www.markkrieger.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a9:8b:1f:30:21:5d:34:a5:09:52:26:9d:d4:12:b5:1f was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.markkrieger.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a9:8b:1f:30:21:5d:34:a5:09:52:26:9d:d4:12:b5:1f
Serial Number (int): 225361893118962321480350549950573229343
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): d7:1e:a6:ad:83:3b:82:8f:b2:db:47:89:69:30:dc:b2:f1:fc:49:36
Fingerprint (sha256): 1c:f4:16:d5:4e:b2:10:d0:b9:25:13:c1:d9:26:16:c6:79:52:b0:c4:b6:c5:81:ec:35:56:2f:08:a6:a9:34:f8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/PIiWSSAt1Ns
CRL Distribution Point: http://crls.pki.goog/gts1d4/Nqn4dnBzWCQ.crl

Check the revocation status for certificate www.markkrieger.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.markkrieger.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.markkrieger.com
store.kcsu.org.uk
joinin.riskakirke.no
www.xtlog.com
app.zuboq.com
sonarping.de
www.clm-roi.com
www.orbix360.com
nakamuraya.com
admin.altosalentorealestate.com
magellan.avs-valuation.com
www.thewolfofmarketing.de
link.downatdart.me
easyjob.tech
www.arx.wtf
zmotinstitute.com
www.hvarerbestadvera.is
welovealbums.com
apps.vaikeo.com
seaairportclinic.com
ar.cedzlabs.com
www.superbcamping.com
vasogenbio.com
es.design
novella-ksa.com
app.sendmoney.jp
app.airshot.io
admin.mamojakim.co.za
beta.superfonik.com
cmubajara.itransparencia.com.br
zogacatalogo.com
sastigaadi.mavikdev.com
firebase-functions.task-connect.co.jp
tasklode.com
crypto.shirtum.com
admin.rairplay.click
nabisadistributors.com
prueba1.dashport.run
puyos.im
petofiy.com
www.mgelectrical.org.uk
lowes-bom-recipes-test.3dcloud.io
demo.gendocu.com
aon-explorer.affinity.do
www.gdk-consulting.com
centroperthes.es
www.aceremony.earth
stg.stonybrookstrings.com
dev.beventer.com
devgears.pro
www.isandlot.com
vaxjo.studentnode.com
preprod-restaurant.gupshup.io
www.stevensalexander.com
www.wardje.be
app.staugustinechs.ca
www.sperleinlaw.com
iae-app.handcash.io
catalincrainiceanu.com
app.roas.org
www.libertyjs.com
bisericilive.ro
dev.montri.fr
casaleelapaz.com
overagepic-5.dev-ltl-xpo.com
preprod-support-restaurant.gupshup.io
www.translationsland.com
inbox.growthmasters.io
cida.app
mginvestment.company
emmenove.com
www.costawisp.com
risky.kitchen
p31-dev.credeo.io
mark-darling.com
tommasobellini.it
berenicesydney.com
brandafrik.com
www.lamaisonlibanaise.fr
dev-hc.neumobot.com
www.akiraku.com
photondigital.in
safepdf.in
www.myrhh.in
caspiansea.in
www.in-need.app
professormarcelo.com
studentsof.info
rewatchin.com
www.pianolessonsbelfast.com
hillermusic.pro
airpark.io
saintjerome-admin.kards.fr
www.prestonharrison.com
overagepic.ltl-xpo.com
inca.app
www.wtff.nl
www.sokodeportes.com.ar
pdf.diabtrend.com
gurupad.shivapuje.com

Other certificates including the domain name markkrieger.com

(limited to 100 certificates)
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
preval.exploredata.app
firebaseapp.com
firebaseapp.com
www.sofatv.app
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
fiftypsi.com
firebaseapp.com
firebaseapp.com
angle.dait.at
cella.lt
share.grapevine.in
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.decaronas.com.br
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.markkrieger.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
bupples.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.yanku.net
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
krispykrunchychicken.f2bportfolio.com
jrmcclure.com
firebaseapp.com
www.maiape.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
footybot.co.uk
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
deltalifeshoes.com
firebaseapp.com
www.uniformesferreira.com.br
firebaseapp.com
firebaseapp.com
mevoydelpais.com.ar
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
envipro.com.br
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com

Certificate

The complete raw certificate details for www.markkrieger.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 225361893118962321480350549950573229343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 02:07:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 03:03:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.markkrieger.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/PIiWSSAt1Ns'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2020 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markkrieger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kcsu.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinin.riskakirke.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xtlog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.zuboq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonarping.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clm-roi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbix360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakamuraya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.altosalentorealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magellan.avs-valuation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewolfofmarketing.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.downatdart.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyjob.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arx.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zmotinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvarerbestadvera.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovealbums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.vaikeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaairportclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.cedzlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superbcamping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasogenbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novella-ksa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sendmoney.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.airshot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mamojakim.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.superfonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmubajara.itransparencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zogacatalogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sastigaadi.mavikdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase-functions.task-connect.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasklode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crypto.shirtum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rairplay.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nabisadistributors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prueba1.dashport.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puyos.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petofiy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgelectrical.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowes-bom-recipes-test.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.gendocu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aon-explorer.affinity.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gdk-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centroperthes.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aceremony.earth'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.stonybrookstrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.beventer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devgears.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isandlot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaxjo.studentnode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-restaurant.gupshup.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevensalexander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wardje.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staugustinechs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sperleinlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iae-app.handcash.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalincrainiceanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.roas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bisericilive.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.montri.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casaleelapaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overagepic-5.dev-ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-support-restaurant.gupshup.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.translationsland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbox.growthmasters.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cida.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mginvestment.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmenove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costawisp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risky.kitchen'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p31-dev.credeo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mark-darling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommasobellini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berenicesydney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandafrik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lamaisonlibanaise.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-hc.neumobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akiraku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photondigital.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safepdf.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myrhh.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caspiansea.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.in-need.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professormarcelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentsof.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewatchin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pianolessonsbelfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillermusic.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpark.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjerome-admin.kards.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestonharrison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overagepic.ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inca.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtff.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sokodeportes.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdf.diabtrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurupad.shivapuje.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Nqn4dnBzWCQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b178d833e0000040300483046022100ff51c835dc28b677c7326b23fc853d9261b366900c6cc2190b2c2e3886a8c777022100954447217bd686da9236048f9181cf35ecbc05387d2b4725b97faf1d4337ba1900770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b178d83650000040300483046022100ba633986f39340eb6ae8622b82401c041c516cb9c6e03602651c0febdcf79577022100d9a7394d7332dc77b1afd863402d1f16a90b8338fb98535a72c43223759cdd74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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