www.thuongthansohoc.vn

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 15:20:e5:e5:51:05:6e:c7:12:8f:6e:5b:6f:5b:a2:bb was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.thuongthansohoc.vn

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:20:e5:e5:51:05:6e:c7:12:8f:6e:5b:6f:5b:a2:bb
Serial Number (int): 28084604251079653371332935985628160699
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 29:96:49:ed:02:bd:74:19:ec:25:98:24:3b:26:33:31:30:98:ab:27
Fingerprint (sha256): 1e:70:9e:4a:5c:03:37:e1:2f:b2:99:83:6d:61:20:4d:86:15:f1:38:89:09:36:34:83:b5:f7:ce:c7:b1:1d:c1

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/PVnC-SSK7mA
CRL Distribution Point: http://crls.pki.goog/gts1d4/Fm6hup_d6Go.crl

Check the revocation status for certificate www.thuongthansohoc.vn

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.thuongthansohoc.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.thuongthansohoc.vn
pv-link.lukb.ch
app.stakingdashboard.network
www.coinage.fi
algo.coolcold.co.uk
vzk.co.za
elitescholars.co.za
www.anmol.enterprises
gnk-staging.anyware.software
geraldbowman.vision
www.merchant.minilemon.com.au
www.mvpsolutions.tech
shrt.jopp.lt
frida.zpmmoste.net
www.jeppisjazz.fi
lp.pg-learning.net
book-review.yuliannas.com
portal.mypetparlorapp.co.za
www.ontzorgcontract.nl
sidon-stage.lilja.tech
www.gamerpro.kz
gestaobens.dgsys.com.br
codemagic.co.il
clinical-stage.scilifelab.se
codingbears.in
www.todaycash.co.kr
hangman.namzug.dev
e.oasidiriaci.it
www.sc5418.com
skgt.ch
www.atlanticagestaoconsultoria.com.br
www.launderremedy.com
techsadhu.in
jmdunning.com
app.databrew.tech
app.tiwaline.com
admin.hisgracechurch.or.id
beautylife.fit
free-education.my.id
www.sri-murugantravels.in
rizqx.sg
auth.smknu1karanggeneng.sch.id
app.pplnr.com
www.iqmodeling.com
assetstore.spicaengine.com
www.mshop.co.in
admind.talentforce.in
allsolution.co.in
wotaverse.jp
paiksbbqmel.posnet.com.au
uchospital.rflex.io
www.web3setu.com
properate.io
phaze.airbie.io
kululm.adeva.io
docentecas.alemana.cl
auth.codekeep.io
qsp-1-0-0-alpha-31.qualified.io
admin.moot.group
ukmee.com
qrc.benkon.io
fatihsanal.me
join-dev-web.allm.jp
vetsolution.app.br
www.lesonline.my.id
www.tooly.fans
staging-analytics-dashboard.knolskape.io
charliefacts.net
www.fortnight.ee
link.grouses.cheermedal.jp
www.illiteratecode.games
gridstudios.us
code.buzzapp.is
sce2yh-alpha.rayark-pass.net
agora.escuela.app
atittude.sogafit.net
wishlistchallenge.org
giorgio.garasto.me
dev.skyhub.app
deeplink.gopayz.com.my
js-demo.video.io
karelcompiler.xyz
nodes.lunarworks.co.uk
cfy.vc
aa-automotors.com
painel.deliveryshop.com.br
www.act8design.com
www.amgee.net
playrw.link
app.afirefi.com
www.mikeob.xyz
dev01.link.mempalette.com
docs.tooljet.io
www.wakanda-education.com
hualo.app
xerostech.fr
www.chinese-speak.com
signatures.digital113.fr
bags.yesgreen.in
profile.aappoint.me

Other certificates including the domain name thuongthansohoc.vn

(limited to 100 certificates)
www.thuongthansohoc.vn
www.weni.app
admin.appcheap.io
q1-track.dpd.co.uk
www.coelhooliveiraimoveis.com.br
sleepinsatin.net
www.weni.app
www.spoilermeme.com
www.fivetastes.ca
khanbridge.mn
khanbridge.mn
www.coelhooliveiraimoveis.com.br
www.joskan.com
lift-controller.stephenfrancis.online
posonte.horitzo.dev
www.joskan.com
arkoinad.com
axa-app.speakylink.com
www.twousin.com
metalink.dreamwave.live
www.allisonysamuel.com

Certificate

The complete raw certificate details for www.thuongthansohoc.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28084604251079653371332935985628160699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 20:12:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 21:09:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thuongthansohoc.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/PVnC-SSK7mA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2063 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thuongthansohoc.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pv-link.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stakingdashboard.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coinage.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algo.coolcold.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vzk.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitescholars.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anmol.enterprises'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnk-staging.anyware.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldbowman.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merchant.minilemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvpsolutions.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shrt.jopp.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frida.zpmmoste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeppisjazz.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.pg-learning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book-review.yuliannas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.mypetparlorapp.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ontzorgcontract.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidon-stage.lilja.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamerpro.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestaobens.dgsys.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codemagic.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinical-stage.scilifelab.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codingbears.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.todaycash.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangman.namzug.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.oasidiriaci.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sc5418.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skgt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticagestaoconsultoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.launderremedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techsadhu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmdunning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.databrew.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tiwaline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hisgracechurch.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautylife.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free-education.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sri-murugantravels.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rizqx.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.smknu1karanggeneng.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pplnr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iqmodeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetstore.spicaengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mshop.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admind.talentforce.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsolution.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wotaverse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paiksbbqmel.posnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchospital.rflex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web3setu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'properate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phaze.airbie.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kululm.adeva.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docentecas.alemana.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.codekeep.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsp-1-0-0-alpha-31.qualified.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.moot.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukmee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrc.benkon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatihsanal.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join-dev-web.allm.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetsolution.app.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesonline.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tooly.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-analytics-dashboard.knolskape.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charliefacts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortnight.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.grouses.cheermedal.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illiteratecode.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gridstudios.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.buzzapp.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sce2yh-alpha.rayark-pass.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora.escuela.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atittude.sogafit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wishlistchallenge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giorgio.garasto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.skyhub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplink.gopayz.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js-demo.video.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karelcompiler.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nodes.lunarworks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfy.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa-automotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painel.deliveryshop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.act8design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amgee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playrw.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.afirefi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikeob.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev01.link.mempalette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.tooljet.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakanda-education.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hualo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xerostech.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinese-speak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signatures.digital113.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bags.yesgreen.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.aappoint.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Fm6hup_d6Go.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb2455d6b000004030047304502201a0086da06e33084618239f2fd3bbf605ec4b3e1b049d631249f7bcbfe368e97022100f2ffa70c3e23c70c7b4fdc62a8a150178ab2a7bd75ba9f880abfbbfdd28ef25400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cb2455d720000040300473045022039116423c276be04a0a9d3edb82f5afa07abea02c2b707563347294ada6434f9022100c633a92da6e901c86c4fdd755cbfb4b7cb37894b0f9e547c28a812aedf5bd73c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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