privacy.immigration.gov.kh

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 1c:a7:1c:ba:df:4b:0d:fe:0a:05:2f:46:98:86:87:db was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=privacy.immigration.gov.kh

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:a7:1c:ba:df:4b:0d:fe:0a:05:2f:46:98:86:87:db
Serial Number (int): 38086080170365983258800208333899204571
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): fc:bc:1f:22:94:cb:46:6a:e0:94:f6:26:41:8a:39:70:1c:be:0e:5f
Fingerprint (sha256): 1d:4c:fe:f4:47:bb:30:b3:3f:5f:79:7b:15:d8:f2:c6:bb:fe:57:1c:ba:09:99:51:ca:6d:dd:15:5b:84:b4:7f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/gvJuvQH-hoo
CRL Distribution Point: http://crls.pki.goog/gts1d4/3VO01BEoEj4.crl

Check the revocation status for certificate privacy.immigration.gov.kh

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for privacy.immigration.gov.kh

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

privacy.immigration.gov.kh
wtc.daveytown.co.za
meddi.dk
staging.brightlive.com
norang.kr
www.theheadfamily.com
www.meizon.it
ruzsadent.hu
blog.shubhamkumarverma.com
teamdev.codo.ai
occiplast.co
www.verbatic.io
cupom.lovyca.com
www.dhomecooked.com
www.andrewpiterov.pro
www.cardsnight.com
prod1.office.owtoph.com
response.sirajulhuda.com
portal.windoware.com.au
meter.fallara.net
aimzcorp.com
aktupapers.in
ilosur.buscontrol.app
www.gtaswift.ca
www.istherestillwarinukraine.com
htmledit.recocards.com
kingbook.lucamagnetti.it
v2.html5.run
html.recocards.com
www.danielbigler.at
www.artifice.art
jurilar.com.br
promeccontrols.com
oneanotherforever.one
auth.dpdp.online
inspection.harecord.com
www.abrahamomomoh.com
admin.outgrow.co
www.unasich.cz
www.fyfoh.com
links-dev.hold.io
adc-groupe.com
app.berlinerpods.com
chainamb.com
admin-panel.campistguide.com
www.chainamb.com
www.outerspaceip.com
join.dictate.chat
web.yata.app
colch.cc
feedback.fluxit.com.ar
www.kevinstoner.me
www.icjlitoral.com.br
zenreki.cash
www.thebardailongs.com
portal.ailahealth.com
sadzee.app
www.kirktest.com
www.loritoweb.com
natashamitchko.com
forbusfarms.com
www.servicio2000.com
alisondesignphoto.com
utm.highlander.cloud
listadecompras.gustavohill.dev
nettex.com.au
ricberry.com
lannaproducts.com
www.zindua.ai
mind.medgrocer.com
migobiernu.com
ca.udghosh.org.in
medusa.contact
sekkee.com
dev.athletics.dena.com
sales-portal.darenft.com
svetlanabrennan.com
diningfairy.com
delos-dev.minorityreport.business
detectepid.com
freemint.thedivergents.io
app.smartready.com
tire.chualab.com
admin.kidsup.net
daniyalkhan.dev
play.didogames.com
www.rentunnel.com
central.congregacaoitapetininga.com.br
link.bumm.sk
zackzhang.dev
pamaeclass.auxswot.com
console.rmulogisticpanama.com
cliente.yojpich.com
admin.prendamas.com.bo
gohoodle.com
amdhh.kontaktsamtal.se
www.diningfairy.com
start.jointhediscovery.com
nrlengineering.com
www.botykit.com

Other certificates including the domain name immigration.gov.kh

(limited to 100 certificates)
sni.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
www.humndrum.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
immigration.gov.kh
staging-env.spreadsheep.io
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni.cloudflaressl.com
sni69228.cloudflaressl.com
sni.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
immigration.gov.kh
privacy.immigration.gov.kh
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
auth.oidc.app.senecalearning.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
edoc.immigration.gov.kh
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
immigration.gov.kh
sni69228.cloudflaressl.com
api.dev.immigration.gov.kh
bltms-file.immigration.gov.kh
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
www.dobits.co
flis.immigration.gov.kh
immigration.gov.kh
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
arrival.gov.kh
arrival.gov.kh
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
api.immigration.gov.kh
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
invite.safor.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
www.terencekruger.com
imc9dejulio.com.ar
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
www.cogniwide.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
pipeline.renegadetec.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
searchapi.immigration.gov.kh
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com
sni69228.cloudflaressl.com

Certificate

The complete raw certificate details for privacy.immigration.gov.kh in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38086080170365983258800208333899204571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 19:24:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 20:23:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'privacy.immigration.gov.kh'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/gvJuvQH-hoo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2017 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.immigration.gov.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtc.daveytown.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meddi.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.brightlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norang.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theheadfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meizon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruzsadent.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.shubhamkumarverma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamdev.codo.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occiplast.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verbatic.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupom.lovyca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhomecooked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewpiterov.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardsnight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1.office.owtoph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'response.sirajulhuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.windoware.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meter.fallara.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimzcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktupapers.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilosur.buscontrol.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtaswift.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istherestillwarinukraine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htmledit.recocards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingbook.lucamagnetti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.html5.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'html.recocards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danielbigler.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artifice.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jurilar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promeccontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneanotherforever.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.dpdp.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspection.harecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abrahamomomoh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.outgrow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unasich.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fyfoh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links-dev.hold.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adc-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.berlinerpods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chainamb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-panel.campistguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chainamb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outerspaceip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.dictate.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.yata.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colch.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.fluxit.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevinstoner.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icjlitoral.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenreki.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebardailongs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ailahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadzee.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirktest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loritoweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natashamitchko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbusfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicio2000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alisondesignphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utm.highlander.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listadecompras.gustavohill.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nettex.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricberry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lannaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zindua.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mind.medgrocer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migobiernu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.udghosh.org.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medusa.contact'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sekkee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.athletics.dena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales-portal.darenft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svetlanabrennan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diningfairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delos-dev.minorityreport.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detectepid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemint.thedivergents.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.smartready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tire.chualab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kidsup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daniyalkhan.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.didogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentunnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.congregacaoitapetininga.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.bumm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zackzhang.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamaeclass.auxswot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.rmulogisticpanama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliente.yojpich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.prendamas.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gohoodle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdhh.kontaktsamtal.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diningfairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.jointhediscovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrlengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.botykit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/3VO01BEoEj4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018abe90fe800000040300473045022100a29a891add9ba983451c65dc934bc1a7f5a0ab22046dcda2421229a87a2849a5022042f28adeb4c062866756337eee9167b7199de4674371404ad7dc9905faac09a7007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018abe90fe4600000403004630440220216a4cb99e1462dbf1a8fa93c530da45f42782c3f9aa7eec7f86945190e0565a02206689af49b6c7ae61165c51f52e87ef6fbde44fe8f8b78bf80c88bbc14c9a6676
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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