mijn.bakkerplusfinance.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:01:fc:49:70:2d:7f:2c:68:22:00:54:a7:33:7c:33:e4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mijn.bakkerplusfinance.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:01:fc:49:70:2d:7f:2c:68:22:00:54:a7:33:7c:33:e4
Serial Number (int): 314423546211254811769489065784917712712676
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:26:18:7d:43:36:03:93:39:9d:bb:4a:9f:6c:dc:15:6d:9c:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:65:af:29:1d:19:b5:93:23:df:0b:c4:b5:22:c2:a0:44:9c:b9:9e
Fingerprint (sha256): 81:62:06:a4:08:f8:80:bc:ad:37:80:1f:d4:bc:f1:6e:f3:83:6f:f6:b7:de:ad:e0:e4:84:4f:3d:a8:d3:bd:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mijn.bakkerplusfinance.nl

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mijn.bakkerplusfinance.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alfinbi.id
api.newsbee.app
app.pattern.health
ashwinupadhyaya.com
backend.mikiz.online
cherryhillparkpool.org
chloeandmatt.co.uk
dctechcommunitychampions.org
demo.inapp.store
diversitytraining.pacle.org
dreamlight.technology
expertservicos.com
fastswims.com
functions-test.lovef.se
games.scottcrossen.com
geeks.joyin.io
ginco.io
grubsy.xyz
grzegorzbach.pl
hbot.io
headless.stgairasia.com
honhang.me
juggernauts.be
karoldanko.com
kindred.com.ph
kolozycia.pl
landscapedigital.io
login.hostelcetamol.com
lovef.se
magnificentfuture.com
mattandchloe.co.uk
meetkarbon.com
mijn.bakkerplusfinance.nl
mymusclenote.com
myyolo.life
nazotoki-bingo.com
noktaconsulting.com
ntgdt.com
partisan.mobileappster.co.uk
paynow.services
quero-falar.com
reliantdpc.com
reports.intelliflowio.com
ryanwilson.rocks
saascriptions.io
sketchandcode.io
teamhex.se
ten.minmeeting.com
tenta.pt
theplumstudio.pl
thijsremie.nl
toolkit.mobileappster.co.uk
tourlife.rocks
treehole.website
violetalabs.com
wait-time.io
wallet.aiacapital.org
whatc.app
widgets.goodmoves.com
ww.w.mynevo.com
www.agoact.com
www.aktisintelligence.ai
www.baeckerei-reider.at
www.chloeandmatt.co.uk
www.cropperz.co
www.cryptowow.io
www.danieledemartino.tk
www.dreamlight.technology
www.ginco.io
www.grzegorzbach.pl
www.honhang.me
www.housesellersource.com
www.juggernauts.be
www.kindred.com.ph
www.laplayitamusicfestival.com
www.lcandmartini.com
www.logosnews.tech
www.machinelove.io
www.macrodatum.com
www.meadstdenver.com
www.mvvmengenharia.com.br
www.nazotoki-bingo.com
www.newsbee.app
www.nhome.app
www.nn2020.wedding
www.playsap.tv
www.premill.co
www.purimcharity.org
www.quero-falar.com
www.raysh.io
www.react-minesweeper.com
www.reliantdpc.com
www.ryanwilson.rocks
www.sakanahoabinh.com.vn
www.sigur.io
www.thijsremie.nl
www.thomas-trumpp.de
www.treehole.website
www.violetalabs.com
www.xn--agnciajourney-qhb.com

Other certificates including the domain name bakkerplusfinance.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for mijn.bakkerplusfinance.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CHRlubQhFxrCEkgN0H8
+lZQQURKMcDF8QQ/ZldAZNZEHppksW135ijEm+8InJn38DreQt7P5QeDODAOawTb
CxmGnpoRCJxiK05qs3d3Thqh/UPpLHhFjejn3+eoRoqpBKse1tf/1mWol1OW91RN
6Yb/Z6wb/EnE3Z84TY4qZvZl/qeQYqLvRqC+2bglBMf0tyoqlakVqf67gnqgyhu1
wSIaAuzYgsbsIAJy+ACniw8Z8zZAPYT/v/ZhgtOwtQzhvhQ84tG/M65814QxP1Ws
9MDqkuMuCpjeBuTkpz+mlP4/ky197XEnA+HpxD7SAYP1YDhqmJKEhBB+1tySMcbA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314423546211254811769489065784917712712676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 16:58:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 16:58:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mijn.bakkerplusfinance.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27284150499537146789952154706414613413357791206566447558216284621154365654606034297537995798787694344276208315118499090143892852201847590261832124584117311753040985788293720291067974109361480483773066781301026230265533817190318772662123601110678261555412408799598179712457072620212337780267362802769198101214505649438400029520137924720910697231927871795614626391498753815895790610387457864525585989181494861564085620635696411354933505469805122117224377563530875104504735562992728296450650542891440557404253765099032766742033102924663555877150375475539806953295235306982437055529773648568652777574209183806470496895139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f26187d43360393399dbb4a9f6cdc156d9c5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1964 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfinbi.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.newsbee.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pattern.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashwinupadhyaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.mikiz.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherryhillparkpool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chloeandmatt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctechcommunitychampions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.inapp.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversitytraining.pacle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamlight.technology'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expertservicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastswims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'functions-test.lovef.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.scottcrossen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geeks.joyin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginco.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grubsy.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grzegorzbach.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headless.stgairasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honhang.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juggernauts.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karoldanko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindred.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolozycia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landscapedigital.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hostelcetamol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovef.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnificentfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattandchloe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetkarbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.bakkerplusfinance.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymusclenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myyolo.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazotoki-bingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noktaconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntgdt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partisan.mobileappster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paynow.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quero-falar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reliantdpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.intelliflowio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanwilson.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saascriptions.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sketchandcode.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamhex.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ten.minmeeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theplumstudio.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thijsremie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolkit.mobileappster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourlife.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treehole.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'violetalabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait-time.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallet.aiacapital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatc.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.goodmoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.w.mynevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agoact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aktisintelligence.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baeckerei-reider.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chloeandmatt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropperz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptowow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danieledemartino.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamlight.technology'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginco.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grzegorzbach.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honhang.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housesellersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juggernauts.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kindred.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laplayitamusicfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcandmartini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logosnews.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.machinelove.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrodatum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meadstdenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvvmengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nazotoki-bingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsbee.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhome.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nn2020.wedding'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsap.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premill.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purimcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quero-falar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raysh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.react-minesweeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reliantdpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryanwilson.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sakanahoabinh.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sigur.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thijsremie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomas-trumpp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treehole.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.violetalabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--agnciajourney-qhb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2f6f5d5a00000403004830460221008753fc376ba081b7da252dd736f9960b40e2c61d9ae19eaec3304227e0917ac3022100af154e9450cfd3b4b419ce1b1153d55a5f7ecb65148d0c86e3b08fc3674b42e300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c2f6f5d750000040300483046022100c30fe599fde36558e2c67455512ad0491449c49c197b9ef35cf4e2005e59c8dc022100a0a1ef4d38609369134c4b6b69dd6aee42ecf9860236cec16659c5a12bc1bb11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a1dc12635ff5ffadf167ee4309800d3a57b9fbea9f5f8e529d6a1464f9da59f869644fd4319c686e9e428f7f5dd256bdde1beac24d6d38ecfeb5e00068e3a5c870d3edf5fc2992b62a072e60af2c731cbfff736ec46915532007481ad01cf0e10347c2bec5b51ff5aad8cdffa21dac236d03658e50f3dcf6dd758766ea1e00c86bcf3ae3707a721a7a0e0a557d44e1e2e6e1be853fd9bca5c00747ced1f3f40eaacdcccb260879ba961c227f9b040d679fa13bd8e2cb073cc7aa4088dece3c41313a68dc1fedd0bdf6ffab01b10c801cb19f8c48e5f6e74fffbe011481ce40801a92cfef118910fafe812bc62c3ed7601768d126f900390465f08296060e20b