light.church

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:95:91:76:ef:50:e9:81:87:49:c1:2e:27:02:b3:e1:7a:4c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=light.church

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:91:76:ef:50:e9:81:87:49:c1:2e:27:02:b3:e1:7a:4c
Serial Number (int): 399344572002585352425259122769998305655372
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:6a:18:9c:d1:ab:ae:9b:8a:5b:8d:ed:be:79:88:01:72:93:a9:0c
Fingerprint (sha256): c7:0b:fa:15:98:b3:cf:f7:9b:f7:11:72:a2:75:43:17:af:ee:1a:f8:ec:a8:ea:88:c4:20:1a:4a:1e:e8:cb:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate light.church

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for light.church

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ssg.rouic.com
airshare.bittube.app
anjanchoudhury.info
anxious.amana.ai
api.rocha.esad.pt
app-softrio.refiltek.com.br
app.fotoflow.com.br
app.gsl-src.com
app.mealoa.com
app.modeldinners.com
ayuda.agora.pe
beta.gogame.me
bilas.id
bnei-brak.com
brawlquest.thinkbitsolutions.com
brickworksoftware.com
cindyspixels.co.za
component-library.tneducation.net
conqor.ziggu.me
cp.eezeebooking.com
customer.ziggu.me
dashboard.legalsphere.co.uk
dev.crediblemind.com
dev.depoway.com
dev.mtask.mx
develop.experience.s2r.mx
diegocoy.com
fcombes.aguilar.app
fernandapsol.com.br
fitnesbatut.ru
grigoriev.dev
haeck-busschaert.ziggu.me
hvsb.app
id.sqwire.com.br
identity.membersify.com
imalive.app
incentivapdv.com.br
intercarro.ziggu.me
invite.findyourbond.app
kajo.sa
light.church
link.mcshop.com
lo3go.hr
looc.com.br
lorelei.moinahoi.com
m.stagemegabonus.com
metacognition2020.co
milkmaker.net
mymalaysiaonline.com.my
mysql.co.kr
noraalrasheed.com
onlineartemis.com
outstress.pt
paolasartori.com.br
parceiro.facilitapag.com.br
paulkooijman.nl
pensioen.montanaholdingbv.nl
pnvaa.com
releases.terra.vision
research.runtime.dev
ricksworkbench.com
royce.blog.dyly.life
sakimyto.com
sanitairdekegel.ziggu.me
shop.nuclea.io
slipperyrock.wiselysoftware.com
sportyeffects.com
staging.cadreporting.com
stakez.app
test.typely.com
thebestactorintheworld.com
twitter.secure.accountlogin.us
ulem.my.id
vhelpme.com
vitaliteitsplanner.tst.tempo-team.nl
vladimirbern.com
www.agencia2ed.com.br
www.agladuaneiros.com.br
www.app.autoratefax.com
www.brp.edu.pa
www.cbpk.app
www.communicationsystem.xyz
www.diegocoy.com
www.freelancify.io
www.harlin-weds-longkam.birtika.com
www.inapolsky.ltd
www.isakbosman.com
www.lastdaytoparty.com
www.libertytips1.tips
www.lo3go.hr
www.mamapintarid.com
www.materialgeeks.com
www.mediaforminds.com
www.mihirmehta.tech
www.ronin.codes
www.samiabonfim.com.br
www.thanglong.co.uk
www.upc.co
www.wishexplorer.com
yy-llc.com

Other certificates including the domain name light.church

(limited to 100 certificates)
fernandapsol.com.br
fernandapsol.com.br
light.church
app.quikk.store
calathletics.visionsciencelabs.com
light.church
light.church
light.church
light.church
www.appzavr.com
www.light.church
light.church
paolasartori.com.br
paolasartori.com.br
light.church
light.church

Certificate

The complete raw certificate details for light.church in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399344572002585352425259122769998305655372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 16:19:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 16:19:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'light.church'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2030 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ssg.rouic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airshare.bittube.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anjanchoudhury.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anxious.amana.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.rocha.esad.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-softrio.refiltek.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fotoflow.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gsl-src.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mealoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.modeldinners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.agora.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.gogame.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilas.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnei-brak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brawlquest.thinkbitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brickworksoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cindyspixels.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'component-library.tneducation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conqor.ziggu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.eezeebooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.ziggu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.legalsphere.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.crediblemind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.depoway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mtask.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.experience.s2r.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegocoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcombes.aguilar.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernandapsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnesbatut.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grigoriev.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haeck-busschaert.ziggu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvsb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.sqwire.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.membersify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imalive.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivapdv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercarro.ziggu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite.findyourbond.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kajo.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'light.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.mcshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lo3go.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'looc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorelei.moinahoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.stagemegabonus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metacognition2020.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkmaker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymalaysiaonline.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysql.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noraalrasheed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineartemis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outstress.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paolasartori.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceiro.facilitapag.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulkooijman.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensioen.montanaholdingbv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnvaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releases.terra.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.runtime.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricksworkbench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royce.blog.dyly.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakimyto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanitairdekegel.ziggu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nuclea.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slipperyrock.wiselysoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportyeffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cadreporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stakez.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.typely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebestactorintheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter.secure.accountlogin.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulem.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhelpme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaliteitsplanner.tst.tempo-team.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladimirbern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agencia2ed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agladuaneiros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.autoratefax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brp.edu.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbpk.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communicationsystem.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diegocoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancify.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harlin-weds-longkam.birtika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inapolsky.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isakbosman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastdaytoparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertytips1.tips'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lo3go.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamapintarid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materialgeeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaforminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mihirmehta.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ronin.codes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samiabonfim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanglong.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wishexplorer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yy-llc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017108685eab000004030048304602210080b9e5b835066590a20ca1c60c79b58e4cca22a22c3dd7d7d3e2ed94fcf8b1f0022100b6d3a24bfcca900739e01510f8412e41af02e6ff79569c4ffe602745f5e7620400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017108685edb0000040300473045022100ecd5b3fdf4e1ebfce1e36c495bcb1f91a77900961214b91d74c5ebc8c1b6680f0220528f2b376e729669a348460772c87594075b3c6ac43b4192f4f5b3f1b917e472
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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