r42.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:f6:24:b7:76:aa:cd:b6:62:0e:59:52:91:69:af:8f:2f:2d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=r42.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:24:b7:76:aa:cd:b6:62:0e:59:52:91:69:af:8f:2f:2d
Serial Number (int): 345095124862861756569633609194045539561261
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:9f:74:ef:59:6f:d0:7b:f0:9d:09:13:ed:82:98:0b:19:f4:7e:7d
Fingerprint (sha256): cb:16:e3:da:34:5f:8e:73:34:81:e2:5b:9f:42:c1:0b:33:11:28:2c:0b:a2:b0:ed:be:5f:ff:dc:d8:39:2b:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate r42.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for r42.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acc.dots-and-boxes.hjvv.nl
acuity-dev.bop-tech.com
admin.ethorama-dev.library.ethz.ch
admin.ipick.com.my
amiyaranjan.in
api.ula.africa
apidocs.library.ethz.ch
app.acap.drclik.com
app.advertalytics.com
app.funfute.com.br
app.merqury.co.uk
app.thegodschallenge.com
assets-demo.inszu.com
authstaging.orchidhealth.com
awdziewicz.com.pl
beautiesofeden.org
bitsports.bitaam.com
blog.xn--zsebtanr-fza.hu
chesstune.live
dashboard.yesdefo.com
dev-mambo.iframe.survive.bet
dev.xn--btvakten-9za.no
diagnosticofinanceiro.medconsulting.com.br
domesticapp.com
elvycreations.com
gibbs.ltd
go.blackforest.org
hamiddev.net
ideainnovationcell.org
ideas-app.karn.ratana.info
ieat.asia
imaquib.online
kaczmarski.dev
kampusa.id
kells-kitchenn.com
keralapei.com
knowledgeportal.ethz.ch
kwickly.app
link.delli.market
link.mysports.com
link.openology.org
luckymoney.moee.in
maatoshree.com
maddyinvestments.co.zw
mapicon.jp
marcelbaur.io
marmak.pl
metropolisasia.in
mkmahmud.com
my.lazylawn.ca
myfreebiodata.com
on.soundcloud.com
open-day.vu.edu.au
payment.thegodschallenge.com
phonepad-v2-dev.bop-tech.com
piyushgangwar.tech
qsmodule.reesco.pl
r42.ch
rambousek.dev
s360-dev.bevy.pl
sarmadevents.com
share.allinfo.co.il
showyourscore.com
simbahayan-ust-edu.online
spurfund.com
theuncorkchallenge.com
user-legal-dev.coconala.com
v2.staging.ventureiq.io
vote.codeshovel.com
weconnect.merckgroup.com
wissensportal.ethz.ch
wrmbud.pl
www.admin.barbaravokatis.com
www.amw1980.pl
www.awdziewicz.com.pl
www.beautiesofeden.org
www.bodegabedz.com
www.chesstune.live
www.cuentamecomo.mx
www.cultofkek.org
www.damathgame.online
www.excellentdesigns.in
www.fc-motorclub.be
www.ideabin.xyz
www.ideainnovationcell.org
www.ieat.asia
www.imaquib.online
www.marcelbaur.dev
www.marcelbaur.io
www.mysorebhavanbh.com
www.oze.turystycznapodkowa.pl
www.sarmadevents.com
www.simbahayan-ust-edu.online
www.tracking.sb-group.dk
www.typedigital.de
www.webwonderer.com
www.xn--910bn8oynl.kr
xn--31b0a4eg.xn--h2brj9c
xn--bydner-yxa.se
xn--m3caem1c5czc0a9dh8f.com

Other certificates including the domain name r42.ch

(limited to 100 certificates)
alaminamdar.tech
xn--3e0aon.xn--j6w193g
rss.r42.ch
dashboard.veniceprojectcenter.org
www.chanthomas.com
download.sheercustom.com
rss.r42.ch
m.ninetalk.tk
milestoneshealthcentre.com
xn--y8ja6ob5749g5na497h.app
rss.r42.ch
rss.r42.ch
investor-flow.salesmonk.co
rss.r42.ch
myvyoo.ai
mail.r42.ch
mail.r42.ch
typi.promirage.com
rss.r42.ch
rss.r42.ch
rss.r42.ch
alaminamdar.tech
www.nexigoenergy.com
milestoneshealthcentre.com
nacita.id
www.hypnochain.com
www.marzanoarchitects.com.ar
www.tracking.sb-group.dk
m.ninetalk.tk
r42.ch
rss.r42.ch
store.playforge.gg
rss.r42.ch
rss.r42.ch
rtupapers.in
www.tracking.sb-group.dk
nimabadiei.dk
www.eindjespelen.nl
www.tenderapp.co
rss.r42.ch
newseason.es
www.nexigoenergy.com
rss.r42.ch
rss.r42.ch
kwickly.app
admin.sloops.waat.eu
www.zacniasm.tech
www.chanthomas.com
rss.r42.ch
conn.sally.app
citizens.social
www.katon.cloud
xn--y8ja6ob5749g5na497h.app
agent.rtm.vnlp.ai
nacita.id
www.katon.cloud
rss.r42.ch
ipsapl.com
auth.tinito.app
rss.r42.ch
rss.r42.ch
www.hypnochain.com
satyamnx.store
www.gaudtech.com
www.marzanoarchitects.com.ar
vpgg.lt
cliohealth.aspire-dev2.com
mybattery.ausgrid.com.au
xn--frskring-2za1p.granat.app
rss.r42.ch
admin.sloops.waat.eu
www.banazak.io
ipsapl.com
meu.melhorplanob.com.br
satyamnx.store
xn--9meart-3ua.com
nimabadiei.dk
megart.com.br
rss.r42.ch
mercadoenergias.com.br
rss.r42.ch
passcard.psu.ac.th
www.gaudtech.com
sandboxnuts.app
r42.ch
rss.r42.ch
www.shayar.tech
www.luja.com.co
r42.ch
rtupapers.in
reviewsit.site
rss.r42.ch
rss.r42.ch
rss.r42.ch
xn--9meart-3ua.com
rss.r42.ch
xn--frskring-2za1p.granat.app
rss.r42.ch
www.marcussoftware.info
xn--voldinrerelasjoner-tub.com

Certificate

The complete raw certificate details for r42.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345095124862861756569633609194045539561261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 21:29:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 21:29:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'r42.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.dots-and-boxes.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuity-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ethorama-dev.library.ethz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ipick.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amiyaranjan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ula.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidocs.library.ethz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.acap.drclik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.advertalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.funfute.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.merqury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thegodschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-demo.inszu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authstaging.orchidhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awdziewicz.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautiesofeden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitsports.bitaam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.xn--zsebtanr-fza.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesstune.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.yesdefo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mambo.iframe.survive.bet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.xn--btvakten-9za.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosticofinanceiro.medconsulting.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvycreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibbs.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.blackforest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiddev.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideainnovationcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideas-app.karn.ratana.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieat.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaquib.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaczmarski.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kampusa.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kells-kitchenn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keralapei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgeportal.ethz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwickly.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.delli.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.mysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.openology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckymoney.moee.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maatoshree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maddyinvestments.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapicon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcelbaur.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmak.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metropolisasia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkmahmud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lazylawn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfreebiodata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on.soundcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open-day.vu.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.thegodschallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonepad-v2-dev.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piyushgangwar.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsmodule.reesco.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r42.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rambousek.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's360-dev.bevy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarmadevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.allinfo.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showyourscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simbahayan-ust-edu.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spurfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theuncorkchallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-legal-dev.coconala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.staging.ventureiq.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.codeshovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weconnect.merckgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissensportal.ethz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrmbud.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.barbaravokatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amw1980.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awdziewicz.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beautiesofeden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodegabedz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesstune.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuentamecomo.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cultofkek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damathgame.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excellentdesigns.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fc-motorclub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideabin.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideainnovationcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ieat.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaquib.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcelbaur.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcelbaur.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysorebhavanbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oze.turystycznapodkowa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarmadevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simbahayan-ust-edu.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tracking.sb-group.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.typedigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webwonderer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--910bn8oynl.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--31b0a4eg.xn--h2brj9c'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bydner-yxa.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--m3caem1c5czc0a9dh8f.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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