firebaseapp.com

- Firebase, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:01:df:f8:7b:d5:11:be:d2:c7:39:d1:81:d2:37:f1:c9 was issued on by GlobalSign nv-sa.

With 148 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Firebase, Inc.

Organization: Firebase, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:01:df:f8:7b:d5:11:be:d2:c7:39:d1:81:d2:37:f1:c9
Serial Number (int): 1492140671098358987924169182043658201330121
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 92:9e:5c:a4:23:9f:e8:c6:8a:0a:60:27:29:82:d3:a5:c0:c5:13:7c
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 91:75:dc:01:4e:1b:e2:d5:65:3d:8f:bb:89:3c:ca:ea:31:83:21:88
Fingerprint (sha256): 0a:8b:79:1b:d2:5e:92:c7:59:cd:34:50:ea:cb:21:5d:7a:b7:40:1b:ab:03:54:e7:eb:0a:3a:01:07:e1:ad:64

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate firebaseapp.com

148

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for firebaseapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

firebaseapp.com
*.firebaseapp.com
21stgov.com
*.21stgov.com
airrobb.net
*.airrobb.net
angularfire2.com
*.angularfire2.com
appxiom.com
*.appxiom.com
argofrienddate.com
*.argofrienddate.com
augur.net
*.augur.net
beckfriends.com
*.beckfriends.com
blockstack.com
*.blockstack.com
blockstackstats.com
*.blockstackstats.com
casualmountains.com
*.casualmountains.com
chaplinkyle.com
*.chaplinkyle.com
conveystrategy.com
*.conveystrategy.com
coop150.dk
*.coop150.dk
coreinputapp.com
*.coreinputapp.com
cultivatecompliance.com
*.cultivatecompliance.com
doonetwork.org
*.doonetwork.org
driverup.com
*.driverup.com
driverupapp.com
*.driverupapp.com
dubbelelf.nl
*.dubbelelf.nl
eduplanllc.com
*.eduplanllc.com
efdr.io
*.efdr.io
efjourney.com
*.efjourney.com
emmersive.io
*.emmersive.io
fal.ci
*.fal.ci
finhacks.in
*.finhacks.in
fire-paper.com
*.fire-paper.com
gratitudely.com
*.gratitudely.com
groh.io
*.groh.io
hackerhow.com
*.hackerhow.com
heyanna.online
*.heyanna.online
honeyjar.co
*.honeyjar.co
ibm-twm.com
*.ibm-twm.com
ihateitapp.com
*.ihateitapp.com
indianspecialists.com
*.indianspecialists.com
inxdisplay.com
*.inxdisplay.com
kiwinetworks.com
*.kiwinetworks.com
lacarte.tech
*.lacarte.tech
lendshare.io
*.lendshare.io
lvvitamins.com
*.lvvitamins.com
marijess.com
*.marijess.com
meatrevoacrecer.com
*.meatrevoacrecer.com
mesilane.net
*.mesilane.net
meta.pro
*.meta.pro
metaguru.guru
*.metaguru.guru
minuet.io
*.minuet.io
moderndeveloper.com
*.moderndeveloper.com
moyanotes.com
*.moyanotes.com
nosy.chat
*.nosy.chat
otherthemes.com
*.otherthemes.com
paia.mobi
*.paia.mobi
persona-im.com
*.persona-im.com
rhinosecret.com
*.rhinosecret.com
robotscrewdriver.com
*.robotscrewdriver.com
sagepath.io
*.sagepath.io
segfault.pl
*.segfault.pl
shakee.hk
*.shakee.hk
snapchat-directory.com
*.snapchat-directory.com
solidwar.com
*.solidwar.com
sportmate.io
*.sportmate.io
survivors.gallery
*.survivors.gallery
tival.se
*.tival.se
tpasque.com
*.tpasque.com
txtask.com
*.txtask.com
udundi.business
*.udundi.business
upcast.io
*.upcast.io
userjoy.io
*.userjoy.io
vizidata.center
*.vizidata.center
vocblr.com
*.vocblr.com
vukovi.org
*.vukovi.org
wolf.vision
*.wolf.vision
xomni.com.au
*.xomni.com.au
yaspan.tech
*.yaspan.tech
zeniface.com
*.zeniface.com

Certificate

The complete raw certificate details for firebaseapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVQzQSRaSs7oIZltSbK6
6TMz/AAsykVnUu7KszUNCCJvE7VI9EboSRpiWTQ/XIvc2d6Usb7KZtWInyY9Rks0
2ZwHzeZ2stLPypXUf3t1l9NwkhUVwTyyUnw8RYqMvJEhwg84WCFTTnEcJesa7c3f
2/73tKU3HaYGoVyQeRBBKKBE+OLL67lhNCBG9BCNw7xsr1AL6fwVEEvNH6nxdUT0
xANLq7LGu1KZ0T9KSK0aLWdVd4NYMfjZuNbJTOnwhXyU8rkluC5Z+76k1Fq21bDB
0GuMiFhegTFM431oRVNHA7tJ+nYRpg2ZGxs0p+atpuNMkNIuDk6o4Tn+n74kWqoc
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492140671098358987924169182043658201330121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-09 23:22:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-12 19:57:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Firebase, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'firebaseapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25920373190439816938193977017241391079671606960341364805549810338940825976118202481792956730831427466975198815657969224228914381324204468307339974705829125670839440588892682904903807857798874884646402731141678098006854220917349150331268911873090682074340531454299377751304453355040312188294051812390195598762511476884894389458516330119365565731561819866259073223192188590675267119998216585582541759802253190854657876434087989170323211024421224132021804943981008428351175598151935304515732947770979059331151128287332700184147225212529507542641353615757312320522451303778998534043831425489575617397873763775339507096613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21stgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.21stgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airrobb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airrobb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angularfire2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angularfire2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argofrienddate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argofrienddate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augur.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augur.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckfriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beckfriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockstackstats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockstackstats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualmountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casualmountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaplinkyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaplinkyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conveystrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conveystrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coop150.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coop150.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coreinputapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coreinputapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultivatecompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cultivatecompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doonetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doonetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driverup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driverup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driverupapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driverupapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubbelelf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dubbelelf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduplanllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eduplanllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efdr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efdr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmersive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emmersive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fal.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fal.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finhacks.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finhacks.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire-paper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fire-paper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratitudely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gratitudely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackerhow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hackerhow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyanna.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heyanna.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeyjar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeyjar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibm-twm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibm-twm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihateitapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihateitapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianspecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianspecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inxdisplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inxdisplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwinetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiwinetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacarte.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacarte.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendshare.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lendshare.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lvvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marijess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marijess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatrevoacrecer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meatrevoacrecer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesilane.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesilane.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meta.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaguru.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metaguru.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minuet.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minuet.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moderndeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moderndeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moyanotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moyanotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nosy.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nosy.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otherthemes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otherthemes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paia.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paia.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persona-im.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.persona-im.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhinosecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhinosecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robotscrewdriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robotscrewdriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagepath.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sagepath.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segfault.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segfault.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shakee.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shakee.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapchat-directory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snapchat-directory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solidwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solidwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportmate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportmate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survivors.gallery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survivors.gallery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tival.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tival.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpasque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tpasque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txtask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txtask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udundi.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udundi.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userjoy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.userjoy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vizidata.center'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vizidata.center'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocblr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocblr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vukovi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vukovi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolf.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolf.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xomni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xomni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaspan.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaspan.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeniface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeniface.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							929e5ca4239fe8c68a0a60272982d3a5c0c5137c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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