goldentime-assetfriends.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 71:23:65:e2:8d:e4:11:8c:10:a6:cb:4f:e8:d3:14:a7 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=goldentime-assetfriends.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:23:65:e2:8d:e4:11:8c:10:a6:cb:4f:e8:d3:14:a7
Serial Number (int): 150386560386592013983237919136657118375
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 23:1e:2d:83:86:62:d0:36:4c:c0:bc:6f:56:b3:8f:7f:48:07:d3:6b
Fingerprint (sha256): 16:16:a3:53:e7:53:0b:c0:08:48:1d:e1:96:86:50:46:e3:26:82:3f:8e:e0:fd:82:90:e3:05:b7:46:68:da:c5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/KEZm76KKgKw
CRL Distribution Point: http://crls.pki.goog/gts1d4/70euuecskYk.crl

Check the revocation status for certificate goldentime-assetfriends.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goldentime-assetfriends.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goldentime-assetfriends.com
share.allroundclub.com
www.daitsholdings.com
admindev.soundfyr.net
www.martijnjongkind.nl
www.karaokeclub.gq
actions.nology.io
korea.amnotify.com
inucaworld.com
databotapp.com
sparklight.madhive.com
idolatre.milramasapp.com.br
healsteal.com
sistema.elevecontabil.com.br
streamer.kk-systems.net
mononymous.art
aluminiumwindowwarehouse.com
data.bubblescout.com
ltw.cometapodcast.com.br
e-kasilam.co.za
cloudsolitaire.com
alextotolici.com
www.instaswipe.ca
clients.agenvironment.com
realcross.co.jp
lightxlamp.com
hypervision.com
www.evenpark.com
tom-cat.co.jp
app.angkordc.com
landings.bee-seller.com
runeassist.com
maxim-development.com
www.phantomsecurityusa.com
www.ibikeride.com
smalltest.mojifun.com
www.inspiretravel.com.br
community.qmakertech.com
www.sync-earth.com
www.neolexical.com
wordpuzzle.hdegames.com
evaluer.nissansthyacinthe.com
shrt0.portalcoj.com
jarvis.xpressdelivery.co
tools.manul.be
www.braintripping.com
rudi.downloads.redzonerobotics.co.nz
shoofdoctor.com
www.nostos.fr
www.rizgames.com
cloud.jojko.tech
www.nadalini-portocarrero.com
stravacompete.com
t.vinofyapp.com
www.runeassist.com
www.roarnft.xyz
www.stockingsapp.com
rentbook.com
www.huey.co
thinktank.finance
obert.cz
next-int.scansies.com
www.rileyparada.com
www.kat.hair
www.raftsbc.com
sandbox.rooster-eu.com
rubendelaiglesiapregal.es
www.stashblox.com
auth.usemotion.com
app.walruslabs.com
www.quidam.co
recmyswing.at-the-m.com
firebase.yswalker.com
moonina.net
tpapp2-dev.tabikobo.com
knife-fight.io
kyralnet.org
app.shelftrend.com
pod.posify.in
sell.cop-room.eu
app.lemonnovel.com
onframefilms.es
queen-service.ru
liptorque.com
onelifefieldstaffapp.finstein.ai
snout.org
factorycat.chrislauer.net
streetart.app
diffsmash.com
amazingbrushes.com
lnk.flickin.app
eckedugeorgia.com
lindeerp.lindecdn.com
lisaochmartin.se
console.intego.com
app.jagasuara.id
clicks2.dailyjobsresults.com
lk.wompi.sv
dev.memorigi.com
www.kiamagog.com

Other certificates including the domain name goldentime-assetfriends.com

(limited to 100 certificates)
www.huesnap.com
patrie-hachinohe.com
goldentime-assetfriends.com
agmikhaylenko.ru
www.masteremergencias.com.es
georgecoppel.com
goldentime-assetfriends.com
www.ockle.org
app.aidorando.com
www.barberbc.pl
staging.facility.storagepug.com
humancloudmanifesto.org
nycref.com
flaxboll.io
www.jimmyyao.tech
www.satplanner.com
georgecoppel.com
nilson.com.ua
tom-cat.co.jp
www.iwate-alle.net

Certificate

The complete raw certificate details for goldentime-assetfriends.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150386560386592013983237919136657118375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 13:06:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 14:02:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goldentime-assetfriends.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/KEZm76KKgKw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2048 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldentime-assetfriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.allroundclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daitsholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admindev.soundfyr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martijnjongkind.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karaokeclub.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actions.nology.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korea.amnotify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inucaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'databotapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparklight.madhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolatre.milramasapp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healsteal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistema.elevecontabil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamer.kk-systems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mononymous.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluminiumwindowwarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.bubblescout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltw.cometapodcast.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-kasilam.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudsolitaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alextotolici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instaswipe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.agenvironment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcross.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightxlamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypervision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evenpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tom-cat.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.angkordc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landings.bee-seller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runeassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxim-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phantomsecurityusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibikeride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smalltest.mojifun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspiretravel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.qmakertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sync-earth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neolexical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpuzzle.hdegames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evaluer.nissansthyacinthe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shrt0.portalcoj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis.xpressdelivery.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.manul.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.braintripping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudi.downloads.redzonerobotics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoofdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nostos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rizgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.jojko.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nadalini-portocarrero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stravacompete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.vinofyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runeassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roarnft.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockingsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huey.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinktank.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obert.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next-int.scansies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rileyparada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kat.hair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raftsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.rooster-eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubendelaiglesiapregal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stashblox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.usemotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.walruslabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quidam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recmyswing.at-the-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.yswalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonina.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpapp2-dev.tabikobo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knife-fight.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyralnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.shelftrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod.posify.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sell.cop-room.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lemonnovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onframefilms.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queen-service.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liptorque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelifefieldstaffapp.finstein.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factorycat.chrislauer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetart.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diffsmash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazingbrushes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnk.flickin.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eckedugeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindeerp.lindecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisaochmartin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.intego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.jagasuara.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks2.dailyjobsresults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lk.wompi.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.memorigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiamagog.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/70euuecskYk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d40f13b050000040300473045022100b80a6ff6783376ff6e8ce79e8b83faa9bd1a4ed0fdef034bbffeec9efcf7d4e602204da879550c01ca6571587c9a5ddd32316b2fd192a8afc1338eecabe33b31c926007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d40f13b1200000403004630440220449a905d791c8d3876942a75f6a18900342655cf3e3cf6c180166550a274f523022032dcabf20cb59ec28d98f01d62aabbdad85082787931cd7472edd23bc9964f7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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