www.ovio.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:73:ca:99:d1:d1:5f:44:7b:80:9b:ff:21:5b:82:e9:91 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ovio.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:73:ca:99:d1:d1:5f:44:7b:80:9b:ff:21:5b:82:e9:91
Serial Number (int): 309810867081366843974827277302594151836049
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:d7:cd:64:08:eb:9e:dc:f2:9c:c0:30:62:38:f0:83:ac:78:09:bd
Fingerprint (sha256): 84:e3:b7:3e:fd:f2:8d:a5:e2:c7:ce:f0:31:36:ca:e1:25:d4:0a:ce:5d:27:4f:e1:c1:c4:c2:fc:4b:8b:1c:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ovio.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ovio.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aberrant.bprojects.es
admin.milcontratos.eu
adminapp.lafertealais.fr
ads.pickaapp.com
app.adminix.io
app.chargetrip.com
app.dev.ministeri.anccp.it
app.efatturazione.it
app.embeddsurveys.com
app.kubuni.de
app.lafertealais.fr
bahamutech.com
bible.immersivehistory.io
card.yai.io
catnaomi.com
cdocherty.com
citadele-career.lv
crm.todobot.io
d.maincore.site
damv.dev
datastudio.cogniteapp.com
digitalsoppkontroll.no
exam.medhashakti.com
futuretalks.dev
hellene.eu
hexescher.com
icqual.com
ilwy.in
inverze89.cz
joshuacaddy.com
journeytodev.com
kawhitrashtalk.com
links.laming.me
links.notefuel.com
ludo.codewala.in
marciomedia.com
mbamonebuild.com
meetyourmacronutrients.com
meraki-apps.com
nimda.thecubicle.us
novallider.com
panicotippspiel.com
productao.com
qatools.mindera.com
r.1upvms.com
resport.com.mx
ripsconsultancy.com
shipadevelop.com
shopstream.in
slamzoom.com
stage-cloud2.connectedboat.eu
staging.meetcece.com
sustainable.swcbba.org
tadanochat.club
tamirator.com
test.tradesku.com
vinedevelop.dev
way2programming.com
webapp.evenementaxa.fr
weilaixinghome.com
www.blackstrikes.com
www.book-tracker.com
www.curiousarts.org.uk
www.damv.dev
www.fernandomillan.me
www.freqs.net
www.gdg.es
www.gopremios.com.br
www.howtogetfreecrypto.com
www.hungryclub.com.br
www.infinityfitness.co.ke
www.inverze89.cz
www.jackclee.com
www.joblayn.com
www.journeytodev.com
www.kawhitrashtalk.com
www.kibbcom.in
www.kroozeo.com
www.layered.studio
www.leocorrea.fyi
www.loricorpsbdl.com
www.manianna.info
www.marciomedia.com
www.nasolab.co.za
www.nckpnny.com
www.nick.lv
www.novallider.com
www.ovio.org
www.paysly.io
www.questdot.io
www.shaileger.mx
www.tyltcars.com
www.vargaspaintandtexture.com
www.vikram-rawat.com
www.vinedevelop.dev
www.way2programming.com
www.weilaixinghome.com
www.xn--glbagzdeemlak-imbe65glw.com
yogabhidietbhi.com
yuvino.com

Other certificates including the domain name ovio.org

(limited to 100 certificates)
nanitetracker.com
grandma.digital
vendor.staging.tilly.cc
vendor.staging.tilly.cc
www.expresstrainroute.com
console.riskut.com
sensorfusion.tech
www.puzz.site
test.aspeppc.com
lel.28east.co.za
app.inata.trade
grandma.digital
embargoeddata.rightstracker.org
www.crisanger.cf
bender.brennaswitzer.com
quote.stge.keap.page
flexiecms.ml
blog.datacompass.com.br
www.titan2u.com
carnes.lupi.delivery
jackwgray.com
www.expresstrainroute.com
ovio.org
leetprism.co.za
cms.dimbong.com
sni.cloudflaressl.com
emma-igarashi.art
mugprinting.in
quiz.ennea.co.uk
pinpointdev-lmaa.cox2m.com
www.crisanger.cf
staging-api-dmp.ovio.org
sni.cloudflaressl.com
ovio.org
ovio.org
nevada.enotice.io
www.link2dreams.com
console.riskut.com
menab.co
www.temelbilgisayar.com
ovio.org
nannyintheair.com
test-admin.amoganardinero.com
www.titan2u.com
www.toonlens.com
www.link2dreams.com
staging-api-dmp.ovio.org
www.liquidgov.com
portal.freeyourgenome.com
www.ovio.org
cms.dimbong.com
app.t.at
www.liftwy.com
drip.danielangel.co
santoso.hendranata.com
www.artesaniasjpf.com
artilux-client.lychee.pro
www.bernardobernal.com
embargoeddata.rightstracker.org
live.edge.topia.tv
drip.danielangel.co
geekpaul.com
menu.sunsetdiner.ca
test-admin.amoganardinero.com
www.pif.vc
staging-api-dmp.ovio.org
www.abhiyanthindia.com
www.roboair.com
flexiecms.ml
ovio.org
staging-api-dmp.ovio.org
ovio.org
themanuskitchen.com
staging-api-dmp.ovio.org
nevada.enotice.io
grandma.digital
artilux-client.lychee.pro
www.puzz.site
grandma.digital
www.pif.vc
staging-api-dmp.ovio.org

Certificate

The complete raw certificate details for www.ovio.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309810867081366843974827277302594151836049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 23:21:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-08 23:21:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ovio.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1939 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberrant.bprojects.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.milcontratos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminapp.lafertealais.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.pickaapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.adminix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.chargetrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.ministeri.anccp.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.efatturazione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.embeddsurveys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kubuni.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lafertealais.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahamutech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bible.immersivehistory.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card.yai.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catnaomi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdocherty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citadele-career.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.todobot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.maincore.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damv.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datastudio.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalsoppkontroll.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exam.medhashakti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futuretalks.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellene.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexescher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icqual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilwy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inverze89.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joshuacaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journeytodev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawhitrashtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.laming.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.notefuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ludo.codewala.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marciomedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbamonebuild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetyourmacronutrients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meraki-apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimda.thecubicle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novallider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panicotippspiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qatools.mindera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.1upvms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resport.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ripsconsultancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipadevelop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopstream.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slamzoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-cloud2.connectedboat.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.meetcece.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainable.swcbba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadanochat.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamirator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.tradesku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinedevelop.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'way2programming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.evenementaxa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weilaixinghome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackstrikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.book-tracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curiousarts.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damv.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fernandomillan.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freqs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gdg.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gopremios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtogetfreecrypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hungryclub.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infinityfitness.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inverze89.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackclee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joblayn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeytodev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kawhitrashtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kibbcom.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kroozeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.layered.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leocorrea.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loricorpsbdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manianna.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marciomedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nasolab.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nckpnny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nick.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novallider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paysly.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questdot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaileger.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tyltcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vargaspaintandtexture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikram-rawat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinedevelop.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.way2programming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weilaixinghome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--glbagzdeemlak-imbe65glw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogabhidietbhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuvino.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001702752f9e60000040300463044022026833b70f77e269e97782a9f527e96f4e4e0f8275e8abdac02ce631ae3138dfb02203e492a64cb67ae3d2027286e1cbef969be69f648583fca7ffb12e0279e4731ad00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001702752fa28000004030046304402205ed198e255fe235016095b715bcee511b6735da104ae8e61f32c6c2ee5c1a0ce02204e5546250bfdafb95edf2e3e16716cf88a2561a56e2cf98f468fe4d1d8e9f36c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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