www.allstarroofing.co.nz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 8b:57:b8:e5:30:c3:e0:7d:0a:00:00:00:00:d8:fb:d0 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.allstarroofing.co.nz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8b:57:b8:e5:30:c3:e0:7d:0a:00:00:00:00:d8:fb:d0
Serial Number (int): 185218171362504205134107813717883812816
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 85:1f:06:00:f1:16:88:6f:38:d7:2d:69:8c:87:b5:8b:99:5c:cc:4d
Fingerprint (sha256): 09:3c:b9:91:a3:93:8d:4a:ab:35:1c:bd:40:d8:2b:eb:a0:f4:52:5f:67:aa:69:00:29:8e:13:46:08:0a:e0:be

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d4
CRL Distribution Point: http://crls.pki.goog/gts1d4/FAATSdS0y1Y.crl

Check the revocation status for certificate www.allstarroofing.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.allstarroofing.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.allstarroofing.co.nz
buildaclassinitiative.org
www.mootos.org
warehouse.bucketapps.xyz
www.dbark.shop
killer-sudoku.fungame.studio
www.buildaclassinitiative.org
bo.getmore.vn
smarttech.setur.com.tr
www.soaronline.co.za
www.zafieradavids.co.za
admin.auctionall.co.za
www.joseguerrero.app
quanly.webnhatro.vn
www.entrii.com.au
wijin.academy
auctions.auctionall.co.za
aws.janmir.app
simpleoak.app
kinderopvang.cao.app
myclaas.yanniks.app
www.sendsms.cc
www.homecomfortair.net.au
rubenslopes.com.br
vitatrack.biz
guide.abhomebuyersguide.ca
app.communitytools.co
www.crlfe.ca
damemusic.cc
www.1n1g.com
www.abhomebuyersguide.ca
liking.club
www.damemusic.cc
www.guide.abhomebuyersguide.ca
merchat-app.aigens.com
www.airbornevisa.com
academondo.com
www.ben-hassen.com
alexteunis.com
andromedacircus.com
angularcodereview.com
www.araltasher.com
et.arjaadigital.com
pinit.buildthedesign.com
carolinescrystals.com
www.arusev.com
www.builtbyjj.com
codinglatte.com
www.danfecreatives.com
collectioncicbp2019.com
collectionbecm2019.com
collectioncic2019.com
commondayproject.com
familiaapp.com
hourglassreport.com
www.josephwasden.com
www.healthyeatingbydesign.com
jesperbitsch.com
imsarvesh.com
jtec-corporation.com
kiteent.com
app.one-budget.com
app.latteriainternationalbar.com
app.metanoun.com
miconsignacion.com
www.kiteent.com
paulonteri.com
ask.lawrenza.com
shurikon.com
www.pedixwpp.com
ob-3.com
techmaflex.speakylink.com
theafaanoromooproject.com
playzai.com
shop.reconise.com
composer.slitsoft.com
pedidos.tikusgastrobar.com
suchinfarm.com
admin.urvitaeverywhere.com
becketto.dev
www.trueahead.com
www.playzai.com
www.findingplace.dev
www.fusspflege-eliane.de
mathildeogdaniel.dk
supermarket.emeriti.es
opbezoek.test.m4m.io
askogliv.blivnaturligvis.dk
auth.ducky.eco
urugi-ic.info
app.togetherwell.io
beheer.opbezoek.test.m4m.io
premiazionitorino.it
filaunica-display.cloud.leroymerlin.it
poker.kanu.kim
messenger.henrytu.me
www.studios.life
www.premiazionitorino.it
tedhan.me
landon.network

Other certificates including the domain name allstarroofing.co.nz

(limited to 100 certificates)
u.isontic.ch
mad.mallaventura.pe
www.allstarroofing.co.nz
u.isontic.ch
instapropainting.ca
www.gpi.social
www.laurajaeero22.fi
nithyananda.cc
www.infinityservers.co.uk
warpjump.tv
www.ogden.co
mad.mallaventura.pe
www.infinityservers.co.uk
cheatsheet.unbreak.io
arznei-und-haut.de
cheatsheet.unbreak.io
gezondehospitaallucht.be
bradysutton.net
admin.nobody-creator.com
11521183.peerly.app
growthsense.co
rateddishes.co.uk
www.nutimy.com
secudoc.rracpas.com
barnesconsulting.dev
yeonkyulee.com
www.thehippoisfat.com
gezondehospitaallucht.be
bni-romania.ro
instapropainting.ca
staging-handshake.spreekit.com

Certificate

The complete raw certificate details for www.allstarroofing.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 185218171362504205134107813717883812816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-24 02:52:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-22 03:52:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.allstarroofing.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2096 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allstarroofing.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildaclassinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mootos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouse.bucketapps.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dbark.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'killer-sudoku.fungame.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildaclassinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.getmore.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarttech.setur.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soaronline.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zafieradavids.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.auctionall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joseguerrero.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quanly.webnhatro.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.entrii.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wijin.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctions.auctionall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.janmir.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpleoak.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinderopvang.cao.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclaas.yanniks.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sendsms.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homecomfortair.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubenslopes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitatrack.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guide.abhomebuyersguide.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.communitytools.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crlfe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damemusic.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1n1g.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abhomebuyersguide.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liking.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damemusic.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guide.abhomebuyersguide.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchat-app.aigens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airbornevisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ben-hassen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexteunis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andromedacircus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angularcodereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.araltasher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'et.arjaadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinit.buildthedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinescrystals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arusev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.builtbyjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codinglatte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danfecreatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectioncicbp2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectionbecm2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectioncic2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commondayproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familiaapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hourglassreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.josephwasden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyeatingbydesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesperbitsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsarvesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jtec-corporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiteent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.one-budget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.latteriainternationalbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.metanoun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miconsignacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiteent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulonteri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.lawrenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shurikon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedixwpp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ob-3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techmaflex.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theafaanoromooproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playzai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.reconise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'composer.slitsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedidos.tikusgastrobar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suchinfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.urvitaeverywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becketto.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trueahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playzai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findingplace.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fusspflege-eliane.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathildeogdaniel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermarket.emeriti.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opbezoek.test.m4m.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askogliv.blivnaturligvis.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.ducky.eco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urugi-ic.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.togetherwell.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beheer.opbezoek.test.m4m.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiazionitorino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filaunica-display.cloud.leroymerlin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poker.kanu.kim'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger.henrytu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studios.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiazionitorino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedhan.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landon.network'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/FAATSdS0y1Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001799c838c620000040300473045022057eb6d432f078cce9ba532278bc6a4a26b3aa954d382c1bf10b2d1c45787ebd3022100c5175f59e2dc3bb4cb6f29059765b9b815f92d152e1ade3675a1e6c92a6273850077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001799c838d2b0000040300483046022100b7fe0907520e2128e7df417a892c9f4077b6d8941c022202d881c2d9952125ab022100c817a6a847d327d899962679cab9bacb147ba00c0b2f7a7c1de4f2685b48d313
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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