auth.goethe.ai
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:d1:6e:48:6a:3d:bc:96:d8:22:27:cb:a3:fe:c4:30:43:d9 was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=auth.goethe.ai
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d1:6e:48:6a:3d:bc:96:d8:22:27:cb:a3:fe:c4:30:43:d9Serial Number (int): 419714749493253982145777325698899879412697
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): dd:a7:6d:c7:2f:df:04:53:50:dc:5a:eb:79:97:e5:76:a2:9d:c5:5d
Fingerprint (sha256): d5:cc:5c:c1:47:72:c3:96:01:16:a8:cb:54:16:cd:bc:55:d9:7d:02:fa:1e:de:a3:5e:3b:3a:35:b1:06:b2:0e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate auth.goethe.ai
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for auth.goethe.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
237riverside.com
account.dev.tailormadedates.com
aika.si
alpha-web-push.yieldify-dev.com
anker.guru
app.kurio.co.id
app.residentfy.com
app.sakalaone.com
app.travelloc.com
ateez.re2fe.com
auth.goethe.ai
autocanteen.eu
bagas.me
brewfather.app
buddy.trustablee.com
capt.pw
companyreferrals.com
consent.randstad.com
dashboard.devsy.co.uk
downloadcrush.com
driver.freshkom.com
ekonomkvall.se
fruity.games
goodfaith.church
googleaccounts.us
govea.tech
groupepoisson.fr
gsoc2017.unofficial.network
haebejohannes.de
i.vochi.app
inf-builder-cn.convrrt.site
jjean.io
jouwaanvraagpunt.randstadgroep.nl
jouwaanvraagpunt.tempo-team.nl
kickcustoms.com
leonardo.melbookings.com
lightmate.app
limqianru.com
loboindustries.io
mladiobcane.cz
mojave.live
music4computers.com
neuz.io
ng.docpulse.com
nnhrs.skildare.com.au
oneview.tranzmeo.com
ops.omnimatics.io
p71-dev.credeo.io
platform.nextfood-project.eu
platform.truio.live
public.aita.travel
pubnub.in
rainbowmountainhike.com
reports.softech.cloud
residentleonardo.melbookings.com
sekai-no-goen.com
select-baby-gender.com
shimizu-lawyer.lfv.jp
sl.idexspace.com
snapstats.org
snipertupiniquim.com
sorop.co
speleninutrecht.nl
springwealthmanagement.com
streaming.stena.com
testsite.battlezone.in
twcarbank.com.tw
uat.tapao.ph
unione.re2fe.com
vikibell.com
vivani.design
vizagfish.com
web.brewfather.app
www.adriano.uk
www.autocanteen.eu
www.bassio.xyz
www.christianleon.com
www.ezdev.io
www.glasswing.in
www.iamjohnbrown.com
www.infallibles.in
www.klasterme.com
www.lightmate.app
www.limqianru.com
www.mladiobcane.cz
www.pensioenbijpelsrijcken.nl
www.pic-up.co.il
www.screentray.com
www.silenceintallinn.com
www.simbalance.de
www.smart-scan.app
www.stopa.io
www.tedgoldman.com
www.thegoldenprop.com
www.thegreekphilosopher.com
www.vikibell.com
www.vivani.design
www.whitcode.com
www.williamsrobertstheosparker.com
yadahreg-test.andreassen.info
account.dev.tailormadedates.com
aika.si
alpha-web-push.yieldify-dev.com
anker.guru
app.kurio.co.id
app.residentfy.com
app.sakalaone.com
app.travelloc.com
ateez.re2fe.com
auth.goethe.ai
autocanteen.eu
bagas.me
brewfather.app
buddy.trustablee.com
capt.pw
companyreferrals.com
consent.randstad.com
dashboard.devsy.co.uk
downloadcrush.com
driver.freshkom.com
ekonomkvall.se
fruity.games
goodfaith.church
googleaccounts.us
govea.tech
groupepoisson.fr
gsoc2017.unofficial.network
haebejohannes.de
i.vochi.app
inf-builder-cn.convrrt.site
jjean.io
jouwaanvraagpunt.randstadgroep.nl
jouwaanvraagpunt.tempo-team.nl
kickcustoms.com
leonardo.melbookings.com
lightmate.app
limqianru.com
loboindustries.io
mladiobcane.cz
mojave.live
music4computers.com
neuz.io
ng.docpulse.com
nnhrs.skildare.com.au
oneview.tranzmeo.com
ops.omnimatics.io
p71-dev.credeo.io
platform.nextfood-project.eu
platform.truio.live
public.aita.travel
pubnub.in
rainbowmountainhike.com
reports.softech.cloud
residentleonardo.melbookings.com
sekai-no-goen.com
select-baby-gender.com
shimizu-lawyer.lfv.jp
sl.idexspace.com
snapstats.org
snipertupiniquim.com
sorop.co
speleninutrecht.nl
springwealthmanagement.com
streaming.stena.com
testsite.battlezone.in
twcarbank.com.tw
uat.tapao.ph
unione.re2fe.com
vikibell.com
vivani.design
vizagfish.com
web.brewfather.app
www.adriano.uk
www.autocanteen.eu
www.bassio.xyz
www.christianleon.com
www.ezdev.io
www.glasswing.in
www.iamjohnbrown.com
www.infallibles.in
www.klasterme.com
www.lightmate.app
www.limqianru.com
www.mladiobcane.cz
www.pensioenbijpelsrijcken.nl
www.pic-up.co.il
www.screentray.com
www.silenceintallinn.com
www.simbalance.de
www.smart-scan.app
www.stopa.io
www.tedgoldman.com
www.thegoldenprop.com
www.thegreekphilosopher.com
www.vikibell.com
www.vivani.design
www.whitcode.com
www.williamsrobertstheosparker.com
yadahreg-test.andreassen.info
Other certificates including the domain name goethe.ai
(limited to 100 certificates)
devapp.mydigitalpublication.com
hub.s6.io
panel.bitalium.com
www.365winclub.com
panel.bitalium.com
*.goethe.ai
auth.goethe.ai
auth.goethe.ai
auth.goethe.ai
solarscore.io
auth.goethe.ai
twcarbank.com.tw
*.goethe.ai
twcarbank.com.tw
auth.goethe.ai
rainbowmountainhike.com
enterprise-qa.fitterfly.com
rainbowmountainhike.com
*.goethe.ai
hub.s6.io
panel.bitalium.com
www.365winclub.com
panel.bitalium.com
*.goethe.ai
auth.goethe.ai
auth.goethe.ai
auth.goethe.ai
solarscore.io
auth.goethe.ai
twcarbank.com.tw
*.goethe.ai
twcarbank.com.tw
auth.goethe.ai
rainbowmountainhike.com
enterprise-qa.fitterfly.com
rainbowmountainhike.com
*.goethe.ai
Certificate
The complete raw certificate details for auth.goethe.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINBDCCC+ygAwIBAgISBNFuSGo9vJbYIifLo/7EMEPZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MzAwNjQ5NThaFw0y MDA3MjkwNjQ5NThaMBkxFzAVBgNVBAMTDmF1dGguZ29ldGhlLmFpMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisweg4/A08uxrfH KNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrWrb62Cf/HBei6 zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89llhMA9p+/Uiat7 X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk//tVMMjOThi6 9wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82jXqtE4UCUJ2V R4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+gQIDAQABo4IK EzCCCg8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQGqdzZFD1Q9RuY7bbdEee9FrcM /DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMIIHxgYDVR0RBIIHvTCCB7mCEDIzN3JpdmVyc2lkZS5jb22CH2FjY291bnQu ZGV2LnRhaWxvcm1hZGVkYXRlcy5jb22CB2Fpa2Euc2mCH2FscGhhLXdlYi1wdXNo LnlpZWxkaWZ5LWRldi5jb22CCmFua2VyLmd1cnWCD2FwcC5rdXJpby5jby5pZIIS YXBwLnJlc2lkZW50ZnkuY29tghFhcHAuc2FrYWxhb25lLmNvbYIRYXBwLnRyYXZl bGxvYy5jb22CD2F0ZWV6LnJlMmZlLmNvbYIOYXV0aC5nb2V0aGUuYWmCDmF1dG9j YW50ZWVuLmV1gghiYWdhcy5tZYIOYnJld2ZhdGhlci5hcHCCFGJ1ZGR5LnRydXN0 YWJsZWUuY29tggdjYXB0LnB3ghRjb21wYW55cmVmZXJyYWxzLmNvbYIUY29uc2Vu dC5yYW5kc3RhZC5jb22CFWRhc2hib2FyZC5kZXZzeS5jby51a4IRZG93bmxvYWRj cnVzaC5jb22CE2RyaXZlci5mcmVzaGtvbS5jb22CDmVrb25vbWt2YWxsLnNlggxm cnVpdHkuZ2FtZXOCEGdvb2RmYWl0aC5jaHVyY2iCEWdvb2dsZWFjY291bnRzLnVz ggpnb3ZlYS50ZWNoghBncm91cGVwb2lzc29uLmZyghtnc29jMjAxNy51bm9mZmlj aWFsLm5ldHdvcmuCEGhhZWJlam9oYW5uZXMuZGWCC2kudm9jaGkuYXBwghtpbmYt YnVpbGRlci1jbi5jb252cnJ0LnNpdGWCCGpqZWFuLmlvgiFqb3V3YWFudnJhYWdw dW50LnJhbmRzdGFkZ3JvZXAubmyCHmpvdXdhYW52cmFhZ3B1bnQudGVtcG8tdGVh bS5ubIIPa2lja2N1c3RvbXMuY29tghhsZW9uYXJkby5tZWxib29raW5ncy5jb22C DWxpZ2h0bWF0ZS5hcHCCDWxpbXFpYW5ydS5jb22CEWxvYm9pbmR1c3RyaWVzLmlv gg5tbGFkaW9iY2FuZS5jeoILbW9qYXZlLmxpdmWCE211c2ljNGNvbXB1dGVycy5j b22CB25ldXouaW+CD25nLmRvY3B1bHNlLmNvbYIVbm5ocnMuc2tpbGRhcmUuY29t LmF1ghRvbmV2aWV3LnRyYW56bWVvLmNvbYIRb3BzLm9tbmltYXRpY3MuaW+CEXA3 MS1kZXYuY3JlZGVvLmlvghxwbGF0Zm9ybS5uZXh0Zm9vZC1wcm9qZWN0LmV1ghNw bGF0Zm9ybS50cnVpby5saXZlghJwdWJsaWMuYWl0YS50cmF2ZWyCCXB1Ym51Yi5p boIXcmFpbmJvd21vdW50YWluaGlrZS5jb22CFXJlcG9ydHMuc29mdGVjaC5jbG91 ZIIgcmVzaWRlbnRsZW9uYXJkby5tZWxib29raW5ncy5jb22CEXNla2FpLW5vLWdv ZW4uY29tghZzZWxlY3QtYmFieS1nZW5kZXIuY29tghVzaGltaXp1LWxhd3llci5s ZnYuanCCEHNsLmlkZXhzcGFjZS5jb22CDXNuYXBzdGF0cy5vcmeCFHNuaXBlcnR1 cGluaXF1aW0uY29tgghzb3JvcC5jb4ISc3BlbGVuaW51dHJlY2h0Lm5sghpzcHJp bmd3ZWFsdGhtYW5hZ2VtZW50LmNvbYITc3RyZWFtaW5nLnN0ZW5hLmNvbYIWdGVz dHNpdGUuYmF0dGxlem9uZS5pboIQdHdjYXJiYW5rLmNvbS50d4IMdWF0LnRhcGFv LnBoghB1bmlvbmUucmUyZmUuY29tggx2aWtpYmVsbC5jb22CDXZpdmFuaS5kZXNp Z26CDXZpemFnZmlzaC5jb22CEndlYi5icmV3ZmF0aGVyLmFwcIIOd3d3LmFkcmlh bm8udWuCEnd3dy5hdXRvY2FudGVlbi5ldYIOd3d3LmJhc3Npby54eXqCFXd3dy5j aHJpc3RpYW5sZW9uLmNvbYIMd3d3LmV6ZGV2LmlvghB3d3cuZ2xhc3N3aW5nLmlu ghR3d3cuaWFtam9obmJyb3duLmNvbYISd3d3LmluZmFsbGlibGVzLmlughF3d3cu a2xhc3Rlcm1lLmNvbYIRd3d3LmxpZ2h0bWF0ZS5hcHCCEXd3dy5saW1xaWFucnUu Y29tghJ3d3cubWxhZGlvYmNhbmUuY3qCHXd3dy5wZW5zaW9lbmJpanBlbHNyaWpj a2VuLm5sghB3d3cucGljLXVwLmNvLmlsghJ3d3cuc2NyZWVudHJheS5jb22CGHd3 dy5zaWxlbmNlaW50YWxsaW5uLmNvbYIRd3d3LnNpbWJhbGFuY2UuZGWCEnd3dy5z bWFydC1zY2FuLmFwcIIMd3d3LnN0b3BhLmlvghJ3d3cudGVkZ29sZG1hbi5jb22C FXd3dy50aGVnb2xkZW5wcm9wLmNvbYIbd3d3LnRoZWdyZWVrcGhpbG9zb3BoZXIu Y29tghB3d3cudmlraWJlbGwuY29tghF3d3cudml2YW5pLmRlc2lnboIQd3d3Lndo aXRjb2RlLmNvbYIid3d3LndpbGxpYW1zcm9iZXJ0c3RoZW9zcGFya2VyLmNvbYId eWFkYWhyZWctdGVzdC5hbmRyZWFzc2VuLmluZm8wTAYDVR0gBEUwQzAIBgZngQwB AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz ZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDwlaRZ8gDRgkAQ LS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXHKEE3bAAAEAwBIMEYCIQCrpcFu02pl yHD/ISbSziWPDkA4jVWqFkkW9SUoW9wXdwIhAJKxCFbXfeiRk9sx0MVb//h/hqV4 p63Bd+YDnCebDVJbAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A AAFxyhBN2gAABAMARzBFAiBifOgneLSwi+8wlUYFBdOtiCG3gJ08gS4bSrjxFm1q 1AIhANoXRQKziOEQWUTX3qpOMyleQu439+wVIBpctK1gHnc6MA0GCSqGSIb3DQEB CwUAA4IBAQADrGqKwEap5Qnc8CoxpQw+BotbKKiQlgquibJKKpjttT6LVqDrTPMQ L8FU2EoztgXTSNGcwYqWa905f2nhMkFb7sZDE0xVtoHMbHHB2KvbpESWAQxS3XQI yOPVmxTDWfqnbjTHcME8flhqc45YwLI5n1LgWddy6Ac4RARm+48jE3hLuPsDPaoo mqWEmFbb2nbuh4ThVCrn3QnFo3nzG7JJS+t6GzAUYVcXelVoZKmSyd8UiOImS0+d QqFUT+KsisOKlHE/UTAfPpwNGjSm5+uz7cqcvG9hvZ8i6hKcSUnF8VLLi/qua04K RsvL4A5zpJptaCWA7p+eu7BGkTyIDTWO -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk //tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82 jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+ gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 419714749493253982145777325698899879412697 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 06:49:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-29 06:49:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.goethe.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1981 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '237riverside.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.dev.tailormadedates.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aika.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha-web-push.yieldify-dev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anker.guru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kurio.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.residentfy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sakalaone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.travelloc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ateez.re2fe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.goethe.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocanteen.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagas.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewfather.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddy.trustablee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capt.pw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'companyreferrals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.randstad.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.devsy.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadcrush.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driver.freshkom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekonomkvall.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruity.games' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodfaith.church' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googleaccounts.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govea.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupepoisson.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsoc2017.unofficial.network' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haebejohannes.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.vochi.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inf-builder-cn.convrrt.site' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjean.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jouwaanvraagpunt.randstadgroep.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jouwaanvraagpunt.tempo-team.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickcustoms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonardo.melbookings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightmate.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limqianru.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loboindustries.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mladiobcane.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojave.live' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music4computers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuz.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ng.docpulse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnhrs.skildare.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneview.tranzmeo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.omnimatics.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p71-dev.credeo.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.nextfood-project.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.truio.live' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.aita.travel' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubnub.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainbowmountainhike.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.softech.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residentleonardo.melbookings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sekai-no-goen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'select-baby-gender.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shimizu-lawyer.lfv.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sl.idexspace.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapstats.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snipertupiniquim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorop.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speleninutrecht.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springwealthmanagement.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streaming.stena.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsite.battlezone.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twcarbank.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tapao.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unione.re2fe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vikibell.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivani.design' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vizagfish.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.brewfather.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adriano.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autocanteen.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bassio.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christianleon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezdev.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glasswing.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iamjohnbrown.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infallibles.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klasterme.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightmate.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limqianru.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mladiobcane.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pensioenbijpelsrijcken.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pic-up.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.screentray.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silenceintallinn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simbalance.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smart-scan.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopa.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tedgoldman.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegoldenprop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegreekphilosopher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikibell.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivani.design' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitcode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.williamsrobertstheosparker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yadahreg-test.andreassen.info' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000171ca104ddb0000040300483046022100aba5c16ed36a65c870ff2126d2ce258f0e40388d55aa164916f525285bdc177702210092b10856d77de89193db31d0c55bfff87f86a578a7adc177e6039c279b0d525b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171ca104dda00000403004730450220627ce82778b4b08bef3095460505d3ad8821b7809d3c812e1b4ab8f1166d6ad4022100da174502b388e1105944d7deaa4e33295e42ee37f7ec15201a5cb4ad601e773a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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