app.appfahrt.ch

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 12:98:76:da:61:0c:7b:8d:0a:5d:9d:3a:cd:da:bc:d7 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.appfahrt.ch

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:98:76:da:61:0c:7b:8d:0a:5d:9d:3a:cd:da:bc:d7
Serial Number (int): 24717743672733575033861864260229577943
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 47:47:b9:93:ce:cb:7d:66:1f:85:35:3d:14:fc:71:e4:26:8d:a6:4c
Fingerprint (sha256): 08:00:f3:2d:19:f5:21:52:df:be:1b:dd:ad:9e:b5:48:b9:6d:ff:98:e9:5e:39:12:3f:49:42:28:88:3f:3a:ca

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/nU4py2oDTkQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/JfC1NrGldlU.crl

Check the revocation status for certificate app.appfahrt.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.appfahrt.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.appfahrt.ch
lucilaelsegood.com
www.kerenku.com
auth.bdalil.com
darrenrobertlee.dev
www.patrie-hachinohe.com
yumicare.com
www.jonathancoronel.com
app.ospitalis.com
technolabpro.com
umbraeternal.com
wltest.wl.titanbay.com
apps.anggrayudi.com
blog.oliverroyknox.com
www.sogolon.dev
mijn.buurtvervoerheumen.nl
verify.mojepraha.eu
www.rabbitdoyenne.co.za
col.marketing
www.vipselections.com.br
panoviewer.tool.wec360.com
www.glycanage.hr
d3.haro.jp
app.tacticalista.com
streamstate.io
panama.solomonschariot.com
symbotalkapp.com
www.ninjasheepproductions.com
sheyla.test.graphite.space
app.powermediaservices.com
decodify.yippudo.com
paddocks.staging-lula.is
codemind.dev
ght.creativemaybeno.dev
brinf.net
rickykenny.com
maisondechame.fr
qc.cambridge.mathematic.org
www.devthrill.com
www.magnusrand.com
www.oguhavalimani.com
cukap.cl
www.mybms.io
berlinsoftware.de
app.rolloverrep.com
www.facetag.info
e-learning.houseofdev.tech
arefakminasi.com
memorialday2022.ynet.co.il
www.doctor.apollofor.me
portal.ouvidordigital.com.br
doctorciobanas.ro
l.diretodostrens.com.br
facetag.info
songlight.revivalapps.com
marcolmos.dev
atlasapp.atlasfitness.es
www.pierredaviau.com
1.zooz.cf
defisansauto.greenplay.social
www.papampei.fr
mediclaveindia.com
morningstaredu.online
yogadorf.it
bettinglounge.co.uk
skiklub-oestertal.de
ylvaclasson.se
www.bettinglounge.co.uk
app.touchalife.org
lockpod.io
web-app.fahrlehrer24.ch
orozcodev.com
bonheurmusic.com
app.bunnyautowash.co.kr
ssen.prod.advanced-infrastructure.co.uk
review-base-app.de
memo.stark.lk
consolidator.autobot.dev
eucsoft.com
illigar.com
app.trikl.ai
verraes.net
myskool.app
www.benedekszabolcs.com
bcci-trivia-1.fanisko.com
reservas.puravidaboxing.cl
au2.resbutler.com
web.wrench.ai
elcampione.com
www.femininefuture.org
litoralfilmes.com
build.stakki.io
mckinsol.com
esfresso.me
oa.mynt.in
onboardp.com
www.finanzs.com
preprod.links.bezones.cz
babaleison.com
app.miwam.bio

Other certificates including the domain name appfahrt.ch

(limited to 100 certificates)
www.agripad.jp
app.appfahrt.ch
appfahrt.ch
appfahrt.ch
clothingforukraine.com
avaliacao.truliv.com.br
appfahrt.ch
appfahrt.ch
go.appfahrt.ch
dasomx.com
shoplink.app
test.freemarket.studio
www.dienstplaner.app
appfahrt.ch
appfahrt.ch
lichtansuu.huyenkhongtamnguyen.com
revise.ac
www.azenut.dev
painel.evolvehub.com.br
app2.ricetteperbimby.it
swapmenus.com
www.viewchinese.com
wearelittlebohemia.com
methodist.io
beta.goalpilot.com
app.appfahrt.ch
dropyourmind.com
app.escala.majic.com.br
www.bindhiyacrackers.com
www.revise.ac
pulpcoin.vip
www.takoyatienda.com
farmersbox.estore.business
appfahrt.ch
pfinz.com
appfahrt.ch
a3000chords.pocketutilities.com
tmak.info
damdev.umusic-online.com
membership.archipelagointernational.com
www.thomasdupre.fr
revise.ac

Certificate

The complete raw certificate details for app.appfahrt.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24717743672733575033861864260229577943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 16:27:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 17:26:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.appfahrt.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/nU4py2oDTkQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2027 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.appfahrt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucilaelsegood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerenku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.bdalil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darrenrobertlee.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patrie-hachinohe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumicare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonathancoronel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ospitalis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technolabpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umbraeternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wltest.wl.titanbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.anggrayudi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.oliverroyknox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sogolon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.buurtvervoerheumen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.mojepraha.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rabbitdoyenne.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'col.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vipselections.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panoviewer.tool.wec360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glycanage.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd3.haro.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tacticalista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamstate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panama.solomonschariot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symbotalkapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ninjasheepproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheyla.test.graphite.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.powermediaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decodify.yippudo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paddocks.staging-lula.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codemind.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ght.creativemaybeno.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rickykenny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisondechame.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc.cambridge.mathematic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devthrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnusrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oguhavalimani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cukap.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinsoftware.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rolloverrep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facetag.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-learning.houseofdev.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arefakminasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memorialday2022.ynet.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doctor.apollofor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ouvidordigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorciobanas.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.diretodostrens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facetag.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songlight.revivalapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcolmos.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlasapp.atlasfitness.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pierredaviau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defisansauto.greenplay.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papampei.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediclaveindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstaredu.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogadorf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettinglounge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiklub-oestertal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ylvaclasson.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettinglounge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.touchalife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockpod.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-app.fahrlehrer24.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orozcodev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonheurmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bunnyautowash.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssen.prod.advanced-infrastructure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review-base-app.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memo.stark.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidator.autobot.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eucsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illigar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.trikl.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verraes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myskool.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benedekszabolcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcci-trivia-1.fanisko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservas.puravidaboxing.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au2.resbutler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.wrench.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elcampione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.femininefuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litoralfilmes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.stakki.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esfresso.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oa.mynt.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboardp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finanzs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.links.bezones.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babaleison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.miwam.bio'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/JfC1NrGldlU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b2a14a2760000040300473045022100a2c972c89bda8eafebcd578da3175dae67d20a95e33dbc779847b129e75ebd2f02206a8c9d7213350f69c94e48efa0544e1815ee718da979d72ab5983c3db63e042500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b2a14a1860000040300473045022100beaff55b258c369b98722c09e0a7ca5470decd8281db7a8b86c6879e870c795a022027fbc7fe8279aea2f9de3375e337a1dcd534ff762d6315f07d6caee8fed586b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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