www.nfg.dk

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 1b:8e:4b:5f:79:3c:ee:27:10:40:2a:9b:80:12:d2:79 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.nfg.dk

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:8e:4b:5f:79:3c:ee:27:10:40:2a:9b:80:12:d2:79
Serial Number (int): 36627990785021733203424544203727884921
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 3a:42:7a:36:0d:07:00:96:fd:6a:1e:28:dd:46:45:f7:fe:d9:d3:42
Fingerprint (sha256): 0e:b6:09:1a:8b:5d:cd:f7:10:a8:42:3c:fb:f3:8f:99:fa:7c:43:f0:6a:2e:c0:33:f5:c8:03:91:9b:92:0f:12

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/2QTRw0C6YLA
CRL Distribution Point: http://crls.pki.goog/gts1d4/d_e-NFnCJs8.crl

Check the revocation status for certificate www.nfg.dk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nfg.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nfg.dk
vinosperonistas.ar
onvi.be
www.entregaja.com.br
www.medoboard.com
www.marinamazzocchi.com
recruit-props.neodev.se
cornil.club
www.ateamspot.com
auth.smartvote.org
myhardwaredepot.estore.business
www.zgsambiente.com.br
cms.ride.bz
ravenshill.club
arnoldasdev.com
firebasetest.keuper.net
construyen2.casalindacity.com
www.stageproof.nl
www.callforatlas.com
0dailies.com
www.cornil.club
dotslashrun.com
www.ravenshill.club
djlbirdnest.com
nice-patient-staging.cloudburststudio.com
ashfield.cfd
app.engage.kgblaw.voyagernetz.us
www.brandonschitka.ca
www.asyardscrap.com
app.flexgiving.nl
www.fitnessunbound.com
pizzeriacapra.com
internos.menara.com.ar
demo.digma.io
wor.pwer.semplox.online
trimurtigroup.estore.business
leaper.com
locibook.com
www.ostya.app
brianaihasz.com
apsmolding.com
schlusseldienst-rheinbach.de
growthstakr.com
health-pulse.care
kierratyskaverit.fi
puroartesanal.com
upford.beauty
slittrell.com
shishastream.com
technoinmotion.com
www.digimoxie.com
dev-widget-v2.froged.com
lifetimekeeper.cloudia9.com
peskyreminders.com
www.glauciaveras.com
text.geek-salon-products.com
concierge.clermontclub.com
spent-tracker.com
partner-content.faithcomesbyhearing.com
rest-studio.com
bynauman.com
www.upford.beauty
sheerba.com
www.honhuay.com
apps.mrcoi.com
bigbreakers.paul.ovh
www.culturaimmersiva.it
mileagetracker.codestream.co.za
link.kritsnam.com
www.djam-technologies.com
staging.lostark.epictools.net
mastereye.in
www.beta.socage360.com
wheresmyshit.io
kidzz.me
void.win
uchigeki.spwn.jp
pedidos.lawcorp.com.mx
saluk.ai
www.nina.games
league-hm-firebase-iel-staging.league.dev
yorkland.org
topmost.com.au
chillchat.org
greenalia.marcafranca.com
www.bryaxis.com
lab.jiwancare.com
frontierconsortium.com
www.beachquartersdaytona.com
www.uftonedef.com
www.convertcy.com
findingyourwayinnv.app
www.andapay.com.co
greenbok.com
events.thefreshmarketdubai.ae
sergiomedina.io
www.fullyone.com
www.metaverse-biz.site
www.jarednewnam.com
spacebang.cvivo.digital

Other certificates including the domain name nfg.dk

(limited to 100 certificates)
admin.fanimals.co.nz
www.comicswox.com
www.chifli.com
www.bashstream.com
earlycdt.com
www.nfg.dk
stitcht-tqm.tk
www.bambumeta.io
plumasense.com
www.comicswox.com
www.ngoan-streetfood.de
lay.mayamd.ai
charleshay.com
www.sorrisihair.co.za
thestorystash.com
www.checkpod.app
www.bienesraicesaustin.com
safetyapp.auxstech.org
charleshay.com
nfg.dk
plumasense.com
staging.activerecall.com
www.chifli.com
admin.fanimals.co.nz
staging.activerecall.com
sociolink.info
www.sorrisihair.co.za
vk.aniclap.ru
broadwaystationsushi.ca
www.bienesraicesaustin.com
petragulicher.com
www.racetime.app
nori-k.app
broadwaystationsushi.ca
www.recycledsets.com
www.recycledsets.com
links.liteflow.com
links.liteflow.com

Certificate

The complete raw certificate details for www.nfg.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36627990785021733203424544203727884921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 04:12:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 05:10:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nfg.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/2QTRw0C6YLA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfg.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinosperonistas.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onvi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.entregaja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medoboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marinamazzocchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruit-props.neodev.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornil.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ateamspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.smartvote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhardwaredepot.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zgsambiente.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ride.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravenshill.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnoldasdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebasetest.keuper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'construyen2.casalindacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stageproof.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callforatlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0dailies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornil.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotslashrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravenshill.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djlbirdnest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nice-patient-staging.cloudburststudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashfield.cfd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.engage.kgblaw.voyagernetz.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandonschitka.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asyardscrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.flexgiving.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitnessunbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzeriacapra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internos.menara.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.digma.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wor.pwer.semplox.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimurtigroup.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locibook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ostya.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianaihasz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apsmolding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlusseldienst-rheinbach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growthstakr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-pulse.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kierratyskaverit.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puroartesanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upford.beauty'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slittrell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shishastream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technoinmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimoxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-widget-v2.froged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetimekeeper.cloudia9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peskyreminders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glauciaveras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'text.geek-salon-products.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concierge.clermontclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spent-tracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-content.faithcomesbyhearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rest-studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bynauman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upford.beauty'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheerba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honhuay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mrcoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbreakers.paul.ovh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturaimmersiva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mileagetracker.codestream.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.kritsnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.djam-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lostark.epictools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mastereye.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta.socage360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheresmyshit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidzz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'void.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchigeki.spwn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedidos.lawcorp.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saluk.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nina.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'league-hm-firebase-iel-staging.league.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topmost.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillchat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenalia.marcafranca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.jiwancare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontierconsortium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachquartersdaytona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uftonedef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.convertcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findingyourwayinnv.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andapay.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenbok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.thefreshmarketdubai.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sergiomedina.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullyone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metaverse-biz.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jarednewnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacebang.cvivo.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/d_e-NFnCJs8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c710a6e8c00000403004630440220387d9485d77aa191e68faa87e93c4f99a1b87d2dfd4384f7efb8018e0b465a3a02207ad5c68b2abbf38c882334dda7e7c550e97aa75cd72df64334881480b72f2b8400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c710a6e890000040300483046022100f7ae6cf81fb19d48ef8fabdd1d99ab82b4cf1a97cdfed72cca7d1fbe99fc881c022100be70648cf4125e2d56f95d73de6dd572c9e5ee0b7aaa8ebb73ac62eb4d6e507c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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