www.lucavisciola.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a3:1b:7b:9e:b8:c1:63:41:10:b9:58:04:00:12:7c:a3 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.lucavisciola.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a3:1b:7b:9e:b8:c1:63:41:10:b9:58:04:00:12:7c:a3
Serial Number (int): 216806862639731687243356735630015102115
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 36:37:06:6f:74:f7:35:64:1f:4a:73:bf:ef:d1:fc:bb:10:40:fc:f7
Fingerprint (sha256): 16:09:99:55:b3:63:d1:65:bb:79:c5:d2:2b:04:5e:de:15:7b:35:dc:b4:3d:9b:01:cf:52:3a:a4:a6:c7:00:43

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Ksa91F9N2QY
CRL Distribution Point: http://crls.pki.goog/gts1d4/KivJoGl0ycA.crl

Check the revocation status for certificate www.lucavisciola.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lucavisciola.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lucavisciola.com
www.weightmate.fit
links.perfitt.io
laisang.net
clutch.sofic.io
anakshh.org
taekwonbaro.com
be.seen.io
weego.io
www.mtun.io
auth.spatial.io
fieldmargin.co.uk
kimfrench.fi
www.leolilley.com
diegocomencini.it
gokulwedssruthi.xyz
stg-cms.imedis.io
teste.getconnect.com.br
onlyg.net
portal.urbanhood.org
manntax.ca
lanowa.org
shawn.co
flutterflares.co.uk
www.restoq.co
portal.test.wetterdaten.hr.de
roxy.joyridecity.bike
lohith.pro
bark-at-the-park.com
www.gratisstrom.eu
ferdiklomp.nl
www.ademhodzic.com
www.softsignal.co
www.pug.chat
apiator.info
blackholerabbit.com
connect.ashampoo.com
gotshift-staging.cpptl.co
cosmictacoatx.com
www.alteroo.com
sander-catering.cateringportal.io
cbohrer.com
asia888app.com
app.betterspaces.com
www.akizu.co
ciscosb.com
pay.alqolam.com
cullinanexperience.deezer.partners
evacruzeiro.com
deboduttasinha.com
dreammakerscastingagency.com
foothillsvolleyball.com
ay.codes
dev-links.cozosupport.com
www.fmhr-survey.com
www.erzekelok.hu
www.jorisvriezen.com
admin.coursewings.com
multimarca-cundinamarca.com
train2048.games235.com
www.goupword.com
link.dawntheapp.com
www.novafamilia.com.br
salestracker.eliteinteriorssd.com
norcalg.com
www.fatlittlebuddies.com
www.coachdanatang.com
kiosk.knightlyescapes.com
speech.ketoya.com
i.secretdietgym.com
panel.lamar-trade.com
auth.reputedfirms.com
www.nevergonnagiveyouupnevergonnaletyoudown.com
shadowmanu.com
www.janathperera.com
sept2022.vx-events.com
creator.rapid-ood.com
www.servote.com
app.pranaheart.com
webapp.lightedison.com
auth.termius.com
vickyungemach.com
www.novuminsights.com
valuedomainresales.com
dlink.surfunhk.com
www.mellonticalsolutions.com
camping-oosbachtal.de
consule.sg
dev-sandbox.max.members.sargon.com
visutate.com
www.sn-wiz.dev
touchless.swyft.com
teletrabajo.rflex.dev
www.djice.ru
mixer.thefloursmith.com
app.staging.ukufu.com
m-assessmentinternal.ur-nl.com
www.renaudmathieu.com
neone.email
www.trailcacheapp.com

Other certificates including the domain name lucavisciola.com

(limited to 100 certificates)
sni.cloudflaressl.com
dev.glyderides.com
www.lucavisciola.com
marykuzh.top
edrivenscore.app
www.leafytech.ca
sni.cloudflaressl.com
www.lucavisciola.com
lucavisciola.com
www.waterstreetedge.com
fantasticsix.ca
production.cashendarapp.com
sept2022.vx-events.com
dev.cms.isurf.app
vrls.app
makeup.bauhn.se
www.avionics.one
go.wing.co
aanbod.reach.software
restcall.net
console.mimi.fd.ai
brandkit.pro
zhengzi-archive.com
www.tushardebnath.com
lucavisciola.com
mediamail.info
dev.glyderides.com
app.ketshop.com
www.wans.dev
borgeapps.eu
clearpro.mx
production.cashendarapp.com
app.ketshop.com
caltex-users-development.caltex.nz
www.voicebot.tk
joetustin.com

Certificate

The complete raw certificate details for www.lucavisciola.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 216806862639731687243356735630015102115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 08:07:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 09:05:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lucavisciola.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Ksa91F9N2QY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2043 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucavisciola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weightmate.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.perfitt.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laisang.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clutch.sofic.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anakshh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taekwonbaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.seen.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weego.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtun.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.spatial.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldmargin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimfrench.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leolilley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegocomencini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokulwedssruthi.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cms.imedis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teste.getconnect.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.urbanhood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manntax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shawn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutterflares.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restoq.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.test.wetterdaten.hr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roxy.joyridecity.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lohith.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bark-at-the-park.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gratisstrom.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferdiklomp.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ademhodzic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softsignal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pug.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiator.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackholerabbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ashampoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotshift-staging.cpptl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmictacoatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alteroo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sander-catering.cateringportal.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbohrer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia888app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.betterspaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akizu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscosb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.alqolam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cullinanexperience.deezer.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evacruzeiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deboduttasinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreammakerscastingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foothillsvolleyball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ay.codes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-links.cozosupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmhr-survey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erzekelok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jorisvriezen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coursewings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimarca-cundinamarca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train2048.games235.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goupword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.dawntheapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novafamilia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salestracker.eliteinteriorssd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norcalg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatlittlebuddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coachdanatang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.knightlyescapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speech.ketoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.secretdietgym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.lamar-trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.reputedfirms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevergonnagiveyouupnevergonnaletyoudown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shadowmanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janathperera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sept2022.vx-events.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creator.rapid-ood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pranaheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.lightedison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.termius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vickyungemach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novuminsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuedomainresales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlink.surfunhk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mellonticalsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camping-oosbachtal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consule.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-sandbox.max.members.sargon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visutate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sn-wiz.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchless.swyft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teletrabajo.rflex.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.djice.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mixer.thefloursmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staging.ukufu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-assessmentinternal.ur-nl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renaudmathieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neone.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trailcacheapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/KivJoGl0ycA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c90c805470000040300483046022100e1685b650cf2aafe9df4e8d5bdf182f93307bebcbd3b31b690dce89ff83706ff022100b9af017513338675d68ba2a8921ad45ae88a3ae8241addaf76a8140435119074007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c90c8053f0000040300483046022100e74ce26ed36f9ac3844b892724fff51e4340784420182811922e71c3ff187e0d022100aaff82e8b2a65357b059f5aec281701e1b2db2523d74ebfa2bab4d0dbc273793
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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