go-dev.knts.app

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number dd:7a:6a:a6:ee:bf:9b:93:09:38:6e:b7:b5:42:08:2b was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=go-dev.knts.app

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): dd:7a:6a:a6:ee:bf:9b:93:09:38:6e:b7:b5:42:08:2b
Serial Number (int): 294395010446389693175534206650568280107
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): c8:8d:3f:3c:35:09:8e:ec:20:77:dd:75:1c:7b:9b:bc:89:9c:45:1e
Fingerprint (sha256): 19:c0:15:74:30:97:4c:d9:f4:f3:ab:b7:ba:aa:ac:d9:7c:e1:bc:4c:61:98:32:0a:9e:58:32:dc:44:87:5c:61

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/I0qhTyI-saU
CRL Distribution Point: http://crls.pki.goog/gts1d4/U6dHDL8ApRI.crl

Check the revocation status for certificate go-dev.knts.app

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go-dev.knts.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go-dev.knts.app
www.rentneon.com
skladapp.com
nse.cleartechinstallations.co.nz
www.walkofthetownaustin.com
parkclub.com.br
www.titanium-metal.com
cutedaystore.cl
www.agendamate.app
proofofstudentstatusletter.lasalle.edu.sg
hdevalence.ca
www.southwestdentistbunbury.com.au
primable.app
www.swankeypankey.de
www.abenojar.io
baton.art
www.esterify.org
alexanderskou.com
www.svaneke.net
www.ncmc.com.sa
stalaverse.se
app.stockrocket.us
solomons-qa.govtas.com
phone-control.bellinmuseum.art
mandaleo.com
www.billygerhard.info
guriguru.com
www.eroticaudit.com
dashboard.cityhelden.com
lacasadedrink.com
gy7li.poda.incentable.com
hajonsoft.com
admin.zpass.com.br
finitetek.com
www.vladbasin.info
www.amazeyoo.com
amcenterusa.com
foam-techs.com
platform.hero-workout.com
cafe.fores-tone.co.jp
mianaguo.com
auth.getdebatable.com
grabthatspot.com
beta.karaokebuddies.com
coinfidence.com
client.godo.app.godo.fitness
www.franzz.ch
dev-wellness.mersive.com
sistema.marketingdigital7.com
dexdemo.hashcove.com
mercadodeaceros.com
toros.ar
pass.gotype.pro
myaccount-stg2.geniam.com
app.agendico.com
lite.caricami.it
pali.edu.vn
app.micaz.net
adamcodes.dev
mattmanzi.com
webar.santafesam.com
netsanetpodcast.com
www.vincentcombes.com
admin.biblias.gt
langitbiruarjuna.co.id
www.croodsinc.com
homechef.thechefkart.com
agropetsca.com
www.admin-jobs4neets.formprof.ro
ticketsadmin.hypenation.co.zw
culturehub.gr
www.amjad.ca
nextmessage.app
food-carousel.com
donnijssen.nl
link.curveup.expertrepublic.com
www.tameturtles.com
ery.sh
biket.store
signup.patriotenergy.app
lp.roadgauge.app
www.dev.listy.no
www.rutasegura.co
firebase.imepay.com.np
join.youlove.it
panthib.com.np
the-flock.org
go.lifestory.us
dev-meten.maklr.nl
scotton.co.za
link.license.land
demo.mapalytics.datamachina.com.br
rvm.ltl-xpo.com
nbr2022.liveevent.co.za
refer.games11.in
cosmodealer.redifyn.in
jasom.bodyfix.io
contratos.premierinmobiliaria.es
auth.slik.app
sokov-test.jakb.cz

Other certificates including the domain name knts.app

(limited to 100 certificates)
cure-ai.jp
uateva.postgrado.medicina.usac.edu.gt
programing-server.de
mercadodeaceros.com
dev--console.meiliiapp.com
get.knts.app
my-jira.knieszner.pl
brimmy.app
go-dev.knts.app
houseofmath.no
www.earthmaking.com
plink.link
www.karditordev.com
11521820.peerly.app
www.mutludev.com
www.asuulga.mn
sms.mbsa.co.za
coach.emmengeeftenergie.nl
udirect-ira-services.solerabank.com
www.junta-politicaobrera.ar
www.bingfolio.com
primehilltop.ae
store1.zweb.shop
mimy.aabansolutions.in
insights.labs.valorep.com
www.scandiac.us
saetawinifreda.turnosweb.app
datavideo.felixxgroep.nl
www.margaretcampbell.ie
www.perdmap.com
www.jasonzhai.ca
bridge.orai.io
space.boarda.io
contextual.team
enecoenergycamp.nl
www.notatia.org
grabthatspot.com
www.raugh.club
my-jira.knieszner.pl
elquest.app
greenlandpm.com
gulock.com
bvtm.hosodientu.vn
pongolearn.com
base.firesite.io
qeekseek.ru
protopillar.com

Certificate

The complete raw certificate details for go-dev.knts.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294395010446389693175534206650568280107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 03:47:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 04:44:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go-dev.knts.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/I0qhTyI-saU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2039 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-dev.knts.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentneon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skladapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nse.cleartechinstallations.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walkofthetownaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkclub.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titanium-metal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutedaystore.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agendamate.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofofstudentstatusletter.lasalle.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdevalence.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southwestdentistbunbury.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primable.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swankeypankey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abenojar.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baton.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esterify.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexanderskou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svaneke.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncmc.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stalaverse.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stockrocket.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solomons-qa.govtas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phone-control.bellinmuseum.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandaleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billygerhard.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guriguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eroticaudit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.cityhelden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacasadedrink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gy7li.poda.incentable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hajonsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.zpass.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finitetek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vladbasin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazeyoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amcenterusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foam-techs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.hero-workout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafe.fores-tone.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mianaguo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.getdebatable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grabthatspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.karaokebuddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinfidence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.godo.app.godo.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franzz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-wellness.mersive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistema.marketingdigital7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dexdemo.hashcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercadodeaceros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toros.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass.gotype.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount-stg2.geniam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.agendico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lite.caricami.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pali.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.micaz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamcodes.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattmanzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webar.santafesam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netsanetpodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vincentcombes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.biblias.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langitbiruarjuna.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croodsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homechef.thechefkart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agropetsca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin-jobs4neets.formprof.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsadmin.hypenation.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturehub.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amjad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextmessage.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food-carousel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnijssen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.curveup.expertrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tameturtles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ery.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biket.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.patriotenergy.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.roadgauge.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.listy.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutasegura.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.imepay.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.youlove.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panthib.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-flock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.lifestory.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-meten.maklr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotton.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.license.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.mapalytics.datamachina.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvm.ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbr2022.liveevent.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refer.games11.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmodealer.redifyn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasom.bodyfix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contratos.premierinmobiliaria.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.slik.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokov-test.jakb.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/U6dHDL8ApRI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e647c1e2f0000040300483046022100a9b010601e6af3e0df3c0b531d2a7d464949e958e5712b9f823a838bc3a3f6e2022100a596cb22ce66b0757e3d82d43ac715c783e88536e781787a56fc78623cac6001007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e647c1e2d0000040300473045022100f6e6f11a51a7c753b52f4d1b525e53e5909afe1f87a13e02515b8f60c16628de022009f7c0fc0ab67bfbfcb246af7df40cef679bf1c34d54b091e99f119beec379c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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