nikkei.sogafit.net

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 42:ec:d1:f5:d7:5e:92:90:0a:ff:c0:b2:81:fc:cf:e7 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nikkei.sogafit.net

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 42:ec:d1:f5:d7:5e:92:90:0a:ff:c0:b2:81:fc:cf:e7
Serial Number (int): 88958688281579254387128952938970271719
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b8:c6:1b:0b:12:ce:9c:af:14:85:5c:82:ab:da:4e:3e:16:8e:e6:97
Fingerprint (sha256): 0d:54:bb:fb:d1:99:f1:05:5b:69:73:bc:8a:f6:05:d5:a5:bf:34:b3:c3:2f:2c:ed:20:f9:e3:d7:48:8d:62:cd

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/B-r26a2Gcak
CRL Distribution Point: http://crls.pki.goog/gts1d4/JkSj3uoey00.crl

Check the revocation status for certificate nikkei.sogafit.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nikkei.sogafit.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nikkei.sogafit.net
techvault.info
travelpud.com
www.klaaslandsman.com
beautylink.ro
martineangibaud.fr
equinozio-odv.it
imechsupply.portal.plenadata.com
deathpool.knickj.com
go.sendsafely.com
teenosoft.com
bleibinderschule.onelastglance.com
www.cactilio.com
vacci-pass.com
vaagdevipharmacycollege.com
links.usespringboard.com
apps.narongsak.dev
editais.isac.org.br
home.vetalfa.com
www.sormincorp.com
tienda.susaron.cl
byod.netxautomation.com
www.wooltarisoft.com
app.huddle.finance
naomielliott.co.uk
aceta.in
www.darrenrobertlee.dev
www.beloz.com.co
www.exours.com
www.box88.pl
qbix.rezidnet.com
twodi.us
sdk.rendered.ai
www.cloudorder.jp
icpc.bist.mx
sindan.gla.jp
app.funjoya.co.il
ophelio.de
www.naomielliott.co.uk
car.buja101.com
www.postcodecheck.net
blog.matematykagryzie.pl
www.medeweed.com
applinks-acc.efteling.com
www.proxy.cards
app.mymobilex.com
www.piggyvest-app.live
auth.ct.org.au
www.senmisin.co
jason-pi.com
potencialeng.com.br
admin.speakylink.com
jwsite.site
joytan.pub
www.fearless-security.com
alignsmart.com
justanothermap.com
gentixupdate.getparasol.com
spheon.com
www.tempuradoc.skin
kirupa.fun
www.uueauclaire.com
dashboard.propcart.com
cvchamp.com
www.listingopportunities.com
www.imdns.org
www.sagasofyore.com
csspeeper.com
auth.podoop.com
www.megacell.conssy.com
www.trycortex.com
www.figure.reviews
admin.uhas.com
eroge.pink
www.eroge.pink
app.dev.casus.ch
www.myhomeware.com
gn.demo.nexusplatform.co.uk
app.martinjones.nz
wickedpixels.co.za
develop.athlas.es
dev.inlabdigital.es
links.gems.community
www.magnet.systems
www.vibeheart.jp
marketing.ashutec.com
www.deineliga.de
docs.launchpad.games
seatedrestaurants.io
www.storylineteam.com
tsg.rxcx.au
legacy.settleup.info
www.blockmatrix.art
stefanxo.com
www.roscco.com
wed.atlow.co.il
cmh.me
reviews-axo.wallia.io
www.purdue.nkportfolio.com
wordle.nvxo.de

Other certificates including the domain name sogafit.net

(limited to 100 certificates)
adelmuursepp.work
eugarcom.com.br
bareandoapp.com
www.rolestracker.com
members.occci.ph
app.speaklah.com
lukejenningsportfolio.com
www.myhappinessteam.app
fogo.calligraphy.org
mimansatech.com
esculturareligiosaecuador.com
app.construinspector.com
umsatz.co
firebase.rec.imaprotect.com
download.osmanturan.com
www.ambienteysostenibilidad.org
www.obrasysistemas.net
app.boostthyroid.com
api.emailexp.biz
auth.tangled.me
activesf.com
www.hoofdindewolken.nl
waitrosedev.enezatelecom.com
ko-en.cloud
web.lunyd.com
beta.bazdara.com
early.socialbureau.finance
www.ringa.app
www.relationshiphero.com
nikkei.sogafit.net
controle.votei.app
loyaltoken.io
coact.space
hatechs.com
www.bestsalary.app
www.etc-cat.com
www.cosmosurgecairo.com
applied-at-work.prod.appliedautonomy.no
www.vtube.stream
aburto.jurix.cl
memberapp.augmigo.com
genrephile.com
ithasbeen.xyz
www.followthehuntofthecarofthemanbehindthewheel.org
app.cloudinspekt.com
corporate.rookool.com
wallet.hodllabs.io
app.furbol.nai.dev
sanmarcos.marcafranca.com
www.joneswoodcollective.com
one.aiesec.lk
www.lockn.co
dlani.com.br
amxt.kpeyes.app
shadowlightgaming.com
mbb.rideout.dev
www.takemelost.com
chuseimonjo.net
app.profident.dp.ua
link.gotootu.in
auth.logistia.app
menaje.ru
yfws-checklists.yeahlowflicker.com
ppa.taneko.net
dlani.com.br
www.tricerato.com
app.whiskeymore.site
my2023.site
segevgershon.com
www.redmobile.nz
link.upstox.com
compras-pmsena.silconp.com.br
mobydicom.com
www.thuongthansohoc.vn
milao.leafnet.com.cy
pay.adnyq.app
www.fabricstudies.com
friends-card.co
conowegowchirurgii.dev.kaliware.io
mipsicologa.online
smart.doremeo.com
library.blackpepperswing.com
mioxxo.com
site-demo.pandodev.com
compramostubarco.net
app.reactivepad.com
www.houstonlewis.com
instaspy.com.br
www.hotelsaborefe.com.br
kingyo-sukui.tokyo
lottogold789.com
assets.misskey.io
btcchokidar.com
www.mongodb.gq
trigtrainer.com
veloapli.vipsport.lv
www.nftgenerator.mobi
auth.biyu.fr
dolanc.xyz
app.calm-investing.com

Certificate

The complete raw certificate details for nikkei.sogafit.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88958688281579254387128952938970271719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 05:04:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 06:02:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nikkei.sogafit.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/B-r26a2Gcak'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1943 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikkei.sogafit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techvault.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelpud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klaaslandsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautylink.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martineangibaud.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equinozio-odv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imechsupply.portal.plenadata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deathpool.knickj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.sendsafely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bleibinderschule.onelastglance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cactilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacci-pass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaagdevipharmacycollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.usespringboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.narongsak.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editais.isac.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.vetalfa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sormincorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienda.susaron.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byod.netxautomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wooltarisoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.huddle.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naomielliott.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceta.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darrenrobertlee.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beloz.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.box88.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbix.rezidnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twodi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.rendered.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudorder.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icpc.bist.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sindan.gla.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.funjoya.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophelio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naomielliott.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.buja101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postcodecheck.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.matematykagryzie.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medeweed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applinks-acc.efteling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proxy.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mymobilex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piggyvest-app.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.ct.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senmisin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jason-pi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potencialeng.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwsite.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joytan.pub'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fearless-security.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alignsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justanothermap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentixupdate.getparasol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spheon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tempuradoc.skin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirupa.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uueauclaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.propcart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvchamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listingopportunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imdns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagasofyore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csspeeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.podoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megacell.conssy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trycortex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.figure.reviews'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.uhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroge.pink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eroge.pink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.casus.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhomeware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gn.demo.nexusplatform.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.martinjones.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wickedpixels.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.athlas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.inlabdigital.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.gems.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnet.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vibeheart.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.ashutec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deineliga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.launchpad.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seatedrestaurants.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storylineteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsg.rxcx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.settleup.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockmatrix.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefanxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roscco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wed.atlow.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmh.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviews-axo.wallia.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purdue.nkportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordle.nvxo.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/JkSj3uoey00.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d919e6f780000040300473045022100fb8d04cce74aa27528d2d1f41c810da6dcabc6f59cbcf47b7763acaa3409bb750220090c4e20018f86db26c3752bb2cb0af79588c403e31b9f2287fb6ea102e7ef04007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d919e6f40000004030046304402201d5ac77ab5a42f89af97a86670c898579c0be94800e4f64129c2e63f28d801e202201a0577b784f650a7f7aed4205fb09ab5260c35bce7585f4866d3a99cb3f83da5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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