sanmarcos.marcafranca.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 7b:52:f1:d9:00:f9:73:dc:10:95:0d:81:85:06:0a:f9 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sanmarcos.marcafranca.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:52:f1:d9:00:f9:73:dc:10:95:0d:81:85:06:0a:f9
Serial Number (int): 163925717077471823541349343215948794617
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): d4:84:8f:ed:51:8e:16:7d:05:5f:7b:e5:18:1e:89:bc:5e:25:c8:4f
Fingerprint (sha256): 14:f7:ff:d3:90:81:64:dd:52:8c:8f:a0:8f:6c:65:1d:de:33:85:39:b4:c1:ae:3f:a7:0c:09:a2:61:95:f4:d7

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/4-zasXqdOUM
CRL Distribution Point: http://crls.pki.goog/gts1d4/o75iqDjrGU8.crl

Check the revocation status for certificate sanmarcos.marcafranca.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanmarcos.marcafranca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanmarcos.marcafranca.com
www.aquipontos.com.br
www.thedsignstudio.com
gnmarketingagency.com
widget.bysol.org
www.gnmarketingagency.com
admin.carebeyond.com
www.resumebuilder.app
ticket.eventchilli.com
join.xcept.app
www.autobear.ca
khalildiag.com
www.didarapp.com
opt.getcalup.com
test.backoffice.facebrity.app
how.shouldi.guru
www.saltwisdom.com
www.tonyschleck.com
portal.girlpoweralliance.com
www.tenniswebsitebuilder.com
dev.app.lending.halodao.com
dev.skilltech.ph
www.roselineves.com.br
gdsc.hu
hevasaude.com.br
quiz.gardell.me
tools.kubou.net
aceapp.com.br
admin.map-u.com
www.porinlentoasema.fi
app.viya.ae
marukyu.saga.jp
bookings.booking-slots.com
app-api.jicki.de
access.dronecamp.mcfly.ph
www.justdynamix.co.za
app.ficada.com.br
justscout.app
platform.quash.ai
turnverein.app
webcollector.app
geooh.app
autopalapp.com
referidos.mymoons.co
websummit.atmocube.app
www.dla-abogados.com
drf-admin-dev.cpptl.co
www.cumbiascore.com
2etris.com
factory-dev.16ahead.com
finance.solteksolutions.com.au
admin.stratcare.app
app.villenegociosimobiliarios.com.br
stoopidcartoons.com
upnorth.vc
samdanipharma.in
display.v3.contentfabric.io
kalankaboom.net
qr.solkos.com.mx
ops.budget.com.pt
prakashnaiduandassociates.in
app.ss.hr
vrindaanandam.in
www.louiandfrankopizza.com.au
estebanmorales.io
s.merl.ink
codeserk.es
tarkovlab.com
beta.chavi.com.br
vida.sogafit.net
www.repeal26.vote
appstores.games
console.snaprefund.io
admin-staging.gogetcorp.io
ec-monitoring.gassets.emarsys.net
jamiegrain.co.uk
www.hypnodron.com
app.lstn.ai
mygovuz.one
canyoncourier.column.us
referral.3way.io
www.iletus.net
artists.set.live
clearcreekcourant.column.us
gcp.mehulbaid.in
rbadland.uk
screeech.me
www.wonderlolland.dk
admin.wanax.com
admin.nyby.no
contact.keap.page
www.webwin.name
www.qa-portal.diamondservicesusa.com
app.withneiba.com
thealgorithm.app
test-link.experienz.co.uk
www.vyvgarttriviachallenge.com
hitforcharity.org
e-parkovani.cz
rorschacherberg.avdis.ch

Other certificates including the domain name marcafranca.com

(limited to 100 certificates)
errad.marcafranca.com
match-the-element.rccsonline.com
transcompliance.marcafranca.com
notef.marcafranca.com
canal-etico.marcafranca.com
www.casperzandbergen.nl
visiontest.me
newpeace.jp
web.marcafranca.com
web.marcafranca.com
candidate-react.staffshift.com
plexus.marcafranca.com
www.airpix.io
app.ioniaregistry.com
gomsamed.marcafranca.com
www.shelleytushinski.com
gkubota.com
signpost.dev
elplural.marcafranca.com
transcompliance.marcafranca.com
mfreg.marcafranca.com
scalingscience.ai
rsnchallenge.neoufitness.com
dev.aptitudelabs.com
gustavogranado.com.br
www.moonlocker.org
removalsbyalaski.com.au
ahmedkamhawy.com
auth.middletonfbla.com
admin.redthemes.net
mfreg.marcafranca.com
login.source.topic.com.ar
www.iphone-news.it
errad.marcafranca.com
www.live-event.nu
lefebvre.marcafranca.com
www.nfg.dk
hmorders.afivn.com
livestreamja.com
yearegistro.marcafranca.com
eemaxtours.com
fastplanet.io
survey.app.buildbetter.app
costablancagarden.com
progboost.com
app.fxr-insights.com
votum-group.com
www.makkan.trade
www.mind-of-mary.com
go.allinahealth.org
sanmarcos.marcafranca.com
isys.cc
assemblytx.com
writr.space
web.marcafranca.com
sennder.com
emvento.com
auth.astrafit.com
kachifo.farafinaeducational.app
staging-superadmin.evfy.sg
*.marcafranca.com
www.iconss.co.uk
staging-member.youdowell.com
filmania.dardan.tech
fastplanet.io
join.gdgadoekiti.com
skysushi.mewo.es
marcafranca.com
canalresponsable.marcafranca.com
cburg.galander.berlin
yabuchin.com
www.privuo.com
events.rinno.la
demologin.okularid.com
workspace.copixel.dev
www.privuo.com
transfootball.com
unfunctionals.com
69games-uat-backoffice.cbdata.cz
foo.marcafranca.com
www.marcafranca.com
cofares.marcafranca.com
flightstatus.stgairasia.com
maxumspa.com
covi-srl.it
wallet.decaf.so
solutions.byebyeq.com
qiriqu.com
marcafranca.com
www.pantaurelawan.com
marcafranca.com
buuze.me
axtherocker.com
app.ecolora.io
plexus.marcafranca.com
www.saguji.com
canal-etico.marcafranca.com
www.lukasgeiger.com
saurav.world
gesuga.marcafranca.com

Certificate

The complete raw certificate details for sanmarcos.marcafranca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163925717077471823541349343215948794617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 21:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 22:04:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanmarcos.marcafranca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/4-zasXqdOUM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2059 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanmarcos.marcafranca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquipontos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedsignstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnmarketingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.bysol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnmarketingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.carebeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resumebuilder.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.eventchilli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.xcept.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autobear.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khalildiag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.didarapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opt.getcalup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.backoffice.facebrity.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'how.shouldi.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltwisdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonyschleck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.girlpoweralliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenniswebsitebuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.app.lending.halodao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.skilltech.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roselineves.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdsc.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hevasaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiz.gardell.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.kubou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceapp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.map-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porinlentoasema.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.viya.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marukyu.saga.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.booking-slots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-api.jicki.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.dronecamp.mcfly.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justdynamix.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ficada.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justscout.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.quash.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnverein.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcollector.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geooh.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autopalapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referidos.mymoons.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websummit.atmocube.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dla-abogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drf-admin-dev.cpptl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbiascore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2etris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factory-dev.16ahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.solteksolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stratcare.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.villenegociosimobiliarios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoopidcartoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upnorth.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samdanipharma.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'display.v3.contentfabric.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalankaboom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.solkos.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.budget.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prakashnaiduandassociates.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ss.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrindaanandam.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louiandfrankopizza.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estebanmorales.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.merl.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeserk.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarkovlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.chavi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vida.sogafit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repeal26.vote'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appstores.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.snaprefund.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-staging.gogetcorp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ec-monitoring.gassets.emarsys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiegrain.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypnodron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lstn.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygovuz.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canyoncourier.column.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referral.3way.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iletus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artists.set.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearcreekcourant.column.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp.mehulbaid.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbadland.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screeech.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wonderlolland.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wanax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nyby.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.keap.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webwin.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-portal.diamondservicesusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.withneiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thealgorithm.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-link.experienz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vyvgarttriviachallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitforcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-parkovani.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rorschacherberg.avdis.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/o75iqDjrGU8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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