app2.studyu.health

Issued by R11

About this certificate

This digital certificate with serial number 03:46:42:70:b6:3e:fa:b4:2a:39:e4:f0:57:a1:1e:12:44:6a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app2.studyu.health

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:46:42:70:b6:3e:fa:b4:2a:39:e4:f0:57:a1:1e:12:44:6a
Serial Number (int): 285244937761104675729612594173532345353322
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:e7:fe:9f:52:21:9a:c3:d8:59:15:ed:c3:df:f2:f7:c5:7a:01:e6
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): ed:e5:9c:b6:3d:78:43:64:3e:6b:7a:d3:ea:df:42:e0:0a:22:ae:af
Fingerprint (sha256): c7:dd:bb:0a:ca:ef:01:7f:4d:8a:75:d7:c9:7a:13:3d:73:ad:9d:34:cf:d5:0a:03:70:db:12:c4:31:31:14:03

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate app2.studyu.health

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app2.studyu.health

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2018.devfest.istanbul
2024.rachamechta.com
accounts.huntinggrounds.app
admin.traitte.store
admin.v-pbx.net
agent.specialtraffic.nl
alexbionics.com
api.telov.app
app-v1.studyu.health
app.fit-q.net
app2.studyu.health
auth-dev.stafftraveler.app
auth.stafftraveler.app
auth.techblogposts.com
auth.tidis.net
backrub.studlars.com
bacsel.com
cashy.pl
chart.starkpepe.xyz
demo.xn--adianteappsmxico-mqb.com
designer-v1.studyu.health
designer2.studyu.health
dev.wola.softkesla.com
dhrealtyatl.com
escrevame.cloud
eyoc2024.pl
flerid.com
giftcard.rituals.com
goldtime.online
gtirkha.com
heclaminer.com
hiru3.akting.eu
indirides.com
inetztech.com
ivinayak.in
join.prayroom.io
join.quokkasac.com
jokates.com
jusmulticreation.ca
kinkreal.com
kmrhoney.in
kris-mont.pl
labombetta.be
link.kura.se
link.seven.app
md-plus-acv.nutriinlife.com
newsletter-public.duonghuuphuc.com
nptle.in
olama.web.id
pathavifarms.com
portal.swimtrack.com.br
rdml-auth.rd.nyt.net
refer.mslgames.com
reliecards.com
sagarakaryabersama.com
septian-sofie.itsyourdayofficial.com
seznamvkapse.cz
staging-api.ula.africa
sushimibyk.com
susi-aditya.itsyourdayofficial.com
tamansrituang.com
test.myvyoo.ai
testnet.sharemanage.com
tst-karcher.elrego.com
tueve.net
unidays.retorio.com
vivirmasfacil.com
wisenotebook.website
www.aivocperavai.com
www.boterdelivery.com
www.craftniketan.com
www.deinmarktexpress.de
www.gainthehouse.com
www.gtirkha.com
www.harshtonschools.com
www.ingops.com.co
www.liam.kiwi
www.linkintern.in
www.meese.pl
www.pryzmity.com
www.reliecards.com
www.sagarakaryabersama.com
www.sdvx.net
www.strangerwithme.com
www.technologytoolkit.clevelandmetroschools.org
www.tlrapp.com
www.truestory.my.id
www.xn--82c4adcd7cf7cc7dnbe0a1d5uc.com
www.xn--lbben-kva.app
www.xn--pay-k73byfl10a.com
www.yousefsalahkassem.com
xn--2t8h.puf.io
xn--82c2c.xn--12cnk7c9exbyetc8b.xn--o3cw4h
xn--aktivoli-brse-rmb.de
xn--chrt-moa.li
xn--domicilioscaaveral-y0b.com
xn--l1acrl.xn--p1ai
xn--lbben-kva.app
xn--rssmann-n2a.de
xn--supaal-zwa.com

Other certificates including the domain name studyu.health

(limited to 100 certificates)
xn--3e0aon.xn--j6w193g
www.danieldoral.xyz
www.studyu.health
careers.sre.co.id
99active.com
roxy.joyridecity.bike
www.rutaspozoalcon.es
hero.mightyminds.org
solrapp.io
typi.promirage.com
confirmex.ca
sketchbook.timeblur.io
novina.tech
fides-credito.terramagna.com.br
fbcol.com.co
www.aivocperavai.com
vagent-dev.vnlp.ai
www.pixiepedia.site
app.fit-q.net
app.fit-c.com
www.valeriamendez.com
akshitharamalingam.com
clappr.app
designer.hpi.studyu.health
www.casatuacocina.com
clinic.careplan.ai
www.tomarsuraj.in
clinic.careplan.ai
www.valeriamendez.com
www.mototaxigo.com
bagofethereum.com
vpgg.lt
xn--comesaapropiedades-s0b.com.ar
pwa.mda.mx
mitrabiotechnologies.com
prodeveloper.nl
www.jeremyamon.com
mobile.hoshimon.com
app2.studyu.health
jailsondamasceno.com
todo.justtreme.com
link.abpay.uz
designer.studyu.health
artistreport-dev.universal-music.co.jp
flyo.link
app.duer.pl
www.analite.net
xn--ls8h.multiverse.ai
m.preview.charitableimpact.com
order.traitte.store
creativityrock.com
link.abpay.uz
metebala.xyz

Certificate

The complete raw certificate details for app2.studyu.health in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285244937761104675729612594173532345353322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 21:41:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 21:41:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app2.studyu.health'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3e7fe9f52219ac3d85915edc3dff2f7c57a01e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2092 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2018.devfest.istanbul'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2024.rachamechta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.huntinggrounds.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.traitte.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.v-pbx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.specialtraffic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexbionics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.telov.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-v1.studyu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fit-q.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2.studyu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.stafftraveler.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.stafftraveler.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.techblogposts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tidis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backrub.studlars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chart.starkpepe.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.xn--adianteappsmxico-mqb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designer-v1.studyu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designer2.studyu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wola.softkesla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhrealtyatl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escrevame.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyoc2024.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flerid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcard.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldtime.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtirkha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heclaminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiru3.akting.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indirides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inetztech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivinayak.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.prayroom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.quokkasac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jusmulticreation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinkreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmrhoney.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kris-mont.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labombetta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.kura.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.seven.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md-plus-acv.nutriinlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter-public.duonghuuphuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nptle.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olama.web.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathavifarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.swimtrack.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdml-auth.rd.nyt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refer.mslgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reliecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagarakaryabersama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'septian-sofie.itsyourdayofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seznamvkapse.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-api.ula.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushimibyk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susi-aditya.itsyourdayofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamansrituang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.myvyoo.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testnet.sharemanage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-karcher.elrego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tueve.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidays.retorio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivirmasfacil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisenotebook.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aivocperavai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boterdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craftniketan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deinmarktexpress.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gainthehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtirkha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harshtonschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingops.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liam.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linkintern.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meese.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pryzmity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reliecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagarakaryabersama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdvx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strangerwithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technologytoolkit.clevelandmetroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tlrapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truestory.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--82c4adcd7cf7cc7dnbe0a1d5uc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--lbben-kva.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--pay-k73byfl10a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yousefsalahkassem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--2t8h.puf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--82c2c.xn--12cnk7c9exbyetc8b.xn--o3cw4h'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--aktivoli-brse-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--chrt-moa.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--domicilioscaaveral-y0b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--l1acrl.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lbben-kva.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rssmann-n2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--supaal-zwa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ffa033060000004030047304502203ede3bf4a0386ebd23cf5004c71c34fb797c02a05d2fb5ad72aea26ad4564054022100a92f596d4bf90329f7df1bf36b33efa5a138c78d3426f4a897bcc7ce49d26891007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ffa03305c000004030046304402200ca496702a99636aaa08116334c55ba6d4dc06116ce788cc638014928eb859a40220582beff60a4f9fd261937aa747324bdab22498eb3ad5431e740ac70f24d97d91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ddc95655a354707b4a1189f0f1c14b37fd60b7d6c16b45d178ee07a053b7a9abf5940a964b09de166fd0a8ec3ec7886a9adb6f8a80e266b17bcc0d59b0d137a964df22bdeb73dda5a82f63c4dae6a7a7cfa6e9fdae5a72769201490e057c83b6fc0b530f20088aecaa00e8958fb5d5fda9915c519ebb01cac3194579e31be10276cf29feecf8a8df735da408ae0557fc36b97352b8c95e0461b7763e67efd45002c42f7bf8a86ecdcddd6072812eb7d97b8c01eac6b7739f0ddda861c8442165a0b63d1409500ed03cf28274e504eeb777237457cc8e9bdb0ae4d6483a8ece809332f0af0f449d0dbe20389278b9fe3c5239466d3edde72c7e38b246e911b52