www.sos-childrensvillages.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 06:84:5f:70:f4:62:3b:e6:30:68:69:37:5b:57:b8:3d was issued on by Sectigo Limited.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sos-childrensvillages.org

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 06:84:5f:70:f4:62:3b:e6:30:68:69:37:5b:57:b8:3d
Serial Number (int): 8662686938135740983277163631041034301
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d4:31:b5:63:4f:25:20:98:e6:46:78:52:38:80:c9:23:8b:71:54:5d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): a9:0e:5c:60:9a:e6:d9:79:49:bb:97:83:88:8d:7b:7f:5a:d2:42:68
Fingerprint (sha256): a7:7a:a8:e7:99:39:14:2a:14:47:62:4e:b0:0d:b8:90:a8:b1:29:9b:1d:c5:ca:de:36:e7:22:41:b0:c8:a9:45

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.sos-childrensvillages.org

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sos-childrensvillages.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sos-childrensvillages.org
aldeasinfantiles.org.co
aldeasinfantiles.org.pe
aldeasinfantilessos.cl
dona.sositalia.it
future.sos-kinderdorf.at
give.sos-usa.org
mein.sos-kinderdorf.at
meine.sos-kinderdoerfer.de
rataufdraht.at
soscambodia.org
soshongkong.org
sosvietnam.org
wichtelpost.sos-kinderdorf.at
www.4raum.at
www.aldeasinfantiles.or.cr
www.aldeasinfantiles.org
www.aldeasinfantiles.org.ar
www.aldeasinfantiles.org.bo
www.aldeasinfantiles.org.co
www.aldeasinfantiles.org.ec
www.aldeasinfantiles.org.gt
www.aldeasinfantiles.org.hn
www.aldeasinfantiles.org.mx
www.aldeasinfantiles.org.pa
www.aldeasinfantiles.org.pe
www.aldeasinfantiles.org.py
www.aldeasinfantiles.org.ve
www.aldeasinfantilessos.cl
www.aldeasinfantilessos.org.do
www.aldeasos.org.ni
www.aldeassos.org.sv
www.aldeias-sos.org
www.aldeiasinfantis.org.br
www.digify.org
www.hermanngmeineracademy.org
www.hermanngmeinerakademie.org
www.juquest.at
www.lehrher.at
www.ombuds-sos-childrensvillages.org
www.rataufdraht.at
www.sos-bangladesh.org
www.sos-childrensvillages.ae
www.sos-jamaica.org
www.sos-kinderdoerfer.org
www.sos-kinderdorf.at
www.sos-somalia.org
www.sos-syria-ar.org
www.sos-syria.org
www.sos-usa.org
www.sos.or.id
www.sosacrowdfunding.org
www.soschildrensvillages-arabic.org
www.soschildrensvillages.lk
www.sositalia.it
www.sosnepal.org.np
www.sosphilippines.org
www.sossouthafrica.org.za
www.sosthailand.or.th
www.sosthailand.org
www.we-r-sos.at
www.wichtelpost.sos-kinderdorf.at

Other certificates including the domain name sos-childrensvillages.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sos-childrensvillages.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMGjCCCwKgAwIBAgIQBoRfcPRiO+YwaGk3W1e4PTANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTIzMDgwMzAwMDAwMFoXDTI0MDgwMTIzNTk1OVowKDEmMCQGA1UEAxMdd3d3
LnNvcy1jaGlsZHJlbnN2aWxsYWdlcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAUBepEGCy6+6gkktA46nXjpGm3GcEufoVWTEhEwSv0RUl9vOg
36csm9/idzdB0rtyohOUd0OtLzgJY17kDsn/3wteSGcyngRXmWgYETyb5cGoC7u3
jWqUPI1KdRdn4ciGT+zZAxxDNFa2a5Xf0PEeygi5TP80YTuwVY8hyvPA9pAuAwse
++jH9DwZiz4ww7YyK3FRUPlEEqsdbsWp/WG5+P201d3EmY+Nz64yzPt835JGsR3S
JdU/7HvJ//2ouHDTWm6hejrXj4zXvpIXErI2hTnPICVbJrpCiFviyfdOB0hetAa0
IKx7iLmpsXiEc0jdAQ+VxO2inj5zejYfmSB5AgMBAAGjggjWMIII0jAfBgNVHSME
GDAWgBSNjF7EVK2K4Xfpm/mbBeG4AY1h4TAdBgNVHQ4EFgQU1DG1Y08lIJjmRnhS
OIDJI4txVF0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAgcw
JTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQIB
MIGEBggrBgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGln
by5jb20vU2VjdGlnb1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5j
cnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMIIBfAYKKwYB
BAHWeQIEAgSCAWwEggFoAWYAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+Zn
TFo6dAAAAYm7fIVgAAAEAwBHMEUCIGsd+4iMSRXme31xI3LoB0G3ol1Hlzs3Ad2t
g/UhTdHOAiEAs2IFwiTgvkDiDKN/E/9ihQzVADfPfMbvDEZAECQRU9UAdQDatr9r
P7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYm7fIWzAAAEAwBGMEQCIEmU
ACgSHjIe1LptYAfhvoM3ecjTF6XSHTgDJK0kMMxCAiBNCnkAtzNmVBMn/3V4ccBu
xK4eplB7gfX+hLptbUp/AgB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZx
H7WbAAABibt8hZEAAAQDAEYwRAIgWnJJaJNK6ObMkCPfk+n+sFsPsauwQZBjf16f
bnrMp8ICIEaz07EZx+G8wjMdzEu7QwoBL1nijWhlDECypW/P//JHMIIF/wYDVR0R
BIIF9jCCBfKCHXd3dy5zb3MtY2hpbGRyZW5zdmlsbGFnZXMub3JnghdhbGRlYXNp
bmZhbnRpbGVzLm9yZy5jb4IXYWxkZWFzaW5mYW50aWxlcy5vcmcucGWCFmFsZGVh
c2luZmFudGlsZXNzb3MuY2yCEWRvbmEuc29zaXRhbGlhLml0ghhmdXR1cmUuc29z
LWtpbmRlcmRvcmYuYXSCEGdpdmUuc29zLXVzYS5vcmeCFm1laW4uc29zLWtpbmRl
cmRvcmYuYXSCGm1laW5lLnNvcy1raW5kZXJkb2VyZmVyLmRlgg5yYXRhdWZkcmFo
dC5hdIIPc29zY2FtYm9kaWEub3Jngg9zb3Nob25na29uZy5vcmeCDnNvc3ZpZXRu
YW0ub3Jngh13aWNodGVscG9zdC5zb3Mta2luZGVyZG9yZi5hdIIMd3d3LjRyYXVt
LmF0ghp3d3cuYWxkZWFzaW5mYW50aWxlcy5vci5jcoIYd3d3LmFsZGVhc2luZmFu
dGlsZXMub3Jnght3d3cuYWxkZWFzaW5mYW50aWxlcy5vcmcuYXKCG3d3dy5hbGRl
YXNpbmZhbnRpbGVzLm9yZy5ib4Ibd3d3LmFsZGVhc2luZmFudGlsZXMub3JnLmNv
ght3d3cuYWxkZWFzaW5mYW50aWxlcy5vcmcuZWOCG3d3dy5hbGRlYXNpbmZhbnRp
bGVzLm9yZy5ndIIbd3d3LmFsZGVhc2luZmFudGlsZXMub3JnLmhught3d3cuYWxk
ZWFzaW5mYW50aWxlcy5vcmcubXiCG3d3dy5hbGRlYXNpbmZhbnRpbGVzLm9yZy5w
YYIbd3d3LmFsZGVhc2luZmFudGlsZXMub3JnLnBlght3d3cuYWxkZWFzaW5mYW50
aWxlcy5vcmcucHmCG3d3dy5hbGRlYXNpbmZhbnRpbGVzLm9yZy52ZYIad3d3LmFs
ZGVhc2luZmFudGlsZXNzb3MuY2yCHnd3dy5hbGRlYXNpbmZhbnRpbGVzc29zLm9y
Zy5kb4ITd3d3LmFsZGVhc29zLm9yZy5uaYIUd3d3LmFsZGVhc3Nvcy5vcmcuc3aC
E3d3dy5hbGRlaWFzLXNvcy5vcmeCGnd3dy5hbGRlaWFzaW5mYW50aXMub3JnLmJy
gg53d3cuZGlnaWZ5Lm9yZ4Idd3d3Lmhlcm1hbm5nbWVpbmVyYWNhZGVteS5vcmeC
Hnd3dy5oZXJtYW5uZ21laW5lcmFrYWRlbWllLm9yZ4IOd3d3Lmp1cXVlc3QuYXSC
Dnd3dy5sZWhyaGVyLmF0giR3d3cub21idWRzLXNvcy1jaGlsZHJlbnN2aWxsYWdl
cy5vcmeCEnd3dy5yYXRhdWZkcmFodC5hdIIWd3d3LnNvcy1iYW5nbGFkZXNoLm9y
Z4Icd3d3LnNvcy1jaGlsZHJlbnN2aWxsYWdlcy5hZYITd3d3LnNvcy1qYW1haWNh
Lm9yZ4IZd3d3LnNvcy1raW5kZXJkb2VyZmVyLm9yZ4IVd3d3LnNvcy1raW5kZXJk
b3JmLmF0ghN3d3cuc29zLXNvbWFsaWEub3JnghR3d3cuc29zLXN5cmlhLWFyLm9y
Z4IRd3d3LnNvcy1zeXJpYS5vcmeCD3d3dy5zb3MtdXNhLm9yZ4INd3d3LnNvcy5v
ci5pZIIYd3d3LnNvc2Fjcm93ZGZ1bmRpbmcub3JngiN3d3cuc29zY2hpbGRyZW5z
dmlsbGFnZXMtYXJhYmljLm9yZ4Ibd3d3LnNvc2NoaWxkcmVuc3ZpbGxhZ2VzLmxr
ghB3d3cuc29zaXRhbGlhLml0ghN3d3cuc29zbmVwYWwub3JnLm5wghZ3d3cuc29z
cGhpbGlwcGluZXMub3Jnghl3d3cuc29zc291dGhhZnJpY2Eub3JnLnphghV3d3cu
c29zdGhhaWxhbmQub3IudGiCE3d3dy5zb3N0aGFpbGFuZC5vcmeCD3d3dy53ZS1y
LXNvcy5hdIIhd3d3LndpY2h0ZWxwb3N0LnNvcy1raW5kZXJkb3JmLmF0MA0GCSqG
SIb3DQEBCwUAA4IBAQBdWpHkFqhLcsJdtDWUOXH5xEEvZQNKw/qqYonyULoBhtSQ
qIAf3FSUIzrRt+XiM14r8yk18po0NQgsD8PXCol980whJxTVWPEZ65wuTd5d5tW9
CQ9dCUrm243wzK3ygN9aaKYb9wKjCrh9LWvs0W+DjnXMJcG969qe8dvEeWZV9wRd
Y+k71Mca1edfiz/Ow+F8BQJsBykwIZpUHLRvuUJOE4z2E2nj/MHPpqaxYXANiHO1
PL6ubvcH6npmjxxPZXlXcyw2A254gDkSTEZgcNS24BeVfVjrDRLPgO93BMNTTE1Z
EESj0eAzmI6j0CcBKWHxFq6NBvFlOPhj04Y6uD5O
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFAXqRBgsuvuoJJLQOOp
146RptxnBLn6FVkxIRMEr9EVJfbzoN+nLJvf4nc3QdK7cqITlHdDrS84CWNe5A7J
/98LXkhnMp4EV5loGBE8m+XBqAu7t41qlDyNSnUXZ+HIhk/s2QMcQzRWtmuV39Dx
HsoIuUz/NGE7sFWPIcrzwPaQLgMLHvvox/Q8GYs+MMO2MitxUVD5RBKrHW7Fqf1h
ufj9tNXdxJmPjc+uMsz7fN+SRrEd0iXVP+x7yf/9qLhw01puoXo614+M176SFxKy
NoU5zyAlWya6Qohb4sn3TgdIXrQGtCCse4i5qbF4hHNI3QEPlcTtop4+c3o2H5kg
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8662686938135740983277163631041034301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sos-childrensvillages.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24277249599492664222187810977401385345974704867685453628441668701667113833235618684413819747434869084453583229040997674311899080936511929322099144920103554596946950305878456176807767126387854852506103375251821503183048702858887965825973306868446286036262876767051044538128590387359186206163645635994169438845990218719177657244459326845827651856261856741156737496320952553138357967010602351467937620348143653548608637278849525810278283619912581168288854215851427717415140101111047381673140770110169832728888953477582007308024474418442166991906899409783630726275574147870510878189693430098825847567147909793117267107961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d431b5634f252098e64678523880c9238b71545d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1526 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-childrensvillages.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldeasinfantiles.org.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldeasinfantiles.org.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldeasinfantilessos.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dona.sositalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'future.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.sos-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meine.sos-kinderdoerfer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rataufdraht.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soscambodia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soshongkong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosvietnam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wichtelpost.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4raum.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.or.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantiles.org.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantilessos.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasinfantilessos.org.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeasos.org.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeassos.org.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeias-sos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldeiasinfantis.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digify.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermanngmeineracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hermanngmeinerakademie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juquest.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lehrher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ombuds-sos-childrensvillages.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rataufdraht.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-bangladesh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-childrensvillages.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-jamaica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-kinderdoerfer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-kinderdorf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-somalia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-syria-ar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-syria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosacrowdfunding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soschildrensvillages-arabic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soschildrensvillages.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sositalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosnepal.org.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosphilippines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sossouthafrica.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosthailand.or.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosthailand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.we-r-sos.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wichtelpost.sos-kinderdorf.at'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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