kaspas-dev.5loyalty.com

Issued by R3

About this certificate

This digital certificate with serial number 03:90:e4:e7:af:d2:4d:86:40:af:c0:48:0b:b1:7c:75:fb:12 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kaspas-dev.5loyalty.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:90:e4:e7:af:d2:4d:86:40:af:c0:48:0b:b1:7c:75:fb:12
Serial Number (int): 310641785601592748457129298001849996409618
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:a0:4b:aa:9c:75:5d:4b:ca:2d:a9:c2:71:c2:5c:d8:a5:5c:d8:6f
Fingerprint (sha256): db:a9:70:79:b4:94:b2:20:89:0f:ce:09:4c:62:cc:0d:47:2c:0e:9c:9b:c8:5a:39:6c:29:2c:57:21:6b:a9:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kaspas-dev.5loyalty.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kaspas-dev.5loyalty.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-labelbox.vnlp.ai
admin.alumio.com
aloud.site
anna-marquez.online
api.dev.suscripciones.co
api.moo.do
app.sayform.com
app.trezeo.com
arenapublisher.com
arle.kennerspiel.com
assets.jcwebtechnologies.com
assets.logrocket.io
auth.rambox.app
auth.trads.com.br
axa-lpo-qa.bop-tech.com
braintrainer.games235.com
bunnybitserc.com
cruisecafe-kiosk.5loyalty.com
damngoodpepper.com
dash.walnutdev.app
davidsoftware.com
devgame.lottosocial.com
diamondgym.app
doom-fire.com
draw.sharelearn.net
f.sounter.com
frastas.com
fridaynightfunkin.games235.com
gestopia.com
get.wechselgott.com
go.htask.com
gravity.playpilot.com
growlondon.hubspot.com
hardlyneutral.com
hce-qa.bop-tech.com
heavymetalfitness.co.uk
iniciashop.website
inter.mx
karloffenberger.com
kaspas-dev.5loyalty.com
l.nested.com
limburgsmooiste.ilionx.com
mudanzasreto.com
mynet.pharmercure.com
oakandpoppy.5loyalty.com
ods-islandpoke.5loyalty.com
online.codingelements.com
partners.wtfast.com
pelicanstate.5loyalty.com
picker.tailor.guide
popq.jek.io
programdashboard.com
react-ssr-and-hydration.nick.wylynko.com
returnportal.rituals.com
rsvp.jessandjason.com
rttoolbox.mlsoft.pl
rukatype.com
saathvik.online
seller.duo-buy.com
solitaire.games235.com
staging.capricelab.com
stats.bogged.finance
stellarstation.com
taikadevstudios.com
valentinduffet.fr
videos.dbfanmanga.com
viilu.tv
vukoo.io
web.qmunity.app
whalesarefish.com
www.apfome.co.uk
www.coffdee.com
www.damngoodpepper.com
www.dev.log.mccallum.iinteractive.com
www.happypay.live
www.krishnabrand.in
www.mkbservicedesk.nl
www.moffitt.app
www.motokadr.com
www.noselfidtw.cc
www.programdashboard.com
www.rukatype.com
www.stramameridianacademy.com
www.xn--12car4jyaq2b.com
www.xn--3iqu2l.com
www.xn--69-3qi8lod.com
www.xn--leonarc-tqb.com
www.xn--riskp-yqa2d0d.hu
xn--12cbpo3dgo5did3b5eb5cwa8a5bl7nrgoa4d.com
xn--42c1dta5cd.com
xn--addimveis-96a.com.br
xn--lasdoas-8za.com.uy
xn--lgeln-sra3k.dk
xn--mnchhausen-9db.dev
xn--no8h.jmpesp.com
xn--nrdmarked-l8a.dk
xn--psiclogoenlinea-yrb.com
xn--slckball3000-7cb.no
xn--strbr-jraf.com
yapily.com

Other certificates including the domain name 5loyalty.com

(limited to 100 certificates)
sni46527.cloudflaressl.com
www.wysely.in
crm.equix.app
webapp159753.faster.es
admin-demo.5loyalty.com
test.blackcoffeecreative.com.au
sni46527.cloudflaressl.com
www.focusfriend.xyz
sni46527.cloudflaressl.com
sni46527.cloudflaressl.com
orizon.coleta.relatoweb.com.br
sutraorg.com
devuat.ga
sni46527.cloudflaressl.com
www.rostykerei.nl
laurent.soy
smmc.epayportals.com
kingstonnychurchofchrist.org
sni61584.cloudflaressl.com
asker-vgs.snapmentor.no
playmc2.com
www.japjotsingh.dev
api.digitaldiary.app
sni61584.cloudflaressl.com
staging-opentable.thelevel.ai
www.aero-vault.com
argentagressler.adv.br
streetdice.io
m1st1ck.com
preval.exploredata.app
www.knotzer.online
undiscovered.app
rn-md-guess-game-privacy-policy.mohammed-najib.me
new.thethoughtfulrider.com.au
acini.co.uk
www.adultdaters.com
t-port-uchiiwai.tmls.jp
www.csaposs.com
theelephant.tech
feasibility.skywire.co.za
www.attilanatz.com
cavalomagico.com
www.eventcam.li
u.isontic.ch
blueglassesman.com
www.sidearm.app
voicebox.voxjar.com
andychien.me
safizn.us
www.joseantonioribeiro.com
www.firaskudsy.com
cwkc.org
www.corporacionsuramericana.org
www.rnd.cl
sni46527.cloudflaressl.com
scalingscience.ai
repair.me
www.amrgharieb.com
auth.nework.app
sni46527.cloudflaressl.com
warrantify.siaarzh.com
pqs-d.facet-adviseurs.nl
app.mycrafty.de
www.ecoincome.eu
tinvoice.tintash.com
goleague.tv
ekloges.sifnos.net
omnisnexus.fi
sociallax.com
app.all4u.app
stol.day
doc.logi.one
u.isontic.ch
bkvaluemeal.net
admin.doctor365.kr
pr-sdk.hoora.io
sni46527.cloudflaressl.com
apunarcloudstoreadmin.estore.business
marketplace.hashcove.com
www.iphone-news.it
cdlbox.app
var8.net
staging.kiek.app
www.granzax.com
sni46527.cloudflaressl.com
portal.nolag.app
soukdz.smartvision.dz
avaliacao.truliv.com.br
glamup.cl
www.eishinsangyo.com
www.kolarikovi.cz
sni46527.cloudflaressl.com
widgets.roboflow.one
dev.linkafrica.28east.co.za
www.uniquestoes.com.br
www.lifedash.io
afrochives.studio
link.nwplus.biz
www.gemhs.net
staging.renagarage.se

Certificate

The complete raw certificate details for kaspas-dev.5loyalty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310641785601592748457129298001849996409618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 04:27:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 04:27:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaspas-dev.5loyalty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2154 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-labelbox.vnlp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.alumio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aloud.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anna-marquez.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.suscripciones.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.moo.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sayform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.trezeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapublisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arle.kennerspiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.jcwebtechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.logrocket.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.rambox.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.trads.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axa-lpo-qa.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braintrainer.games235.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunnybitserc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruisecafe-kiosk.5loyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damngoodpepper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash.walnutdev.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devgame.lottosocial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondgym.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doom-fire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draw.sharelearn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.sounter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frastas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridaynightfunkin.games235.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.wechselgott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.htask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravity.playpilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growlondon.hubspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardlyneutral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hce-qa.bop-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavymetalfitness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iniciashop.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inter.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karloffenberger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaspas-dev.5loyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.nested.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limburgsmooiste.ilionx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mudanzasreto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynet.pharmercure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakandpoppy.5loyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ods-islandpoke.5loyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.codingelements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.wtfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelicanstate.5loyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picker.tailor.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popq.jek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programdashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react-ssr-and-hydration.nick.wylynko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returnportal.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsvp.jessandjason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rttoolbox.mlsoft.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rukatype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saathvik.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seller.duo-buy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solitaire.games235.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.capricelab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.bogged.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellarstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taikadevstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentinduffet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.dbfanmanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viilu.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vukoo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.qmunity.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whalesarefish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apfome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffdee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damngoodpepper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.log.mccallum.iinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happypay.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krishnabrand.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mkbservicedesk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moffitt.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motokadr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noselfidtw.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.programdashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rukatype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stramameridianacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--12car4jyaq2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--3iqu2l.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--69-3qi8lod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--leonarc-tqb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--riskp-yqa2d0d.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--12cbpo3dgo5did3b5eb5cwa8a5bl7nrgoa4d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--42c1dta5cd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--addimveis-96a.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lasdoas-8za.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lgeln-sra3k.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mnchhausen-9db.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--no8h.jmpesp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nrdmarked-l8a.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--psiclogoenlinea-yrb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--slckball3000-7cb.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--strbr-jraf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yapily.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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