2019.helswingi.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ef:35:1d:ba:60:81:3b:a6:e3:65:1b:e4:48:8a:da:8b:77 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2019.helswingi.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ef:35:1d:ba:60:81:3b:a6:e3:65:1b:e4:48:8a:da:8b:77
Serial Number (int): 429847232861704862967085177113983013522295
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:3d:1b:3d:77:e8:40:77:ee:ca:b2:cf:13:cd:0b:c7:fa:ad:af:76
Fingerprint (sha256): d6:7d:8e:9b:eb:11:af:cf:63:6d:6a:05:ee:6c:7c:51:32:9d:cb:51:1f:6e:3f:74:cf:c8:c2:2e:c9:cc:0a:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 2019.helswingi.fi

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2019.helswingi.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2019.helswingi.fi
admin.zist.be
alc.yanfoma.net
alpha.link.consentio.co
api.walletos.app
apotheken.apoly.at
app-dev.uugot.it
app.goodad.co
auth.e-suggestion.com
auth.outfalls.info
bantien.app
beora.io
bestfinancialcu.wallit.app
beta.link.consentio.co
broadwayjanitorial.com
caesh.app
confidenca.brckmkrs.app
debug.link.consentio.co
demo.deepen.dance
discount.ai
discounts.ai
doctor301.com
fb.paukr.org
firebase.bug.network
firebase.sfxlab.space
furryconmap.nikol.ai
gdpr.acnespecialisten.se
globalcreditgame.com.ua
imito.ch
invoice-generator.stepin.name
jampad.app
kmlmanager.aratani.ca
kommunity.co
libra-admin-staging.containerlabs.io
link.consentio.co
maratonbjj-app.zlomiarzteam.pl
mice.race.thai.run
mlgtrade.com
nebfcr.org
negocios.kanjea.app
pedidosallsabor.com.br
portfolio.abhivatsya.com
preprightpaint.com
prisma.philanthrosphere.com
ranvijay.in
readwords.ai
s.retach.biz
salesambition.se
semarak.karanganyar.co
share.upspeak.de
stage.representativetruth.org
staging.eyecatch.io
stg.nekobeya.pechika.jp
tool.klimaatgerust.nl
tutting.app
vyomark.com
wallmobile.9lessons.info
whoami.cogcore.be
whooop.jp
wonshe.net
www.askxanything.com
www.baltoinc.com
www.bryanlong.tech
www.caribbean.institute
www.eyecatch.io
www.globalcreditgame.com.ua
www.investorportal.app
www.lebebedemarineetmaxence.fr
www.livelawyers.org
www.lloydevans.co.uk
www.musicateca.ml
www.myluckydraw.com
www.niklasnauber.com
www.northfaceonthetrack.com
www.paragonatlas.org
www.pedidosallsabor.com.br
www.preprightpaint.com
www.rappicorp.com.co
www.restaurant-namsan.ch
www.revli.co.uk
www.secc-evo.com
www.shipperbuddy.com
www.spemer.com
www.spritjakt.no
www.subzero-wolf.repair
www.tdtechlink.com
www.thetoughhope.org
www.timeio.com
www.tonypedia.org
www.tutting.app
www.valeriocomo.com
www.velton-accesos.com.ar
www.voixtek.com
www.webstash.de
www.winds.co.in
www.wonshe.net
www.youhaveawaywithwords.com
x4mind.com
youhaveawaywithwords.com
zh.iwealth.com.my

Other certificates including the domain name helswingi.fi

(limited to 100 certificates)
helswingi.fi
imito.ch
miseggsy.com
bienestardigital.cl
2019.helswingi.fi
factura.mandos.biz
www.burzai.app
agrisense.live
www.helswingi.fi
www.autoscriber.io
helswingi.fi
harshilpatel.co.in
apotheken.apoly.at
2018.helswingi.fi
www.adriandanlos.es
imito.ch
owner.malooba.app
www.pivotcafe.com
www.helswingi.fi
zukis.co.uk
miseggsy.com
admin.ibscoach.org
www.larocarestaurante.com
backoffice.vodium.us
helswingi.fi
nealwadhwa.com
www.helswingi.fi
lucianataminato.com.br
strategystudios.berlin
jaimefriass.es
joecorp.dev
www.jesplumbing.com
apotheken.apoly.at
robertoavila.com.br
abnw7.club
www.helswingi.fi
gesundheitszentrum-hollabrunn.at
openbox.floorfound.com
oxo-cms.nokatotedo.my.id
www.helswingi.fi
v6.material.angular.io
www.helswingi.fi
krungthai.demo.icwdc.com
www.beesmart.app
helswingi.fi
github.sert2521.org
helswingi.fi
helswingi.fi
helswingi.fi
www.helswingi.fi
2019.helswingi.fi
www.burzai.app
helswingi.fi
test.rtduggan.com
helswingi.fi
prod.fertilemind.app
3things.mhaaland.com
2019.helswingi.fi
jaimefriass.es
helswingi.fi
www.zurl.top
www.helswingi.fi
helswingi.fi
givecherry.com

Certificate

The complete raw certificate details for 2019.helswingi.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429847232861704862967085177113983013522295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-15 09:47:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-13 09:47:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2019.helswingi.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2042 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019.helswingi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zist.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alc.yanfoma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.link.consentio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.walletos.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apotheken.apoly.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev.uugot.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.goodad.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.e-suggestion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.outfalls.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bantien.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beora.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestfinancialcu.wallit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.link.consentio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadwayjanitorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caesh.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confidenca.brckmkrs.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debug.link.consentio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.deepen.dance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discount.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discounts.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctor301.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.paukr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.bug.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.sfxlab.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furryconmap.nikol.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdpr.acnespecialisten.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcreditgame.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imito.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice-generator.stepin.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jampad.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmlmanager.aratani.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kommunity.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libra-admin-staging.containerlabs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.consentio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maratonbjj-app.zlomiarzteam.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mice.race.thai.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlgtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebfcr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negocios.kanjea.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedidosallsabor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.abhivatsya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprightpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisma.philanthrosphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranvijay.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readwords.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.retach.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesambition.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semarak.karanganyar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.upspeak.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.representativetruth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.eyecatch.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.nekobeya.pechika.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tool.klimaatgerust.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutting.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyomark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallmobile.9lessons.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoami.cogcore.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whooop.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonshe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askxanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baltoinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryanlong.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caribbean.institute'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyecatch.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalcreditgame.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investorportal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lebebedemarineetmaxence.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livelawyers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lloydevans.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musicateca.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myluckydraw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niklasnauber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northfaceonthetrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paragonatlas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedidosallsabor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprightpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rappicorp.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant-namsan.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revli.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secc-evo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipperbuddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spemer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spritjakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subzero-wolf.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdtechlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetoughhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timeio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonypedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutting.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valeriocomo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velton-accesos.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voixtek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webstash.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winds.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wonshe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youhaveawaywithwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x4mind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youhaveawaywithwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.iwealth.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001735215ec2e0000040300473045022100d9a41d485c0f2b108689eb0feccbc00789dc6ca0f50542f23938c706d950e5a702205eadc4d56b1cc8addf7b7f00a23fc394bf4daabd50fd582ed945bb5a527c348c007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001735215ec2e0000040300483046022100f64b23e00b5644e2505eabae8e6a855fa7bcb9f5667f18b1640d58cda87dc572022100fa4be0c6e14c8d3eec30fc692e740e6de304c32fbe55e14b1b9a427917b45229
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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