www.testspell.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 7b:88:d6:3c:0e:f3:1b:bd:09:da:dc:b9:0f:d6:5b:1c was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.testspell.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:88:d6:3c:0e:f3:1b:bd:09:da:dc:b9:0f:d6:5b:1c
Serial Number (int): 164205541048277011340684372081452145436
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 6a:7f:d2:08:32:55:70:f6:9f:a3:66:c6:cf:63:14:47:4f:f1:a7:4b
Fingerprint (sha256): 13:02:d7:c6:5a:90:5f:79:04:4c:8e:82:c3:4a:cf:4d:de:96:8e:9b:04:da:a0:c8:2f:36:7c:67:63:1c:7d:91

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/844qKoQEUDo
CRL Distribution Point: http://crls.pki.goog/gts1d4/33b4jw1qodc.crl

Check the revocation status for certificate www.testspell.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.testspell.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.testspell.com
strimo.no
www.muppeth.com
www.vdba.lk
www.base.quadrobee.com
bi.thstecnologia.com.br
tourspaddlingclub.com
www.mahalli.ma
fornigeria.packagejs.com
qr.adamslife.hu
www.livestreamvoortheaters.nl
react-todo.jusemon.com
link.swadharmaa.com
fundacao-volkswagen.coleta.relatoweb.com.br
asmarket.in.rs
www.volunteerbooking.com
auth.google.eteccnet.com.br
turquoisse.com
www.khmerenterprise.info
satguruwealth.in
hugebelieve.in
dev-payment.dreampay.com.br
cosmetic.ouayun.com
candiceai.co.za
ustory.link
www.simpleclub.mx
www.mookieterremoto.com
addons.minecraft-event.net
www.originaltales.it
dongkim.net
kart.mementoit.no
yoga.santosayogaschool.com
erbacattiva.it
dl.comikeeper.it
www.jousselin.fr
casr.group
dexter.znapz.net
lanostramedicina.it
admin.wtf.menu
www.sma-assainissement.fr
hayztack.znapz.net
links.delori.io
applink.hirspektrum.hu
cosplay.pink
auth.trinnov.audio
admin.masvivo.tv
hi.beze.me
www.surtiplataformas.com
pandemic.live
connect.reach-dev.me
healthhouse.in.ua
image.api.sbn.one
kachkach.com
staging.paxtel.fr
app.lovekid.hk
angelpatientcare.com
www.gigabin.net
www.gebedsrooster.nl
www.divine.online
www.cosplay.online
auth.int.skorekard.com
admin.shipsfocus.com
www.casacabrera.co
acivaxconsent-qa-staging.onymos.com
purpledungeon.com
www.protechsign.com
benguelaonmain.com
megon.com.br
warriors-for-christ.com
www.artfix.ru
fabricamarciana.com
s2a.com.mx
shell3.maxentwickler.site
app.mokin.nl
www.efterskoleshop.dk
shotty.dev
vavalleysolar.com
yt.torrca.com
greetings.digikite.net
play.blueplay.website
admin.rlyenow.com
staging.docs.x200labs.com
www.isometrico.xyz
client3.citadel.tools
korrika.akting.eus
www.design2.tahaalmokahel.com
www.slatkebrige.hr
urbanheap.com
invoice.kiexi.com
rumpelbest.com
kurasaki.datateam.one
erikaeandrea.it
rsenzaki.datateam.one
www.midwestinspectionservices.com
front.nightzookeeper.com
www.tubestamp.com
culte.egliselyongerland.org
www.thenovas.io
www.farmaciamendonca.pt
www.healthview.app

Other certificates including the domain name testspell.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.testspell.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164205541048277011340684372081452145436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 20:21:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 21:19:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.testspell.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/844qKoQEUDo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2069 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testspell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strimo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muppeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdba.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.base.quadrobee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.thstecnologia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourspaddlingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahalli.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fornigeria.packagejs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.adamslife.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livestreamvoortheaters.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react-todo.jusemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.swadharmaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundacao-volkswagen.coleta.relatoweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmarket.in.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volunteerbooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.google.eteccnet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turquoisse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khmerenterprise.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satguruwealth.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugebelieve.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-payment.dreampay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmetic.ouayun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candiceai.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustory.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpleclub.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mookieterremoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addons.minecraft-event.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.originaltales.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dongkim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kart.mementoit.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoga.santosayogaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erbacattiva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.comikeeper.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jousselin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casr.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dexter.znapz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanostramedicina.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wtf.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sma-assainissement.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayztack.znapz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.delori.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink.hirspektrum.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosplay.pink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.trinnov.audio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.masvivo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.beze.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surtiplataformas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandemic.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.reach-dev.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthhouse.in.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.api.sbn.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kachkach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.paxtel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lovekid.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelpatientcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gigabin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gebedsrooster.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divine.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosplay.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.int.skorekard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.shipsfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casacabrera.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acivaxconsent-qa-staging.onymos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purpledungeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protechsign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benguelaonmain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warriors-for-christ.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artfix.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabricamarciana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2a.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell3.maxentwickler.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mokin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efterskoleshop.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shotty.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vavalleysolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yt.torrca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greetings.digikite.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.blueplay.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rlyenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.docs.x200labs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isometrico.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client3.citadel.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korrika.akting.eus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.design2.tahaalmokahel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slatkebrige.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice.kiexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumpelbest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurasaki.datateam.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erikaeandrea.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsenzaki.datateam.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midwestinspectionservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'front.nightzookeeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tubestamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culte.egliselyongerland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenovas.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmaciamendonca.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthview.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/33b4jw1qodc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018c4b4ef5f60000040300483046022100d4b10b24d24b97057fa408737e08fd73cdfa5c14c2f8b97d9b13c44a01bffcef022100eef1fb44a2166a3b46d6ce96f50021e41af7d53b5ef59bd0aba8620c5f6ba5c5007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c4b4ef5e100000403004730450220427b9e6c7ab790ad291183a91c2d7f0189fee7c55f7cf4dfe84d6544555f17de0221008ec521aeaa3deef9d87aaa69bc70ba51ae2f106463f53064911b3f94f92b0a95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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