www.divestudentaid.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 6f:23:16:5c:73:5e:e1:0f:10:89:a7:e2:09:e0:36:ea was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.divestudentaid.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:23:16:5c:73:5e:e1:0f:10:89:a7:e2:09:e0:36:ea
Serial Number (int): 147726491459882090475239469495487575786
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 9e:83:32:6c:3b:23:13:d3:56:5e:69:f7:7d:76:05:f3:1d:84:e8:5c
Fingerprint (sha256): 19:43:65:7e:84:b8:bd:30:46:40:8a:d4:fa:d6:71:b6:20:e9:ba:06:56:89:05:76:de:ab:56:b5:34:c8:c4:94

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/pWlQ50O_n2M
CRL Distribution Point: http://crls.pki.goog/gts1d4/Hpb1Ru5zrpw.crl

Check the revocation status for certificate www.divestudentaid.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.divestudentaid.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.divestudentaid.com
codenka.com
carma.green
sevendots.art
syasbahamas.org
tulipani.smibox.app
agolighting.com
allyouropinions.com
www.famenft.kr
www.info.coinchecker.app
www.nutimi.app
www.indomaret.sedaya.app
tvorimedolnikounice.cz
softuniverse.au
arclightapp.com
rbastage.softtouchpos.co
cvc.nskre.co.jp
www.arcbridgegroup.com
andriipilat.com
order.nadri.ca
piczen.co
www.takefumiapp.com
www.altersppace.com
4rtools.com.br
www.celon.club
pl.jafar.the-red-queen.net
mahrusferdous.com
ajyari.niyase.com
curryituptempe.com
beachin-orders.crispnow.com
marketsapi.beejak.biz
arunautomobiles.com
www.peacefulcreations.co
quiz.inclose.com.au
passione-daferdinando.at
options.21ifm.com
portal.tawakkalfabrics.co
www.jaimefamily.com
www.engenhariadedados.com
coretirur.com
kiosk.demo.cravedelivery.com
app.limelines.com
react-calculator.adelonzeta.com
www.livingpark.cl
www.david-storm.com
distritocaracas.com
botterman.dev
www.kanzlei-reinig.de
flights.pohl.rocks
xubisoft.com
www.skillopro.com
www.numerospalabras.com
lista.nixonsucuc.com
app.holger-hetzel.de
skej.bhyn.dev
www.jfdr.dev
l.stavlor.dev
backoffice.connectedliving.chat
www.nomtxt.com
kelmancelis.dev
www.betpro.co
samuelurias.dev
cartree.co.za
safety.rungreenlake.com
txbe.at
www.chimepad.com
zaporizhzhia.mobilitymonitor.habidatum.com
www.sufeizhao.com
www.witchdice.com
puntclub.link
ipcomms.28east.co.za
www.dasiglobal.com
app.facturabilidad.mx
sanfordtutoring.com
locator.semperfidelispark.org
www.videomarx.com
psiquiatraintegral.cl
spenceairbase.com
agritank.com
shouki.work
medqr.com
sulkikim.com
bakery-sweet.ru
jetms.geneowebapp.com
oginutrition.com
links.zoiabeta.razem.si
auth.stg-recotripp.com
dev.open.cardiosignal.com
huckleberry.design
app.proppit.com
datdata.dev
hcsolucoesemrh.com.br
app.z0nethegame.com
bubblecube.games.tetherstudios.com
www.steveycee.com
metamagical.dev
app.xpressrx.co
www.archihospital.com
app.charlesmachadoimobiliaria.com.br
roomer.in

Other certificates including the domain name divestudentaid.com

(limited to 100 certificates)
www.cineflow.ai
ahmedkamhawy.com
iuran.zonavivaldi.web.id
lensketongerlo.be
datdata.dev
api.meubusao.com.br
www.divestudentaid.com
staging.intrm.app
udaypackersandmovers.com
scan.watdrinkje.be
agolighting.com
www.thelaundryman.in
app.hajumrahtravels.com
www.masterstkd.ca
poistu.raha.fi
www.plataformaproativos.com.br
zacksussman.com
schreib.wanke.jetzt
www.leapped.com
motherbears.com
daredemo-youtube.com
cubantropia.com
iuran.zonavivaldi.web.id
www.maazsaleem.com
planpremiosgnx.glukynet.com
debtkarma.io
adobe.ideacloud.com
zinpro-bluebox.peer-ai.com
console.mathematicalinc.com
www.balneariosalinas.com

Certificate

The complete raw certificate details for www.divestudentaid.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINUjCCDDqgAwIBAgIQbyMWXHNe4Q8QiafiCeA26jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDAzMTQwMTMxMTRaFw0yNDA2MTIw
MjI5MjFaMCExHzAdBgNVBAMTFnd3dy5kaXZlc3R1ZGVudGFpZC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIDj51QpaAyxyMLB6KzB6Dj8DTy7G
t8co3AacDr/P443tnK1ZoCC/H6r4RKqCB9U5jrxiCwSJOcegOGmCCtatvrYJ/8cF
6LrMPjC4kAIVEzgq1IpYcgWyP2MthqppaIib8LPih+znXBICLEjz2WWEwD2n79SJ
q3tfdjediGt/F8FDglFPqOfk73xzyq/YywJbdk1OhvlZHpYnEFLZBaT/+1UwyM5O
GLr3BqHXdsgVyCXekGUP/K5ELQn33VOpZX0JiBXXJTW2yHj0IRdkPzaNeq0ThQJQ
nZVHgbCtGFymhrHNw6uFPIQ+diUcvYucRtDYkkpF0Yw56A6xV2Vzd76BAgMBAAGj
ggpfMIIKWzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUBqnc2RQ9UPUbmO223RHnvRa3DPwwHwYDVR0j
BBgwFoAUJeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsG
AQUFBzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC9wV2xRNTBPX24y
TTAxBggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0
LmRlcjCCCAIGA1UdEQSCB/kwggf1ghZ3d3cuZGl2ZXN0dWRlbnRhaWQuY29tggtj
b2RlbmthLmNvbYILY2FybWEuZ3JlZW6CDXNldmVuZG90cy5hcnSCD3N5YXNiYWhh
bWFzLm9yZ4ITdHVsaXBhbmkuc21pYm94LmFwcIIPYWdvbGlnaHRpbmcuY29tghNh
bGx5b3Vyb3BpbmlvbnMuY29tgg53d3cuZmFtZW5mdC5rcoIYd3d3LmluZm8uY29p
bmNoZWNrZXIuYXBwgg53d3cubnV0aW1pLmFwcIIYd3d3LmluZG9tYXJldC5zZWRh
eWEuYXBwghZ0dm9yaW1lZG9sbmlrb3VuaWNlLmN6gg9zb2Z0dW5pdmVyc2UuYXWC
D2FyY2xpZ2h0YXBwLmNvbYIYcmJhc3RhZ2Uuc29mdHRvdWNocG9zLmNvgg9jdmMu
bnNrcmUuY28uanCCFnd3dy5hcmNicmlkZ2Vncm91cC5jb22CD2FuZHJpaXBpbGF0
LmNvbYIOb3JkZXIubmFkcmkuY2GCCXBpY3plbi5jb4ITd3d3LnRha2VmdW1pYXBw
LmNvbYITd3d3LmFsdGVyc3BwYWNlLmNvbYIONHJ0b29scy5jb20uYnKCDnd3dy5j
ZWxvbi5jbHVighpwbC5qYWZhci50aGUtcmVkLXF1ZWVuLm5ldIIRbWFocnVzZmVy
ZG91cy5jb22CEWFqeWFyaS5uaXlhc2UuY29tghJjdXJyeWl0dXB0ZW1wZS5jb22C
G2JlYWNoaW4tb3JkZXJzLmNyaXNwbm93LmNvbYIVbWFya2V0c2FwaS5iZWVqYWsu
Yml6ghNhcnVuYXV0b21vYmlsZXMuY29tghh3d3cucGVhY2VmdWxjcmVhdGlvbnMu
Y2+CE3F1aXouaW5jbG9zZS5jb20uYXWCGHBhc3Npb25lLWRhZmVyZGluYW5kby5h
dIIRb3B0aW9ucy4yMWlmbS5jb22CGXBvcnRhbC50YXdha2thbGZhYnJpY3MuY2+C
E3d3dy5qYWltZWZhbWlseS5jb22CGXd3dy5lbmdlbmhhcmlhZGVkYWRvcy5jb22C
DWNvcmV0aXJ1ci5jb22CHGtpb3NrLmRlbW8uY3JhdmVkZWxpdmVyeS5jb22CEWFw
cC5saW1lbGluZXMuY29tgh9yZWFjdC1jYWxjdWxhdG9yLmFkZWxvbnpldGEuY29t
ghF3d3cubGl2aW5ncGFyay5jbIITd3d3LmRhdmlkLXN0b3JtLmNvbYITZGlzdHJp
dG9jYXJhY2FzLmNvbYINYm90dGVybWFuLmRldoIVd3d3LmthbnpsZWktcmVpbmln
LmRlghJmbGlnaHRzLnBvaGwucm9ja3OCDHh1Ymlzb2Z0LmNvbYIRd3d3LnNraWxs
b3Byby5jb22CF3d3dy5udW1lcm9zcGFsYWJyYXMuY29tghRsaXN0YS5uaXhvbnN1
Y3VjLmNvbYIUYXBwLmhvbGdlci1oZXR6ZWwuZGWCDXNrZWouYmh5bi5kZXaCDHd3
dy5qZmRyLmRldoINbC5zdGF2bG9yLmRldoIfYmFja29mZmljZS5jb25uZWN0ZWRs
aXZpbmcuY2hhdIIOd3d3Lm5vbXR4dC5jb22CD2tlbG1hbmNlbGlzLmRldoINd3d3
LmJldHByby5jb4IPc2FtdWVsdXJpYXMuZGV2gg1jYXJ0cmVlLmNvLnphghdzYWZl
dHkucnVuZ3JlZW5sYWtlLmNvbYIHdHhiZS5hdIIQd3d3LmNoaW1lcGFkLmNvbYIq
emFwb3Jpemh6aGlhLm1vYmlsaXR5bW9uaXRvci5oYWJpZGF0dW0uY29tghF3d3cu
c3VmZWl6aGFvLmNvbYIRd3d3LndpdGNoZGljZS5jb22CDXB1bnRjbHViLmxpbmuC
FGlwY29tbXMuMjhlYXN0LmNvLnphghJ3d3cuZGFzaWdsb2JhbC5jb22CFWFwcC5m
YWN0dXJhYmlsaWRhZC5teIITc2FuZm9yZHR1dG9yaW5nLmNvbYIdbG9jYXRvci5z
ZW1wZXJmaWRlbGlzcGFyay5vcmeCEXd3dy52aWRlb21hcnguY29tghVwc2lxdWlh
dHJhaW50ZWdyYWwuY2yCEXNwZW5jZWFpcmJhc2UuY29tggxhZ3JpdGFuay5jb22C
C3Nob3VraS53b3JrggltZWRxci5jb22CDHN1bGtpa2ltLmNvbYIPYmFrZXJ5LXN3
ZWV0LnJ1ghVqZXRtcy5nZW5lb3dlYmFwcC5jb22CEG9naW51dHJpdGlvbi5jb22C
F2xpbmtzLnpvaWFiZXRhLnJhemVtLnNpghZhdXRoLnN0Zy1yZWNvdHJpcHAuY29t
ghlkZXYub3Blbi5jYXJkaW9zaWduYWwuY29tghJodWNrbGViZXJyeS5kZXNpZ26C
D2FwcC5wcm9wcGl0LmNvbYILZGF0ZGF0YS5kZXaCFWhjc29sdWNvZXNlbXJoLmNv
bS5icoITYXBwLnowbmV0aGVnYW1lLmNvbYIiYnViYmxlY3ViZS5nYW1lcy50ZXRo
ZXJzdHVkaW9zLmNvbYIRd3d3LnN0ZXZleWNlZS5jb22CD21ldGFtYWdpY2FsLmRl
doIPYXBwLnhwcmVzc3J4LmNvghV3d3cuYXJjaGlob3NwaXRhbC5jb22CJGFwcC5j
aGFybGVzbWFjaGFkb2ltb2JpbGlhcmlhLmNvbS5icoIJcm9vbWVyLmluMCEGA1Ud
IAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYr
aHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0L0hwYjFSdTV6cnB3LmNybDCCAQMG
CisGAQQB1nkCBAIEgfQEgfEA7wB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k
PTBI1/urAAABjjrMsFgAAAQDAEYwRAIgdGUTDi98srvnD9PpdGz4gHc1U0QWcmZr
9Z/XLJe3IjwCIBW+dbZzyAcVvXb0x59ReQ78FmBZcn3S618Zluy+LCE3AHYA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGOOsywHwAABAMARzBFAiAV
PUHMB0ZFeIvh/zapjfWuHXqBmHQr5yQywLWBjGlBqwIhAPA+huCEVI+tpQPNTxte
4F373itFnhJW+0LgCZD/W5REMA0GCSqGSIb3DQEBCwUAA4IBAQCmFNriPQV0hlSj
VXNYpQfv+vwNKIezRPKFiEIEaSL6N6QLa7+6o39uvv9Jz1lkD/wINQTGVfXzRBPA
kPnT55jDDtL7dv+r1PvZGFrD8GeFZ4unBmK4r/YNq0E24dLENEN4AHMbX2m9Rhpp
sW38SLetX4eU5LBphAqgV9yLrcBp7dkqKVwX5jV7tUqqjTVPYAZlHHZv9MBqu6a3
zkbq9B+X2NRNBgsKPZ9JC2jKXcSlas8czpV+ojg5we+xfCZCP/XzKUMBApKdd0hL
Vj088kYCX0RWzZ9LQA/Ze7eb9yBCO73Gk2Lh4tppUAb/1kjU0DgeJBIA+mnsxPtN
QNg+8S+J
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147726491459882090475239469495487575786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 01:31:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 02:29:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.divestudentaid.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/pWlQ50O_n2M'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2041 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divestudentaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codenka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carma.green'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevendots.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syasbahamas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulipani.smibox.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agolighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allyouropinions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.famenft.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.info.coinchecker.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutimi.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indomaret.sedaya.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvorimedolnikounice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softuniverse.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arclightapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbastage.softtouchpos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvc.nskre.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcbridgegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andriipilat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.nadri.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piczen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takefumiapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altersppace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4rtools.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celon.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.jafar.the-red-queen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahrusferdous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajyari.niyase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curryituptempe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachin-orders.crispnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketsapi.beejak.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arunautomobiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peacefulcreations.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiz.inclose.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passione-daferdinando.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'options.21ifm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.tawakkalfabrics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaimefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.engenhariadedados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coretirur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.demo.cravedelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.limelines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react-calculator.adelonzeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingpark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.david-storm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distritocaracas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botterman.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanzlei-reinig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flights.pohl.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xubisoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skillopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.numerospalabras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lista.nixonsucuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.holger-hetzel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skej.bhyn.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jfdr.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.stavlor.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.connectedliving.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nomtxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelmancelis.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betpro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuelurias.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartree.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.rungreenlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txbe.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chimepad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaporizhzhia.mobilitymonitor.habidatum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sufeizhao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.witchdice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntclub.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipcomms.28east.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dasiglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.facturabilidad.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfordtutoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locator.semperfidelispark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videomarx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psiquiatraintegral.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spenceairbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agritank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shouki.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medqr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sulkikim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakery-sweet.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetms.geneowebapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oginutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.zoiabeta.razem.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.stg-recotripp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.open.cardiosignal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huckleberry.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.proppit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datdata.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcsolucoesemrh.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.z0nethegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubblecube.games.tetherstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steveycee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metamagical.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.xpressrx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archihospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.charlesmachadoimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomer.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Hpb1Ru5zrpw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e3accb058000004030046304402207465130e2f7cb2bbe70fd3e9746cf880773553441672666bf59fd72c97b7223c022015be75b673c80715bd76f4c79f51790efc166059727dd2eb5f1996ecbe2c2137007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e3accb01f00000403004730450220153d41cc074645788be1ff36a98df5ae1d7a8198742be72432c0b5818c6941ab022100f03e86e084548fada503cd4f1b5ee05dfbde2b459e1256fb42e00990ff5b9444
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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