app.findonematrimony.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 28:4e:c3:b3:a2:5b:0e:15:09:ea:6f:57:59:8f:7e:43 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.findonematrimony.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:4e:c3:b3:a2:5b:0e:15:09:ea:6f:57:59:8f:7e:43
Serial Number (int): 53578088288322803942096484106354261571
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): af:f2:76:e7:47:5f:60:6b:b8:eb:4b:e2:d4:54:c3:67:3d:3a:9b:de
Fingerprint (sha256): 0c:0f:67:13:17:0e:14:70:3e:01:9c:24:98:4b:e4:d2:09:40:44:be:eb:5e:a9:f0:a1:b3:4d:f6:62:d6:48:cf

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/4SD5wL8yWaM
CRL Distribution Point: http://crls.pki.goog/gts1d4/6TDWCwV5JWQ.crl

Check the revocation status for certificate app.findonematrimony.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.findonematrimony.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.findonematrimony.com
www.desiertosideral.mx
www.supplyspace.in
www.money.k-9apps.com
www.el-manchi.at
angelcodez.com
app.savvysellertools.com
www.brandon32.com
www.zachlyoncreative.com
liveteams.co
www.canbuycansell.com
www.oreedo.co
iotsphere.silicon-power.com
brightchamps-ph.com
www.arkmarketresearch.com
app.boardhealthscore.com
2020-annual-survey.essilen-research.com
terasite.com.br
www.yosombo.com
www.remicarayon.fr
liberty.farrindustries.com
www.kasirsofa.com
mediadesain.com
restream.gostream.vn
ezlease.me
store.marketmyindia.com
pinkbeton.com
app.mydataspecialist.com
www.voxelbusters.com
apps.kgwebtech.com
manga-gion.xyz
www.heyreklamajansi.com
dev-admin.dreampay.com.br
flightsoftware.org
webet.tech
niemeyer.fyi
link.itribe.in
podlovers.org
newfutureshq.org.uk
www.storeyhuish.co.uk
www.onty.chat
www.duygucavusoglu.com
triamisi.gr
www.ojasviakshay.in
www.adils.pk
espahelsinki.fi
www.multilangvoice.com
backend-diaxperts.berlinchemie-diabetes.de
www.smstimetable.vasona.mobi
dahmerconsorcios.com.br
dicratch.jp
supportdesk.nithara.com
www.alikhan-zaipoulaiev.fr
e.birikimpilleri.net
mobile.repustar.com
takanoshota.biz
bycroofingnpainting.com
noahgwynn.io
mobile-dev.vetzy.online
webhook.ws-svc.de
blog.arnaud-desportes.fr
soccerwatch.eu
jotflo.com
ethansmithdevelopment.com
www.buffup.tv
app.dev.sandbox.voyagernetz.com
www.tactly.io
lavieenrositas.lgfm.app
liveslidesapp.com
margaretgu.com
admin.starsreward.com
listalar.com.br
mikerosellini.com
mlattialy.com
www.palota.co.za
www.thegohelper.com
ungkirke.dk
www.wolapps.life
fempower.energy
datascienceinitiative.org
cilsbrow.com
advanced-todo.com
admin.benchsentry.com
avgssenergy.com
link.lucro.com.co
mesa.cardapioweb.com
app-04.dev.carto.com
www.avocadoxmx.com
www.aveland.tech
axar-casa.es
www.elias.in
cocolchicken.com
develop.ment.today
www.taxstride.com
gabrielrueda.com
cochesegurounifin.inter.mx
www.backyardfilms.co
www.wrightwaydriving.com
ici-drive.fr
www.getfabriq.com

Other certificates including the domain name findonematrimony.com

(limited to 100 certificates)
app.findonematrimony.com
www.empiretruckingllc.com
ankitgoswami.in
test.ovf.gunasolutions.com
www.lucidex.io
www.farmersmarketwichita.com
definitelynotreptilian.com
www.clenz.app
www.gabrielerinaldis.com
www.padeltactic.com
app.dekostream.com
challengehandshake.com
id.soug.app
www.app.fasterhousekeeping.com
records.akashicblog.org
vreaurelatie.ro

Certificate

The complete raw certificate details for app.findonematrimony.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53578088288322803942096484106354261571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 01:07:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 02:06:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.findonematrimony.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/4SD5wL8yWaM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2061 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.findonematrimony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desiertosideral.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supplyspace.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.money.k-9apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.el-manchi.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelcodez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.savvysellertools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandon32.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zachlyoncreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveteams.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canbuycansell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oreedo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iotsphere.silicon-power.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightchamps-ph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkmarketresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.boardhealthscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020-annual-survey.essilen-research.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terasite.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yosombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remicarayon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty.farrindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kasirsofa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadesain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restream.gostream.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezlease.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.marketmyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkbeton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mydataspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voxelbusters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.kgwebtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manga-gion.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heyreklamajansi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-admin.dreampay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightsoftware.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webet.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niemeyer.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.itribe.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podlovers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfutureshq.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storeyhuish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onty.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duygucavusoglu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triamisi.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ojasviakshay.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adils.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espahelsinki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multilangvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend-diaxperts.berlinchemie-diabetes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smstimetable.vasona.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dahmerconsorcios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicratch.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportdesk.nithara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alikhan-zaipoulaiev.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.birikimpilleri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.repustar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takanoshota.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bycroofingnpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noahgwynn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-dev.vetzy.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhook.ws-svc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.arnaud-desportes.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccerwatch.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jotflo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethansmithdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buffup.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.sandbox.voyagernetz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tactly.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavieenrositas.lgfm.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveslidesapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margaretgu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.starsreward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listalar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikerosellini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlattialy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palota.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegohelper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ungkirke.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolapps.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fempower.energy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datascienceinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cilsbrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanced-todo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.benchsentry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avgssenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.lucro.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesa.cardapioweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-04.dev.carto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avocadoxmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aveland.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axar-casa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elias.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocolchicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.ment.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxstride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabrielrueda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cochesegurounifin.inter.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backyardfilms.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrightwaydriving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ici-drive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getfabriq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/6TDWCwV5JWQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf4c8b8c00000040300463044022059fef0e5fb148660783b2e76ba1376705f9593c0ce18ce67300d299628d8527f02207aabcfbe1806726b29a41b6bb0b3650d25520b420f6526f789b88b3b14edc3ab007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018bf4c8b90d0000040300473045022000ff171e1f0f65c3464438eae49a97a5301e9980b5e5d7db8e401c21778329b5022100926055a3476a9a3e1f3f16435b80ae7edef63ec2c7fd1fc6d8a8f43532d68e2b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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