firebaseapp.com

- Firebase, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 62:18:ae:63:a7:82:4f:fd:57:e0:b0:cd was issued on by GlobalSign nv-sa.

With 136 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Firebase, Inc.

Organization: Firebase, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 62:18:ae:63:a7:82:4f:fd:57:e0:b0:cd
Serial Number (int): 30359368712228548351560298701
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b1:0e:de:d4:58:03:ab:1f:fc:4d:8a:3e:0d:5e:d1:77:c3:81:64:31
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 31:89:86:96:70:e1:7c:bd:fb:bb:cd:f8:e0:bb:73:2f:34:81:52:f1
Fingerprint (sha256): 0d:10:cb:66:a0:f6:c1:a0:7f:91:c8:59:b7:5a:f6:bd:ac:3c:b1:4c:a3:25:55:5e:78:2f:08:9f:d1:97:88:bc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate firebaseapp.com

136

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for firebaseapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

firebaseapp.com
*.firebaseapp.com
86portal.com
*.86portal.com
accuro.tech
*.accuro.tech
appdevper.com
*.appdevper.com
appminton.net
*.appminton.net
appscode.com
*.appscode.com
aqualove.ca
*.aqualove.ca
atomtech.io
*.atomtech.io
babing.events
*.babing.events
bakemyapps.com
*.bakemyapps.com
bemyapp.com
*.bemyapp.com
bluemoonbs.com
*.bluemoonbs.com
bobon.coffee
*.bobon.coffee
bonnect.hk
*.bonnect.hk
bregjedavid.nl
*.bregjedavid.nl
budparr.com
*.budparr.com
cameleo-tech.com
*.cameleo-tech.com
coaur.de
*.coaur.de
codejolt.com
*.codejolt.com
collegevine.com
*.collegevine.com
craptique.com
*.craptique.com
distributes.science
*.distributes.science
dym.cx
*.dym.cx
familjenlilja.se
*.familjenlilja.se
fissipeda.com
*.fissipeda.com
geeksquad.co.ke
*.geeksquad.co.ke
gettinglegal.com
*.gettinglegal.com
gettraxi.com
*.gettraxi.com
glowannarbor.org
*.glowannarbor.org
iamlawson.com
*.iamlawson.com
infinityfitness.co.ke
*.infinityfitness.co.ke
ipweb.info
*.ipweb.info
jane.coffee
*.jane.coffee
ketofoodporn.com
*.ketofoodporn.com
kevin-li.org
*.kevin-li.org
kileydorton.com
*.kileydorton.com
knisch.eu
*.knisch.eu
kolybry.cl
*.kolybry.cl
kronostock.com
*.kronostock.com
la-boite-francaise.fr
*.la-boite-francaise.fr
leadgenius.com
*.leadgenius.com
lorval.com.mx
*.lorval.com.mx
marc-wieser.com
*.marc-wieser.com
maxmarine450.com.br
*.maxmarine450.com.br
mmdoremi.com
*.mmdoremi.com
mozotros.world
*.mozotros.world
nazarkiewicz.com
*.nazarkiewicz.com
nerdpiano.com
*.nerdpiano.com
njhomes.info
*.njhomes.info
obaahealth.com
*.obaahealth.com
oxpecker.no
*.oxpecker.no
pixfs.net
*.pixfs.net
pms-isol.fr
*.pms-isol.fr
qlyze.com
*.qlyze.com
reactnativecourse.com
*.reactnativecourse.com
smole.hr
*.smole.hr
teachablemoments.io
*.teachablemoments.io
technifossil.com
*.technifossil.com
tezlopchan.me
*.tezlopchan.me
thechampagnemap.com
*.thechampagnemap.com
timothyko.me
*.timothyko.me
tizgrape.com
*.tizgrape.com
trumpexpressions.com
*.trumpexpressions.com
tyrsikova.by
*.tyrsikova.by
varvet.com
*.varvet.com
viem-co-jem.sk
*.viem-co-jem.sk
vokeapp.com
*.vokeapp.com
yngyn.com
*.yngyn.com

Certificate

The complete raw certificate details for firebaseapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0QhwQUR+gDx4qBh2wwR
MdD65hOmTwzIt/XnnR5hGFDNpDmecbEQSuraYV9ldWIDNRcwrU6Xjf/n2VBi/XLL
IkRv66ihoG7EOsceTcdOvE6E/fx8UEN0wiIeZhem5OShVU5YOaYQtr35RsrkuVQ/
WRsy9pAQbS17u4d9vjlUjQyYkDgdmSK+5b9GhnuJsCdbNpcS500lEo4aTzYeh77p
WXYXnwia3LOyhGh3DQhJkC+PWDWCQqsNcD6dJSVLCs6QrdLZXBadkEjgVzuHj1Re
nzRk1DxP5SJncWMq1jQMdo++roOvU+dXPhrrrsUUnobLpk2nfxhR8eRtaO+EwTMQ
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30359368712228548351560298701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-09 12:53:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-27 17:29:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Firebase, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'firebaseapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23135206876942515302602847978156225262457617778938187689898296651550392310294255719233174813716018098964141072800265234769793648921713638707708524174350987248963239710331210358114675906319000725975141381559416100164933668376478217130441671691509382508900071282596488161440437479297838156133421991929548753252453642546021917131421461204918437423690572921983875548067708225371285444377670614461979607418161308388114502766334830685709006608253331248391202627468726042165263133027981909450253580137559287375951784236387048857285721047017003236931847001111128969116238611804064758228499143007628274251071323534332404109383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2220 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '86portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.86portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accuro.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accuro.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdevper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appdevper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appminton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appminton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appscode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appscode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqualove.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqualove.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomtech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atomtech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babing.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babing.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakemyapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakemyapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bemyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluemoonbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluemoonbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobon.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobon.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonnect.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonnect.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bregjedavid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bregjedavid.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budparr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budparr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameleo-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cameleo-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coaur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coaur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codejolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codejolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegevine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collegevine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craptique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craptique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distributes.science'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.distributes.science'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dym.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dym.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familjenlilja.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familjenlilja.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fissipeda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fissipeda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geeksquad.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geeksquad.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettinglegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gettinglegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettraxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gettraxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glowannarbor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glowannarbor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamlawson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamlawson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinityfitness.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infinityfitness.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipweb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipweb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jane.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jane.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketofoodporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketofoodporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevin-li.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kevin-li.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kileydorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kileydorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knisch.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knisch.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolybry.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolybry.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronostock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kronostock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-boite-francaise.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.la-boite-francaise.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leadgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorval.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lorval.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marc-wieser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marc-wieser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxmarine450.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxmarine450.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmdoremi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmdoremi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozotros.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mozotros.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazarkiewicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nazarkiewicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerdpiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nerdpiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njhomes.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njhomes.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obaahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obaahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxpecker.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxpecker.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixfs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixfs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms-isol.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pms-isol.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qlyze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qlyze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reactnativecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reactnativecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smole.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smole.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachablemoments.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachablemoments.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technifossil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technifossil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tezlopchan.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tezlopchan.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thechampagnemap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thechampagnemap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timothyko.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timothyko.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tizgrape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tizgrape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trumpexpressions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trumpexpressions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyrsikova.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyrsikova.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.varvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viem-co-jem.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viem-co-jem.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vokeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vokeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yngyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yngyn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b10eded45803ab1ffc4d8a3e0d5ed177c3816431
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00183e7e2e610f3b091efae0ecfb1925361065a3605cd7fc31d09058716afd5b19ab44548f8edaecc7c10abd7fdc7a937136f8ac98b5f806496c96e32a8d9bd608865e239573907a40d6642b2fe80a460d15bb3b8eb239c6b8da5e3a968fba4d7b165044f39a4953943cec899ba46db424a0d46ff5f48fc6d1f55ee3125053efc46524ed4d21a1abe74bda5fe575c8c2e36b38e26d22e9ea60c00d64b80396cb257b0693afa47295cbefce97302493910da17868ed5b97bc1a86b55281542e4834a1e0a8631001c26200a8dca6657c6417b688ecec963e508a6b9e23f81c34c69372da925133e1083e35cb11533e18836acd97465a22d1aec511eb9720af68a948