www.pentime.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:af:59:46:cd:70:42:ec:6f:df:b1:8b:4e:b3:6a:d4:db:b1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pentime.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:59:46:cd:70:42:ec:6f:df:b1:8b:4e:b3:6a:d4:db:b1
Serial Number (int): 321004940925638160792225468250616744958897
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:34:08:39:40:90:9f:f6:83:a7:0f:8e:46:71:a4:8c:f3:a7:db:07
Fingerprint (sha256): d2:5b:9e:8d:b2:a8:a9:21:e5:5c:bd:01:1b:be:ac:7b:ac:42:8a:55:fb:4f:16:a3:24:af:51:e1:3a:8a:88:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pentime.vn

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pentime.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ad.igmyd.co.kr
admin.listingloop.com.au
admin.vainoflow.com.br
aifashion.cloudai.network
allaboutmdh.com
app.123gartenplaner.de
app.helply.org
app.renderfrost.com
applink.shiftfm.app
april.ihr-versicherungsschutz.de
auth.sheet2dash.com
ayeshnipun.com
basic-fm.info
bigpizzasaochico.com.br
bigpizzasfs.com.br
borussia-verbindet.de
borussiaverbindet.de
build.ninja.usestrive.com
checkform.nl
claudia-and-victor.com
coikosity.com
covidlive.datasahi.com
covidolympics2020.com
desidime.huntergames.in
dev.valvify.com
dfe.arquivei.com.br
dhondt-nv.ziggu.app
down-dev.sterndeck.com
epic-poems.com
erez-dayan.com
fr.lbdevelopers.com
freport.lbdevelopers.com
ft.nextgatetech.com
gandolfos-orders.crispnow.com
gbuilder.link
gux.mx
guzzlesoda-orders.crispnow.com
ideamap.thesolversclub.com
igrejaeficiente.com.br
irisprods.com
kiokuzan.app
links.aapkiclass.com
links.klaabu.namesong.com
livetrackindia.com
mammoyar.ir
meet.elli.eco
nopwd.co
nyccovid19responsecoalition.org
offline.trendaro.cz
oze.turystycznapodkowa.pl
partners-dev.trozo.io
pg.dareyame.jp
plazahogar.amvt.ml
portalmobileapp.com
qurated.io
rahulmeena.com
restaurantcredit.co.uk
rwandy.com
scanme.tech
scanpay.me
sonomera.com
soso.mundointapp.com
stacktech.ro
status.provenancehub.com
sterndeck.com
susannebos.myemmacloud.com
teacher.bloomclass.com
testmantester.ee
themainframe.com
www-dev.sterndeck.com
www.22sign.app
www.admin.outletcruceros.app
www.apex-legends-tips.com
www.basic-fm.info
www.bigpizzasaochico.com.br
www.bocs.work
www.coronalivedata.com
www.covidolympics2020.com
www.deanlarsenwilson.com
www.erez-dayan.com
www.forrestofdicks.com
www.grandevitoria.com
www.gux.mx
www.hughedwards.dev
www.igrejaeficiente.com.br
www.ilks.jp
www.irisprods.com
www.kiokuzan.app
www.kodikos.pl
www.kojimanamegenerator.net
www.pentabilities.com
www.pentime.vn
www.punteam.com
www.restaurantcredit.co.uk
www.strategicclaimsdirection.com
www.testmantester.ee
www.themainframe.com
www.tuc.com.sg
www.watchme24.be
www.yakamazu.ml

Other certificates including the domain name pentime.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pentime.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321004940925638160792225468250616744958897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 14:21:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 14:21:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pentime.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.igmyd.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.listingloop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vainoflow.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aifashion.cloudai.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaboutmdh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.123gartenplaner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.helply.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.renderfrost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink.shiftfm.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'april.ihr-versicherungsschutz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.sheet2dash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayeshnipun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic-fm.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigpizzasaochico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigpizzasfs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borussia-verbindet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borussiaverbindet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.ninja.usestrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkform.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claudia-and-victor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coikosity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidlive.datasahi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidolympics2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desidime.huntergames.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.valvify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfe.arquivei.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhondt-nv.ziggu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'down-dev.sterndeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epic-poems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erez-dayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lbdevelopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freport.lbdevelopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ft.nextgatetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandolfos-orders.crispnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbuilder.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gux.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guzzlesoda-orders.crispnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideamap.thesolversclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igrejaeficiente.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisprods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiokuzan.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.aapkiclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.klaabu.namesong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livetrackindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammoyar.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.elli.eco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nopwd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyccovid19responsecoalition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offline.trendaro.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oze.turystycznapodkowa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-dev.trozo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.dareyame.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plazahogar.amvt.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalmobileapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qurated.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rahulmeena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantcredit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scanme.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scanpay.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonomera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soso.mundointapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stacktech.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.provenancehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterndeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susannebos.myemmacloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher.bloomclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testmantester.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themainframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.sterndeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.22sign.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.outletcruceros.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apex-legends-tips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basic-fm.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigpizzasaochico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bocs.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coronalivedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covidolympics2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deanlarsenwilson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erez-dayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forrestofdicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandevitoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gux.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hughedwards.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igrejaeficiente.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilks.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irisprods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiokuzan.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kodikos.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kojimanamegenerator.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pentabilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pentime.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurantcredit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strategicclaimsdirection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testmantester.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themainframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuc.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watchme24.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yakamazu.ml'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170f362b1bd0000040300483046022100b18ff1c7423f9adecbc69e752122b9d515718e993d13c10875fc15483e80e07b022100cae1808bd4d6ccf9a8a2a7e30a7213755403867dc46dfdb1851a3beb94d7a76c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170f362b1ec0000040300473045022100cf572372bd638f32ec49a9e08a1b445f8825ffc97db5bf827d0fd344126f43ec02206bbf9ba7a8d6ee8fbe00e3f8e0b5dddbe1fc2c40f17c2b15e54ffccbecf15ca7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d366e43a3e6ca27ae4162f6e117d2893f6541166b6ecadf45195dae4d949fc9f2bb2224ee915b871c14ea81a6b588951bd208c156c0d75e0a4210253444ef11aa55af6544676ffe24f6aff436bb84d19226f125e118682d5a840a8ba9315cb83b06fde98520f0fc348702657b69f4a38290ef48b1d73c5b9f8092a3291e8d96703f3c6689c83d586ab0a3e6361eb45557b79e7634ff73450edb0ad117c4f89da90140d6f2ec84ea9204fbf974a202326825f85057956c22da4d4696bcab5d961b6b2385e66b704d043882941ac9f9acb702c4272379049402019526f1584ae0d974a2e2baeebc74e25d4128aad0ba1dc73f9fc8cfeb0326c8a0cbe977eea8c2