www.sacagrande.com.br

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ff:0e:2b:25:dc:c2:af:c9:0a:fd:f2:e1:43:ed:e2:0a was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sacagrande.com.br

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): ff:0e:2b:25:dc:c2:af:c9:0a:fd:f2:e1:43:ed:e2:0a
Serial Number (int): 339026706224550069119302218354713813514
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 26:bb:ef:ca:54:5c:e6:6a:cb:c0:6b:2b:24:2a:ef:7d:4f:49:92:81
Fingerprint (sha256): 0b:3e:95:65:ec:bc:d4:71:14:d9:40:b6:ec:cd:20:2e:9f:ad:15:1c:d3:52:de:24:12:b4:c0:ea:47:2a:6d:af

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/28vLkC07sLY
CRL Distribution Point: http://crls.pki.goog/gts1d4/RjQD0EJS68Y.crl

Check the revocation status for certificate www.sacagrande.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sacagrande.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sacagrande.com.br
engagedencounter.org.au
module6project.joranmulderij.com
www.bolerosmets.be
artfix.ru
www.oforis.com
evote.pilkommedia.org
race.indo.run
signering.fagbrev.io
www.armazemsteakbeer.com.br
www.fabianojmoura.com.br
www.comicaroid.co.jp
d3.gakuzo.jp
www.dilotara.gr
app.geofertas.com.br
sigma.kinderopvang.appdashboard.nl
www.giohmassas.com.br
www.holybox.gr
challenge.hetic.glassworks.tech
musikquiz.florian-zug.de
easy-hosting.avenya.ch
admin.duxlicitacoes.com.br
simulador-stage.airesdigital.com.br
fg.eblizz.in
www.synth.sk
cdn.alanclan.org
app.estoqueessencial.com.br
internal.openrep.eu
2020.kuid-graduation.com
auth.google.67play.com.br
ceocrm-qa.cajalosandes.cl
basometro.reinaldoalguz.com.br
www.amatuny.com
eventos.abrao.com.br
www.speakuprzn.ru
link.smyk.ro
www.noise.com.hk
develop.jackhunting.com
www.stagnesbusega.com
ocglam.com
www.softzela.com
auth.chessgo.in
www.zioninfo.tech
iot.blueroler.com
www.smitmun.co.in
www.dmvaljevo.rs
myframes.ccsframes.com
www.servigasodomesticos.com
www.grorico.com
app.staging.pentech.hu
massagetoday.com
dev.melihkuru.dev
zkrent.com
sese.dev
sartorius.luova-gifting.com
auth.iris.premise.com
www.mattbendel.com
swipehome.thejmdw.com
www.theoddlifeline.com
app.simyra.co.uk
app.zyprun.com
zkfiling.com
zkfirm.com
console-test.hefringmarine.com
react-calculator.jusemon.com
zkgains.com
www.yoshidashingo.com
apps.yosoyciclista.com
zkgamble.com
www.cannabistat.com
menu.rojobirria.com
mrincorporadora.com.br
menu.zyprun.com
link-yiu-tung.jec-digital.com
takion0.jp
fate-char-generator.pirochta.com
joneschan.net
tothecut.com
platform.wiply.com
www.iskauto.in
hope4tebassie.org
www.gymox.page
www.protektron.com
meddelivery.in
link-hing-wah.jec-digital.com
link-tsz-wan-shan.jec-digital.com
admin.trashbackindia.com
nurturewellness.co.in
johnsontech.co.uk
link-tko-gateway.jec-digital.com
sevaspoorthi.org
app.tec-b.jp
www.elamanpolku.fi
dlink.castpro.live
scorm.maestrasuite.com
tanda.aquariusit.com
utoolk.me
g.axis.moscow
resource.streamnews.net
msg.wellsfazgo.link

Other certificates including the domain name sacagrande.com.br

(limited to 100 certificates)
www.sacagrande.com.br
www.thefarmhouse.co.nz
demo.y-okuda.dev
www.anafesto.it
blog.angularcommerce.io
sacagrande.com.br
office.ejartech.com
auth.groupspot.app
www.train-go-sorry.com
blog.editoravirtualis.com
www.kangaeemicroatm.in
insideoutsideinside.com
www.gratitude.zone
amaltjose.com
survey.cnguyen.de
face2face.ca
laszlonorbert.com
smart-visit-home-web.athip.dev
colman.tk
desiderioalmansa.com

Certificate

The complete raw certificate details for www.sacagrande.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339026706224550069119302218354713813514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 05:42:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 06:40:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sacagrande.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/28vLkC07sLY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacagrande.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engagedencounter.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'module6project.joranmulderij.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolerosmets.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artfix.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oforis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evote.pilkommedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'race.indo.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signering.fagbrev.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armazemsteakbeer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabianojmoura.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comicaroid.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd3.gakuzo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dilotara.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.geofertas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigma.kinderopvang.appdashboard.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giohmassas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holybox.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challenge.hetic.glassworks.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musikquiz.florian-zug.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy-hosting.avenya.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.duxlicitacoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulador-stage.airesdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fg.eblizz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synth.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.alanclan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.estoqueessencial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.openrep.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020.kuid-graduation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.google.67play.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceocrm-qa.cajalosandes.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basometro.reinaldoalguz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amatuny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.abrao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speakuprzn.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.smyk.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noise.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.jackhunting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagnesbusega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocglam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softzela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.chessgo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zioninfo.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iot.blueroler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smitmun.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmvaljevo.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myframes.ccsframes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servigasodomesticos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grorico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staging.pentech.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massagetoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.melihkuru.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zkrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sese.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sartorius.luova-gifting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.iris.premise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mattbendel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swipehome.thejmdw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theoddlifeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.simyra.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.zyprun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zkfiling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zkfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console-test.hefringmarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react-calculator.jusemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zkgains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoshidashingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.yosoyciclista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zkgamble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabistat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menu.rojobirria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrincorporadora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menu.zyprun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-yiu-tung.jec-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takion0.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fate-char-generator.pirochta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joneschan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tothecut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.wiply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iskauto.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hope4tebassie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gymox.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protektron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meddelivery.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-hing-wah.jec-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-tsz-wan-shan.jec-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.trashbackindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurturewellness.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsontech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-tko-gateway.jec-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevaspoorthi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tec-b.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elamanpolku.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlink.castpro.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorm.maestrasuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanda.aquariusit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utoolk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g.axis.moscow'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.streamnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msg.wellsfazgo.link'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/RjQD0EJS68Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e5a987421000004030047304502201471ba0a093ff4933b150407ebedfbee5bef44e98e251b1ca7158f563eaa9cc902210099fd4a51038f4a636418df6165796209c01abd1757ea95946d95342e82d99905007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e5a9873190000040300483046022100e88630641571a7607c585cbba33ca25911a56560eb4ee0ccdec6435a4bc6afdb022100d8531408b187db2cf474cb3b2500b7edd7be636dfa5e835e336d86525a5b490d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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