staging.can.org.za

Issued by R3

About this certificate

This digital certificate with serial number 04:a9:31:0d:e0:fa:54:fe:7c:fe:e7:01:a0:c0:69:b8:b7:2b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.can.org.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a9:31:0d:e0:fa:54:fe:7c:fe:e7:01:a0:c0:69:b8:b7:2b
Serial Number (int): 406022067971425304987136361205663264192299
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:de:e4:fe:2c:20:d7:98:ab:a5:08:e1:f6:61:f6:67:c6:3e:6a:0b
Fingerprint (sha256): a9:75:e9:b6:ff:ef:dc:de:a5:87:9a:13:36:9e:c3:33:ce:bb:94:87:6f:05:2d:55:f1:4b:cd:bf:64:05:5a:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate staging.can.org.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.can.org.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-fe.vnlp.ai
admin.jurkibeda.com
admin.techokids.com
app.dev.awesome-table.com
app.paid.co
asiahabit.com
assisterecharge.com
auth.expresh.app
auth.raygum.com
axa-uber-dev.bop-tech.com
beacontool.partnerhero.com
bet323bkk.com
blackhor.net
botsiai.com
coderscrew.tech
crm-test.papayamobile.com
demoehr.allclearid.com
dev.izaltino.website
diyet.online
dpf-filter.com
eric.smyth.app
feexp.space
greencompanyeffect.com
hce-dev.bop-tech.com
inugiricoin.com
izaltino.website
joaoarmando.com
krantijyotmahilapratishtan.com
kunlatek.com
leben.com.co
localica.online
login.xn--feldfhler-u9a.app
losmetro.mx
megart.com.br
mentor.techokids.com
mercadoenergias.com.br
mooviebutler.com
msexsmodels.com
mytrove.co.nz
notes.mxstbr.com
oautcmp.org
opencharge-mobile-app.pod-point.com
orbitalno11.me
pffutbolpro.com
pharmacist.skinx.app
portfolio-gauthier.website
prendu.com
ptwcode.com
rocketbreeze.com
sacdepeva.store
sporpsykologen.xn--rd-yia.app
staging.can.org.za
store.wpdeveloper.com
student.techokids.com
thecurespineclinic.com
v1.auduongtuan.com
view.dev.awesome-table.com
visionsoftwaredi.site
w3g.tech
w3universe.tech
web360-andenpiura.lienzo3d.com
wodo.tech
www.agaththiyarnadi.com
www.anzentsuki.com
www.botsiai.com
www.conomy.com.co
www.dpf-filter.com
www.feexp.space
www.fuzailmuhammad.com
www.glazbaonica.com
www.guillermoflores.me
www.iabdsd.com
www.interviewserv.com
www.iturnier.app
www.kamency.com
www.krishnasahu.com
www.kunlatek.com
www.luandesouza.xyz
www.mooviebutler.com
www.msexsmodels.com
www.pffutbolpro.com
www.reven.es
www.rocketbreeze.com
www.speeditdelivery.be
www.techokids.com
www.w3universe.tech
www.xn--12cs7aoi2c5a5baa9an6bm8mc0e.com
www.xn--2020-uio3a1a.com
www.xn--elmnpolku-w2ab.fi
www.xn--pigroupmekanika-n6c.com
www.xn--vre-zna.no
xn--12cs7aoi2c5a5baa9an6bm8mc0e.com
xn--4rrt1v43bq22e.com
xn--9me-6la.art
xn--ankarabitkiselrnler-jbcb.com
xn--e42bu7iwj53w.net
xn--g6h.je
xn--labroso-p2a.ch
xn--mbi.je
xn--pigroupmekanika-n6c.com

Other certificates including the domain name can.org.za

(limited to 100 certificates)
lab.adamshealthnetwork.org
ipubg.ml
www.ratebroker.co.nz
www.alexhang.com
company.ensvee.com
dev-api.ula.africa
xn--jt9h.fm
www.tafadzwamhizha.com
listyajaun.senjaberdua.id
fujina.store
presale.bancambios.exchange
professional.xn--hier-jra.com
www.luckysoni.com
www.depicter.in
www.souzaservicesusa.com
amina-chguifi.tech
www.earcandytech.com
deliverymetropolis.com
acyst.tech
app.linkfacil.me
losmetro.mx
xn--jt9h.fm
va-vna.vnlp.ai
tunegocio.pro
www.nshop.id
www.mbvidro.com.br
coara.co
plannabel.com
pulse.nuage-digital.com
purnama.app
digiprodigy.tech
att.singyin.edu.hk
cdn.tttm.us
www.francocirulli.com
cvreact.xelow.fr
www.nuvemgestao.com.br
www.ask-music.com
que-pinta.com
dev.store.flowby.io
www.axedelivery.com.br
presale.bancambios.exchange
share.staging.xn--glckwnsche-bebd.app
app.labourseauxlivres.fr
www.orusmanager.com
uniu.marcotammaro.it
dokmaa.com
alexhang.com
www.adityabhatia.in
app.1share.vn
du-it.online
link.pirulakalauz.hu
wheels-shop.kiibo.mx
www.taxalpha.in
recruitment.csa.edu.ph
coara.co
arcticdevs.com
admin.vitolicfoods.com
app.iturramasat.com
url.ginih.com
iotbitteck.com
staging.inertiacosmetics.com
purnama.app
dugoly.com
ibh-portal.thecareerlabs.com
footz.football
ipubg.ml
invite.proscle.com
can.org.za
kraftsix.com
can.org.za
admin.rambox.app
lawuel.org
wheels-shop.kiibo.mx
wcm-hotttoolkit.com
links.proak.io
staging.can.org.za
game.sunflowerofcourage.com
timeline.veniceprojectcenter.org
links.proak.io
att.singyin.edu.hk
phonepad-v2-pro.bop-tech.com
xn--glckwnsche-bebd.app
company.ensvee.com
listyajaun.senjaberdua.id
v2.hiepsi.donbosco.cc
bitgetm.xn--bb0bw4mtof.kr
tienda.lucerolozano.com.mx
dev-video.tfimedia.in
www.nuvemgestao.com.br
dev.store.flowby.io
shop.beryl.cc
almachlabs.com
bitgetm.xn--bb0bw4mtof.kr
www.rupha.blog
www.cloket.in
liveservice.abus-kransysteme.de
fujina.store
rolls-skating.com
s.sootmc.net
profissionaldrop.com

Certificate

The complete raw certificate details for staging.can.org.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406022067971425304987136361205663264192299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 11:54:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 11:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.can.org.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2060 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-fe.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jurkibeda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.techokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.awesome-table.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.paid.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiahabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assisterecharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.expresh.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.raygum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axa-uber-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beacontool.partnerhero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bet323bkk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackhor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botsiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coderscrew.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-test.papayamobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoehr.allclearid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.izaltino.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyet.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpf-filter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eric.smyth.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feexp.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greencompanyeffect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hce-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inugiricoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izaltino.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joaoarmando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krantijyotmahilapratishtan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunlatek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leben.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localica.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.xn--feldfhler-u9a.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losmetro.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentor.techokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercadoenergias.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooviebutler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msexsmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytrove.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notes.mxstbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oautcmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencharge-mobile-app.pod-point.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitalno11.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pffutbolpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacist.skinx.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-gauthier.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prendu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptwcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketbreeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacdepeva.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporpsykologen.xn--rd-yia.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.can.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wpdeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.techokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecurespineclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.auduongtuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.dev.awesome-table.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionsoftwaredi.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w3g.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w3universe.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web360-andenpiura.lienzo3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wodo.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agaththiyarnadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anzentsuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.botsiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conomy.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpf-filter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feexp.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuzailmuhammad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glazbaonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guillermoflores.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iabdsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interviewserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iturnier.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krishnasahu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kunlatek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luandesouza.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooviebutler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msexsmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pffutbolpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reven.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocketbreeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speeditdelivery.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w3universe.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--12cs7aoi2c5a5baa9an6bm8mc0e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--2020-uio3a1a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--elmnpolku-w2ab.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--pigroupmekanika-n6c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--vre-zna.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--12cs7aoi2c5a5baa9an6bm8mc0e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--4rrt1v43bq22e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9me-6la.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ankarabitkiselrnler-jbcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--e42bu7iwj53w.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--g6h.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--labroso-p2a.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mbi.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pigroupmekanika-n6c.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001892b4444f10000040300463044022008674ee9dd78e96e4d3ee636b715a69853e3fab4b76899d4d92751ff31c121680220583ab90582e0e5a0b2a2158d6f0ae8308e9822d4210a64f38779dd8a316aa844007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001892b4444ec0000040300473045022100da3706e8416a309b978cadf68a03dec0940330c78319eec23408445d7dac8add02200b24a19811b56e9eb04a4cad3b3c211e63d196629f60cc064129a263182a33e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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