cliohealth.aspire-dev2.com

Issued by R3

About this certificate

This digital certificate with serial number 04:46:91:0b:99:dd:2b:c1:e8:60:51:47:12:8c:62:33:ac:5a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cliohealth.aspire-dev2.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:91:0b:99:dd:2b:c1:e8:60:51:47:12:8c:62:33:ac:5a
Serial Number (int): 372461707706892571263436051450111615806554
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:d1:b8:99:43:b3:76:f0:7d:2f:cb:2d:e6:79:59:06:a8:3e:d9:29
Fingerprint (sha256): a1:8f:7a:65:e2:31:30:20:e6:e3:04:73:75:5c:fd:7d:33:16:b6:43:92:f9:ab:5a:b0:47:37:da:f9:b3:dc:d3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cliohealth.aspire-dev2.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cliohealth.aspire-dev2.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aa.r42.ch
aaa.r42.ch
accounts.rereceipt.cc
admin.passcard.psu.ac.th
ahkeongtrading.com
alaminamdar.tech
api-stage.platzbuchung.de
app.3ccd.com.br
app.jiniquick.com
app.mercadoenergias.com.br
app.test.thinkly.me
app.xn--stlstrimmen-hgb.no
appikorn.com
arhitekstudio.com
auth.cheqii-dev.myronng.com
auth.e-tea-pro.com
bardaat.biu.ac.il
beta.solcial.tech
bnkoverview.online
buildthink.io
bytehype.io
casacielo.com.co
castomr.com
cliohealth.aspire-dev2.com
cryptoislandpump.com
cuario.tech
dev-betboss.iframe.survive.bet
dev.scorethebusiness.com
everyday.market
excotro.com
fixakorkort.se
fundacioncoloresperanzameta.com
glooshot.solo.io
iglesiadaij.com
install.oledcomm.net
investor-flow.salesmonk.co
iskconsolapur.org
l.jarrad.co
langbot.tech
link.development.totem.team
m.stg.charitableimpact.com
maasters.tech
melusyn.com
meu.org.in
mikrotik-red.nmerken.com
milestoneshealthcentre.com
miltonfigueredo.tech
mirotsanev.tech
montawat.xyz
neuland.disedia.cloud
nikitaphilippe.xyz
old.backoffice.prexsell.com
onelink.bazaar.chaayos.com
otaku-no-ibekare.emradc.xyz
parasjasuja.tech
portalhash.com
psyducks.kukke.dev
savemoney.cl
setup.homewizard.com
socolive.zone
softleafgame.com
squarefeetdeveloper.in
static.gosunow.com
steeljobs.pl
tapajoscomercio.com
tstruong.dstteam.com
ueplan.idappstudio.com
uwapp.tech
wifipublicitario.com
www.about.getyrl.com
www.adwarsgame.com
www.ahkeongtrading.com
www.amen.bible
www.bitengos.com
www.brownedandtoasted.com
www.edwinhoksberg.nl
www.ercgeeks.com
www.excotro.com
www.inmobiliariaecheverria.com
www.malaksadekapps.com
www.marzanoarchitects.com.ar
www.miltonfigueredo.tech
www.nadood.com
www.rahultalukdar.in
www.search.library.ethz.ch
www.sebastianmangini.com.ar
www.shayar.tech
www.tycoonhamlet.com
www.udegree.co
www.widdall.link
www.xn-----8kcdwplbpcboibzlhjr4w.xn--p1ai
www.xn--72cf5auzgog3l8a8b0e6a4ee.com
www.xn--bydner-yxa.se
xeeriye.com
xn--950bs4kopb7xebykephca275mvqieif.com
xn--colgia-r3a.org
xn--kmaburada-p3a82f.com
xn--o39aomfqn3p30mk5cl1r.com
xn--opushazrcim-5zb.com
xn--pdden-sra.no

Other certificates including the domain name aspire-dev2.com

(limited to 100 certificates)
alaminamdar.tech
milestoneshealthcentre.com
api.tinito.app
xn--y8ja6ob5749g5na497h.app
aspirevc.aspire-dev2.com
investor-flow.salesmonk.co
www.ffreefire2021.ga
vprs-demo.vipro.online
andhaadhirehab.in
*.aspire-dev2.com
www.managerservicesgroup.com
alaminamdar.tech
milestoneshealthcentre.com
aspirevc.aspire-dev2.com
player.sasip.lk
api.tinito.app
*.aspire-dev2.com
*.aspire-dev2.com
cliohealth.aspire-dev2.com
pre-sale.idol.land
andhaadhirehab.in
xn--y8ja6ob5749g5na497h.app
cliohealth.aspire-dev2.com
satyamnx.store
cliohealth.aspire-dev2.com
aspirevc.aspire-dev2.com
api.tinito.app
satyamnx.store
aspirevc.aspire-dev2.com
passcard.psu.ac.th
host.circlys.com
*.aspire-dev2.com
xn--gavers-tua.dk
*.aspire-dev2.com
*.aspire-dev2.com
*.aspire-dev2.com
api.tinito.app
*.aspire-dev2.com
link.yiuivan.cc
*.aspire-dev2.com
link.yiuivan.cc
passcard.psu.ac.th
mpath-signup.aspire-dev2.com

Certificate

The complete raw certificate details for cliohealth.aspire-dev2.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372461707706892571263436051450111615806554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 21:40:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 21:40:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cliohealth.aspire-dev2.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa.r42.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaa.r42.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.rereceipt.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.passcard.psu.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahkeongtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaminamdar.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-stage.platzbuchung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.3ccd.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.jiniquick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mercadoenergias.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.test.thinkly.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.xn--stlstrimmen-hgb.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appikorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arhitekstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.cheqii-dev.myronng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.e-tea-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bardaat.biu.ac.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.solcial.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnkoverview.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildthink.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytehype.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casacielo.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castomr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliohealth.aspire-dev2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoislandpump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuario.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-betboss.iframe.survive.bet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.scorethebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everyday.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excotro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixakorkort.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundacioncoloresperanzameta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glooshot.solo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iglesiadaij.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'install.oledcomm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-flow.salesmonk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iskconsolapur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.jarrad.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langbot.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.development.totem.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.stg.charitableimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maasters.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melusyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meu.org.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikrotik-red.nmerken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milestoneshealthcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miltonfigueredo.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirotsanev.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montawat.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuland.disedia.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikitaphilippe.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.backoffice.prexsell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelink.bazaar.chaayos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otaku-no-ibekare.emradc.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parasjasuja.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalhash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyducks.kukke.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savemoney.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setup.homewizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socolive.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softleafgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squarefeetdeveloper.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.gosunow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steeljobs.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapajoscomercio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstruong.dstteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ueplan.idappstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uwapp.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifipublicitario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.about.getyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adwarsgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahkeongtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amen.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitengos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownedandtoasted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwinhoksberg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ercgeeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excotro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inmobiliariaecheverria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malaksadekapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marzanoarchitects.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miltonfigueredo.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nadood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rahultalukdar.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.search.library.ethz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sebastianmangini.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shayar.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tycoonhamlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.udegree.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.widdall.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn-----8kcdwplbpcboibzlhjr4w.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--72cf5auzgog3l8a8b0e6a4ee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bydner-yxa.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeeriye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--950bs4kopb7xebykephca275mvqieif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--colgia-r3a.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kmaburada-p3a82f.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--o39aomfqn3p30mk5cl1r.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--opushazrcim-5zb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pdden-sra.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad8cd04ea000004030047304502210084ee8240f1b0c2f3cef15361b845b3d31197f8b033230c62669787ab53e61c1c022063dd1ebb27036565397030c068412eb68a324116ec4589a3731794c3eea5bd57007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ad8cd0597000004030047304502210085dee64f44d772417b9b6a87048fa6e41219522ac6def610b60d24caa11a8aab02204b6f821a7c1b31a4b81579fe537a5b8dca12a19cd0651ad472bd9441416a12ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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