novaseq-x-tour.illumina.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ea:cc:20:1c:bb:ac:ed:02:f2:23:dc:f0:76:c4:eb:77:68 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=novaseq-x-tour.illumina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:cc:20:1c:bb:ac:ed:02:f2:23:dc:f0:76:c4:eb:77:68
Serial Number (int): 341234260902196589586291998518518401955688
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:2d:b1:c4:9b:8b:60:d0:95:f3:16:4d:a5:ef:c6:ec:3d:82:72:44
Fingerprint (sha256): 9c:11:d5:e0:f9:ba:48:b1:ef:9c:8b:32:46:74:67:22:c4:04:2a:1c:74:a1:f2:ae:00:3b:86:13:29:7b:93:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate novaseq-x-tour.illumina.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for novaseq-x-tour.illumina.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.elorchi.com
admin.justonecard.fr
admin.ngtec.site
admin.sailcourier.com
anusornleo.site
api.geia-app.com
app.dashbrain.us
app.puzz.fun
app.yorochange.com
auth.elixor.io
auth.menu.sinproapps.com
bagelen.tech
capitalwisesolutions.org
champions21.sbem.fun
checkout.xanum.mx
claimcare.trilops.com
clemencedeclercq.com
companylink.magic-asterisk.com
dev.piscada.online
dev.portal.einride.tech
development.app.pathmatch.com
djonidjonishop.com
drawfuse.com
dynamic.app.liven.com.au
f-c-d.xyz
feedfest.stapleverse.xyz
finance.nokanel.tech
firmas.glahden.com
get-her-back.xn--8z3a.net
guion.ricardocabret.com
jocuri.superbet.ro
jswwministries.com
landscape.vipro.online
lending.apeswap.finance
lighthousetrust.in
link.app.messengerx.com
link.stage.messengerx.com
linkpage.top
marmaty.com
mm.janbina.com
monarchyfoodstuff.com
monyandj.com
nagoo.in
nihalpuram.com
novaseq-x-tour.illumina.com
oldphq.partnerhero.com
photoinstaxsemarang.com
piklocal.com
processoseautomacoes.cloud
production-app.qonic.com
programerr.com
pundirvaibhav.in
religion-note.xn--8z3a.net
samagratech.in
sellerbud.com
selvaviswanath.tech
sergiomassip.com
servicios-al-contribuyente.xn--adianteappsmxico-mqb.com
shapaterflix.online
shopperseller.online
shortcutarchive.marcotammaro.it
somosmorris.com
spectratechnologies.in
sqoop.solo.io
staging.start.partnerhero.com
sugarless-india.com
survey.vipro.online
throne-hub.com
weberger.net
www.alain-m.site
www.ateliersduoui.ch
www.badgen.net
www.camaraturvelandia.go.gov.br
www.chmlasrozas.es
www.djonidjonishop.com
www.lordsguilda.com
www.manascounselling.com
www.mextesol.smartcom.mx
www.migentebarberia.com
www.mlghistoria.pl
www.rsbg.ch
www.serviciosneo.com
www.simonabloom.com
www.simplemusic.co.uk
www.ubezpieczonedzieci.com
www.webexpe.com
www.xn--m6t16n0udb18a.com
www.xn--schn-hausen-tfb.com
www.xn--skrtsj-rua.com
xn--12cbpo3dgo5did3b5eb5cwa8a5bl7nrgoa4d.net
xn--299a69z2mr.com
xn--42ca6gb2i0b8d.com
xn--72c0a2db2m.com
xn--m6t16n0udb18a.com
xn--mller-gebudereinigung-e2b75c.de
xn--nv8h.wwho.me
xn--oasisurbanovia-2nb.cl
xn--schn-hausen-tfb.com
xn--skrtsj-rua.com
xn--skrtsj-rua.no

Other certificates including the domain name illumina.com

(limited to 100 certificates)
secure07.stage.lithium.com
ussd-prd-arcp01.illumina.com
ussd-sbx-zpac06.illumina.com
sapgtsprd.illumina.com
lims-rc.illumina.com
dev.rancherpd.illumina.com
dev-prdt.illumina.com
ipp-dev.illumina.com
sgnt-dev-zpac04.illumina.com
lab.adamshealthnetwork.org
instrument-scheduler.ils.illumina.com
sapmiidev.illumina.com
tableausbx.illumina.com
adm-fab-san-prd.illumina.com
prdt.illumina.com
devchat-bluejeans-service.aws-prod.illumina.com
incapsula.com
vault.oad.illumina.com
cpc-jenkins.ep-np.illumina.com
incapsula.com
cds1.cvent.com
grr.illumina.com
ussd-prd-dswb03.illumina.com
gokpi.illumina.com
eventregistration.illumina.com
tst2.etpsolr.illumina.com
*.subscription.illumina.com
supportassets.illumina.com
ontology.testing-domain.illumina.com
*.iron-tst.illumina.com
rancher-vye.aws-dev.illumina.com
UKCH-PRD-SNMD02.illumina.com
*.cloud-test.illumina.com
sso.login.illumina.com
www.alexhang.com
cds1.cvent.com
www.illumina.com
api.sequencing-design.designstudio-staging.illumina.com
tierboard-dev.illumina.com
wgs-preprod.illumina.com
controlmdev.illumina.com
*.docker.illumina.com
cds1.cvent.com
api-tst.add.illumina.com
expwy.apac.illumina.com
components.illumina.com
www.providerportal.ils.illumina.com
othrys.olympia.k8s.backend-dev-aws.illumina.com
software.radiance-design.illumina.com
finvivirstatus.mambu.com
secure07.stage.lithium.com
tls.automattic.com
*.cloud-test.illumina.com
ipp.illumina.com
softwaredownloads.illumina.com
ussd-dev-zpac04.illumina.com
ussd-ftp.illumina.com
company.ensvee.com
ussd-dev-smap01.illumina.com
ussd-tst-etpw01.illumina.com
ussd-prd-hpad03.illumina.com
vaultdev.illumina.com
ashg2020.illumina.com
*.basespace.illumina.com
*.rancher-dev.illumina.com
cds1.cvent.com
inotifications-dev.illumina.com
sapeccprd.illumina.com
finvivirstatus.mambu.com
hub-dev.illumina.com
solr-ldap-service.illumina.com
login.illumina.com
incapsula.com
usma-prd-rdgw01.illumina.com
cds1.cvent.com
blog.infra.illumina.com
rancher-thtf.aws-dev.illumina.com
*.cloud-naboo.illumina.com
myaccess-sbx.illumina.com
secure07.stage.lithium.com
ussd-prd-clms02.illumina.com
platform.illumina.com
rancher-test.aws-prod.illumina.com
ukga-prd-hpov03.illumina.com
esb13-n1.illumina.com
incapsula.com
secure07.stage.lithium.com
finvivirstatus.mambu.com
*.testing-domain.illumina.com
*.ca.basespace.illumina.com
*.oad-aws.illumina.com
ussd-prd-snmd04.illumina.com
ussd-prd-okta01.illumina.com
secure07.stage.lithium.com
delivery-api-bssh.ils.illumina.com
cds1.cvent.com
ussd-prd-sfdcspkl.illumina.com
blog.arwinstrating.com
splunkes.illumina.com
wgs-preview.illumina.com

Certificate

The complete raw certificate details for novaseq-x-tour.illumina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341234260902196589586291998518518401955688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 12:07:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 12:07:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'novaseq-x-tour.illumina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.elorchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.justonecard.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ngtec.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sailcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anusornleo.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.geia-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dashbrain.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.puzz.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.yorochange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.elixor.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.menu.sinproapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagelen.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalwisesolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champions21.sbem.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.xanum.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimcare.trilops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clemencedeclercq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companylink.magic-asterisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.piscada.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portal.einride.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.app.pathmatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djonidjonishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drawfuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic.app.liven.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f-c-d.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedfest.stapleverse.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.nokanel.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firmas.glahden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get-her-back.xn--8z3a.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guion.ricardocabret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jocuri.superbet.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jswwministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landscape.vipro.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lending.apeswap.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lighthousetrust.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.app.messengerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.stage.messengerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkpage.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.janbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchyfoodstuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monyandj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagoo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nihalpuram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novaseq-x-tour.illumina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldphq.partnerhero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoinstaxsemarang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piklocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processoseautomacoes.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-app.qonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programerr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pundirvaibhav.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion-note.xn--8z3a.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samagratech.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellerbud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selvaviswanath.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sergiomassip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicios-al-contribuyente.xn--adianteappsmxico-mqb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapaterflix.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopperseller.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortcutarchive.marcotammaro.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somosmorris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectratechnologies.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqoop.solo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.start.partnerhero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarless-india.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.vipro.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'throne-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weberger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alain-m.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ateliersduoui.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badgen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camaraturvelandia.go.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chmlasrozas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.djonidjonishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lordsguilda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manascounselling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mextesol.smartcom.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.migentebarberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlghistoria.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsbg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviciosneo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simonabloom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplemusic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubezpieczonedzieci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webexpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--m6t16n0udb18a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--schn-hausen-tfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--skrtsj-rua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--12cbpo3dgo5did3b5eb5cwa8a5bl7nrgoa4d.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--299a69z2mr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--42ca6gb2i0b8d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--72c0a2db2m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--m6t16n0udb18a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mller-gebudereinigung-e2b75c.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nv8h.wwho.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--oasisurbanovia-2nb.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schn-hausen-tfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--skrtsj-rua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--skrtsj-rua.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cb0891fc1000004030047304502206f5bf17ad0321d836241f16bed6ecca0715729869eb553c37c06282d843cad2d022100ccd6f4f41402e734dbae6b4b9b6e49a0b3087f04a49ab4a5b0c28c139478d8f700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb089210600000403004830460221008e1281ebf60567ace272f638a10bffe11231837df6f3419c7da52918a5ddd3110221009e6ad4133da38fada7ff5cf7e6eb70db42143d1ecd7237f3ce83edf55c612b18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00796404f5d9ba2fbcd6c891abb937ce0d7ebd273437c30d735314e5065d8e08a37ddf7d0f3bab757fb59c5286344d484c9c32dd52f4800e1a827061d1e50dc20f9a0e366b5cb6d9ce5690259880966ad190a9966c99347854e572f9a1e7660d619378423585c997d8d9389ad673505ca182ce64c635f5502c002950b9f936a0437376237d61c8b4280f3a7ebbe81b64ddb79a8bd2dfb77b2859b0c3b94deaa069ce1eed478b4e6b61709b3899153c6d630f50d3224d81d69ad0dca74fbf35f17455590cff42f7bad04053e3ca87aaa5730988bc9679d1fab1cfa2d22449b6e6ae80cdfd195b242c133022e1d72a9e62210cad5b6ac9c8ef7d14b3a0d37e5bb52b