dnaportal.aksumconsulting.com

Issued by R3

About this certificate

This digital certificate with serial number 03:77:80:fa:03:53:f3:a5:b4:db:bb:b1:cf:ae:0b:8f:86:63 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dnaportal.aksumconsulting.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:80:fa:03:53:f3:a5:b4:db:bb:b1:cf:ae:0b:8f:86:63
Serial Number (int): 302001898784046091514517199965577368536675
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:99:c2:f0:ba:44:10:31:01:8d:e1:4c:fa:20:79:a3:2f:9d:3b:dd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a9:41:d1:85:55:c9:ca:01:e8:30:01:45:61:20:bf:c5:2a:6d:96:72
Fingerprint (sha256): d9:ce:5c:cb:10:b5:31:fb:5c:c0:9b:d2:86:30:3f:c1:9b:af:6b:9f:c0:7e:84:f6:c1:5d:4c:bf:17:5e:78:21

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dnaportal.aksumconsulting.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dnaportal.aksumconsulting.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.rvbooks.app
adminportal.cclc-capvtech.com
agentsolutions.preferental.com
amx.nudgsystems.com
app.brachito.com
app.brokerji.in
app.enviroview.com
app.matr.com.br
app.quibo.mx
applefcu.operativeintelligence.com
assoretestops.mhybrid.org
awg-sgf.smsi-psm.com
bdt-585785ead0.gosh.net.nz
beaconsafety735.gosh.net.nz
bonitaschool.frm-ops.com
bv.drjoe.com.br
cak.reelanalytics.net
calbrgy166.enrichapps.com
canterburytuc672ad83a09.gosh.net.nz
care.travelport-ghana.com
case-management-portal.plan.lawyer
cityofventura.recyclist.co
coastalchristian.frm-ops.com
crm.linkvehicles.com
delaware.nudgsystems.com
demo.gkoilfield.com
demo.mhybrid.org
demo.sdpa.in
dmtt.parauapebas.app
dnaportal.aksumconsulting.com
dpf.cassca.com
e-commerce.imerchant.online
elevance.briotix.works
financiera2.viaplanilla.com
fortmojave.frm-ops.com
guestgateway.assetsoft.biz
imt.copportal.com
indiaebus.therapyconcepts.org
kam.reelanalytics.net
keralty.aiudapp.com
kwra.recyclist.co
leenus.salessoft.in
login.rajhomes.co
mdeofxw.tech-titan.com
medipro.predicto.systems
mrm.imerchant.online
okfoods-fs2.smsi-psm.com
okfoods-hvn.smsi-psm.com
ops.spacewood.co.in
partner.simstore.ec
patio21.softpme.cl
playadulce.frm-ops.com
portal.andiseg.cloud
portal.apsgroup.cloud
portal.cainwatters.com
portal.gestical.com.mx
portal.greenlandvaluers.co.nz
portal.kefintl.com
portal.maxiluxsystems.com
portal.openlm.com
portal.quechulada.vip
portal.ytcsb.my
portal2.vsint.in
presto-id.tech-titan.com
pro.lofthost.net
qeiper.operal.ca
raiz.thecosa.org
realiza.pulpodata.org
reseller.rewardly.app
rindesie.aiged.cl
sales.fayyazautos.com
sanleandro.recyclist.co
seggeneralseguros.sipsalario.mx
sg.aidejuridique.qc.ca
shopclues-accupin.locus.sh
sig.estudioderma.com
silverdollarresort.frm-ops.com
skylineflowers.frm-ops.com
supremetech.gkdatalink.com
tiger-brands.reelanalytics.net
us.txcloudservices.com
vendorportal.mhybrid.org
wfa29123s.gosh.net.nz
www.cms-digimanuals.com
www.gobitumenapp.com
www.godistributionapp.com
www.gomemoapp.com
www.toutavelo.paris
za.txcloudservices.com
zebrano.360web.us

Other certificates including the domain name aksumconsulting.com

(limited to 100 certificates)
aksumconsulting.com
portal.greenlandvaluers.co.nz
aksumconsulting.com
portal.cpawagner.com
aksumconsulting.com
dnaportal.aksumconsulting.com

Certificate

The complete raw certificate details for dnaportal.aksumconsulting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEkei6l7yt0i0ka68IZqbMz/Xd0alU
zfUbyBKCN6bNmYRGtuRNh6tH1tDWH72SeaeQ9Z1fHOZc+KbvVNjrKz4Vcw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302001898784046091514517199965577368536675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 18:56:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 18:56:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dnaportal.aksumconsulting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000491e8ba97bcadd22d246baf0866a6cccff5ddd1a954cdf51bc8128237a6cd998446b6e44d87ab47d6d0d61fbd9279a790f59d5f1ce65cf8a6ef54d8eb2b3e1573
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2499c2f0ba441031018de14cfa2079a32f9d3bdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.rvbooks.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminportal.cclc-capvtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentsolutions.preferental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amx.nudgsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.brachito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.brokerji.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.enviroview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.matr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.quibo.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applefcu.operativeintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assoretestops.mhybrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awg-sgf.smsi-psm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdt-585785ead0.gosh.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaconsafety735.gosh.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonitaschool.frm-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bv.drjoe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cak.reelanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calbrgy166.enrichapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburytuc672ad83a09.gosh.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.travelport-ghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'case-management-portal.plan.lawyer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofventura.recyclist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalchristian.frm-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.linkvehicles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delaware.nudgsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.gkoilfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.mhybrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.sdpa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmtt.parauapebas.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnaportal.aksumconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpf.cassca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-commerce.imerchant.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevance.briotix.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financiera2.viaplanilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortmojave.frm-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestgateway.assetsoft.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imt.copportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiaebus.therapyconcepts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kam.reelanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keralty.aiudapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwra.recyclist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leenus.salessoft.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.rajhomes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdeofxw.tech-titan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medipro.predicto.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrm.imerchant.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okfoods-fs2.smsi-psm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okfoods-hvn.smsi-psm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.spacewood.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.simstore.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patio21.softpme.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playadulce.frm-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.andiseg.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.apsgroup.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.cainwatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.gestical.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.greenlandvaluers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.kefintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.maxiluxsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.openlm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.quechulada.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ytcsb.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal2.vsint.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presto-id.tech-titan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.lofthost.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qeiper.operal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raiz.thecosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realiza.pulpodata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reseller.rewardly.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rindesie.aiged.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.fayyazautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanleandro.recyclist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seggeneralseguros.sipsalario.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.aidejuridique.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopclues-accupin.locus.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig.estudioderma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverdollarresort.frm-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skylineflowers.frm-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supremetech.gkdatalink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiger-brands.reelanalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.txcloudservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendorportal.mhybrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfa29123s.gosh.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms-digimanuals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobitumenapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godistributionapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gomemoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toutavelo.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'za.txcloudservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zebrano.360web.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ccbc014a80000040300483046022100ffee57da93a5b4abe74c74dfb38cd4fe3b8c4e2c27dd978ad1333a48bf617274022100c72edce0ee08aa878553460592f27ce22da072234d93e77d79ded3efb0eb2420007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ccbc014ba0000040300473045022078e0349b88fd084d89dbcf13d3f645db881a2b26070aac202c9fb0ea0816ae6e022100a9f420eaf28a1dfbf205e283fd2812ab3dacfdea0d970463ff2c6cf19e602f2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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