com
smart-0000sm.ekitan.biz
soapbox.events
tamir.rocks
teika.vn
test.gctc.in
thecompendium.cards
thisinteractive.com
v17.gctc.in
verbly.3digit.dev
vjcrm.com
webgoodbe.com
wislovedating.com.hk
worksp.com
www.420blockchain.cloud
www.baleroboys.com
www.basicdigital.co.za
www.bruneiusedcar.co
www.bubbletech.io
www.calculategst.co.nz
www.cerso.tv
www.chucksapp.co.za
www.data607projects.com
www.datatile.eu
www.ellenhp.me
www.elson.dev
www.friendzone.app
www.gdghyderabad.in
www.integralservices.co.za
www.joan.dev
www.legendsrift.com
www.mariannesclinic.com
www.mateusantos.com
www.morningbalitour.com
www.ninajumalaema.ee
www.orepormim.com.br
www.psims.games
www.rbrt.red
www.ritelo.id
www.rousseau.dev
www.skvere.com
www.soapbox.events
www.stackwash.com
www.suryapowersunlimited.in
www.thecompendium.cards
www.thejokecan.com
www.unicorners.se
www.vjcrm.com
www.vuglar.com
www.worksp.com
www.writeboardtechnologies.com
www.yozo.co.jp
xeno.cf
yozo.co.jp

Other certificates including the domain name calculategst.co.nz

(limited to 100 certificates)
app-dev.boutiquemadame.be
sni160045.cloudflaressl.com
www.calculategst.co.nz
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
tribeofwolvesapp.com
rotomania3d.com
sni160045.cloudflaressl.com
www.simplecapital.ca
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
hod.encadyma.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
www.insighealth.com
sni160045.cloudflaressl.com
widget-staging.donr.ai
gethi.co
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
www.calculategst.co.nz
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
www.insighealth.com
vincebrook.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com
sni.cloudflaressl.com
sni160045.cloudflaressl.com
sni160045.cloudflaressl.com

Certificate

The complete raw certificate details for www.calculategst.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346526886123669608770438712251108319775414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 02:44:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 02:44:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.calculategst.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1795 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '43qm-agentur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'all-dayz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazecreationz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ataximadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balancopatrimonial.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baleroboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barn2.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beethoven.econyse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitspocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculategst.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerso.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf-stage.bimlauncher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chucksapp.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm7.ycmjason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobrand.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cointsu.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datatile.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidkamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doneflow.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emy.rickycorte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontend.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funkygizmo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbl.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.1tac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbd.hiaham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralservices.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joan.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonmarketingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medlet.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbpt.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninajumalaema.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orepormim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelhangers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.pixelhangers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projekte.spenoki.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psims.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radhasatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravichaudhary.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhd.pta.schoolzesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritelo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadtrips.antaragni.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salihzain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se417-demo.mattconway.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplepay.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skvere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-0000sm.ekitan.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soapbox.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamir.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teika.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gctc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecompendium.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v17.gctc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verbly.3digit.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vjcrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webgoodbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wislovedating.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.420blockchain.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baleroboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basicdigital.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bruneiusedcar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bubbletech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calculategst.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerso.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chucksapp.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data607projects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datatile.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellenhp.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elson.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendzone.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gdghyderabad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integralservices.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joan.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legendsrift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariannesclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mateusantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningbalitour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ninajumalaema.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orepormim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psims.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbrt.red'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ritelo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rousseau.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skvere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soapbox.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stackwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suryapowersunlimited.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecompendium.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thejokecan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicorners.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vjcrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vuglar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worksp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writeboardtechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yozo.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeno.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yozo.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e062ac30d0000040300473045022042bf4ea374f9cab3699b8fc92f4a116f1736cffedfbd299524e1295b02b5ad75022100b61fa9a8e02bd9b1c66eec6367fd3d08a742ba2a215780159e339baa507a81d900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e062ac30f0000040300463044022028077788d46be74cde2636ccc58e29fdcfd9f988483f3f660e56386b0dd90a56022012a20a57dc06079a630993fb5ab1efca34a240d491f4e93e31436283f119d01b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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