www.marcojokic.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 40:01:13:9d:9d:f2:cd:30:0a:c9:59:1a:bd:e9:78:56 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.marcojokic.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 40:01:13:9d:9d:f2:cd:30:0a:c9:59:1a:bd:e9:78:56
Serial Number (int): 85076181880579810376359109785931053142
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 4e:b5:5f:59:00:68:83:05:03:51:59:52:c1:bc:44:f2:8e:97:79:19
Fingerprint (sha256): 0c:5a:2c:6c:e3:7e:c7:28:23:c8:a4:d0:14:e1:15:c9:f1:fa:34:38:33:09:98:bb:9d:84:c2:8c:07:bc:e6:3a

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/laUX4E1UO3I
CRL Distribution Point: http://crls.pki.goog/gts1d4/v3-DQmlb-YY.crl

Check the revocation status for certificate www.marcojokic.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.marcojokic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.marcojokic.com
qa.konstantinedatunishvili.com
www.africaterer.com
oneskullstudio.com
sinbakes.com
portforee.com
dreamchaser.today
s.paninigroups.com
niklasnauber.com
www.oneskullstudio.com
www.megahard.info
graduator.school
israagroup.com
auth.metachef.app
portal.cleanspect.net
gripwell.com
app.test2.sparxquiz.com
rawfireinvasion.com
auth.processr.io
portfolio.nickolans.com
www.eyetalk.io
cwrcloud.ccmanagement.group
www.sinarfaeyza.com
realconnect02500.realmetrics.io
clover.smartcondo.app
docs.omniscient-app.com
payshare.dakshjotwani.com
axalys.fr
portal.micronocinc.com
www.anforasdeatenea.com
portal.myleshigh.xyz
flickontv.jp
www.umahardware.in
eastwest.mn
otukare.com
welldone.nempos.delivery
www.cutify.ai
www.dayj.io
oauth.dev.hablaylenguajeapp.com
citysuper-uat.order.place
documentation.ndk.group
www.wpmv.it
guardian.poc.unsproject.com
www.fondocapital.ch
monitor.poc.unsproject.com
farnost-hosteradice.cz
lf-droner.dk
app.dantescreen.online
tax.zmartzer.com
www.p31.kr
sat-view.kg.ru
www.faithway.be
www.nossodivorcio.com.br
app-old.imachine.com.br
www.sqldr.com
me.andiflorea.dev
monogatari.dionricky.com
m.nissansherbrooke.com
yuxiqin.ca
rick-am-rong.de
jiforcefitness.phros.ca
kushcultr.com
chamagne.org
pranavfulkari.com
tiin.io
oihelena.com
link.voxabular.com
app.closingbot.com
www.zensquad.app
l.voxabular.com
link.nemunemu3.dev
www.sanchitburkule.dev
simbank.myhub.vn
menuz.pro
christophebolduc.ca
link.go2bank.com
www.pranavfulkari.com
connect-ng-orders.rxoconnectmain.rxo.com
moinote.in
www.harsivo.com
halliangadi.in
outpostengineer.com
iaol.co.in
connect-ng-carrier-admin.rxoconnectmain.rxo.com
connect-ng-carrier-dashboard.rxoconnectmain.rxo.com
connect-ng-carrier-tenders.rxoconnectmain.rxo.com
www.iamkanye.com
www.whento.info
clinident-app.howob.com
connect-ng-routes.rxoconnectmain.rxo.com
connect-ng-carrier-recurring-lane.rxoconnectmain.rxo.com
portal.doqli.com
cermin.link
media.watafak.io
connect-ng-carrier-registration.rxoconnectmain.rxo.com
connect-ng-registration.rxoconnectmain.rxo.com
app.multipl.xyz
www.jpakjr.com
renante.gravidadezero.space
app.quoteiva.com

Other certificates including the domain name marcojokic.com

(limited to 100 certificates)
www.marcojokic.com
test-f298hf2.fanmio.com
valpri.revolus.com.br
www.agm.cd
portal.myleshigh.xyz
locations-manager.peachystudio.com
www.juneadven.com
claims.web.opc.joinedup.io
www.thelittleguy.co.za
www.grace.app
www.vuokra-asunnotpori.fi
marcocarini.dev
www.thelittleguy.co.za
peppernode.net
thedigitalempire.com
ostium.noiseengineering.us

Certificate

The complete raw certificate details for www.marcojokic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85076181880579810376359109785931053142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 04:58:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 05:57:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.marcojokic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/laUX4E1UO3I'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcojokic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.konstantinedatunishvili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africaterer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneskullstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinbakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portforee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamchaser.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.paninigroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niklasnauber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneskullstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megahard.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduator.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'israagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.metachef.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.cleanspect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gripwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.test2.sparxquiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawfireinvasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.processr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.nickolans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyetalk.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwrcloud.ccmanagement.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinarfaeyza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realconnect02500.realmetrics.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clover.smartcondo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.omniscient-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payshare.dakshjotwani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axalys.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.micronocinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anforasdeatenea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.myleshigh.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flickontv.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umahardware.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastwest.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otukare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welldone.nempos.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cutify.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dayj.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.dev.hablaylenguajeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citysuper-uat.order.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation.ndk.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpmv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardian.poc.unsproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondocapital.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.poc.unsproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farnost-hosteradice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lf-droner.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dantescreen.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tax.zmartzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p31.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sat-view.kg.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithway.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nossodivorcio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-old.imachine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sqldr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.andiflorea.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monogatari.dionricky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.nissansherbrooke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuxiqin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rick-am-rong.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiforcefitness.phros.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kushcultr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamagne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pranavfulkari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oihelena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.voxabular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.closingbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zensquad.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.voxabular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.nemunemu3.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanchitburkule.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simbank.myhub.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menuz.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christophebolduc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.go2bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pranavfulkari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-orders.rxoconnectmain.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moinote.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harsivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halliangadi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outpostengineer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaol.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-carrier-admin.rxoconnectmain.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-carrier-dashboard.rxoconnectmain.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-carrier-tenders.rxoconnectmain.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iamkanye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whento.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinident-app.howob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-routes.rxoconnectmain.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-carrier-recurring-lane.rxoconnectmain.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.doqli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cermin.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.watafak.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-carrier-registration.rxoconnectmain.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-registration.rxoconnectmain.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.multipl.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpakjr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renante.gravidadezero.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.quoteiva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/v3-DQmlb-YY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e554a784e00000403004730450221009714dbd869acc029e63e85a350f531f2dcc64688fb273faf73a48cbd75b6dc15022027cbf945081ad954e81d1c0eea015e71b6b78ee672937f8bf7b77a4eed63afd9007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e554a78840000040300463044022041c372b3877df2ff7b552da2b47d5c7b3bbec147d1104e9a1eca678a365d5a6c02206b0d074f74d52f352bd1c7a506a70dafd87e58f60b21f2013010e2147d94bb0a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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