spaar.puntje.nl

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 94:ef:37:d9:71:b4:9a:82:09:7e:8a:c2:8e:c5:cc:65 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spaar.puntje.nl

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 94:ef:37:d9:71:b4:9a:82:09:7e:8a:c2:8e:c5:cc:65
Serial Number (int): 197967835085586981830758662728615054437
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 79:9c:e5:a3:d6:fa:60:02:c8:34:b2:cb:db:03:7e:a9:d9:39:cd:03
Fingerprint (sha256): 1f:5b:59:1e:06:cd:ee:9b:0b:fa:32:ec:40:f1:8f:e5:94:d0:3c:fd:9c:26:1e:19:2a:33:95:cc:38:31:e7:78

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/knAxk8T6K1Q
CRL Distribution Point: http://crls.pki.goog/gts1d4/zpK3TVGmVvI.crl

Check the revocation status for certificate spaar.puntje.nl

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spaar.puntje.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spaar.puntje.nl
docs.labelator.io
saizo-aoyagi.jp
ramen.fit
www.j3s.dev
refintomu.com
www.tabithahall.co.uk
dev.docyrus.app
deltagreenenterprises.com
www.villasolida.com
api.buscuu.com
miandanishllc.com
radarcrate.com
reign-game.com
www.arthurghz.com.br
www.ctaealumnisociety.org
test.public.scw.openvantage.io
homolog.unimedvtrp.drtis.com.br
gregorymermoud.ch
foodrestos.de
www.anatta.dev
tip-top.day
zagmax.com
media.petarumah.com
anatta.dev
wostle.com
featureflag.stge.keap.dev
bishalpokhrel.com.np
www.krsnaapp.com
betty.kick2cloud.com
www.featurelogs.com
aishdesigns.in
www.roomly.ch
www.miandanishllc.com
dl.suivideflotte.net
hotel-sharm.com
natureslapresort.in
www.zaiqacaterer.com
consistent.fit
jamianoor.in
query.kanakori.fi
www.redforestal.com
www.multibrandsjob.com
www.venturestudiocollective.com
www.eti-institut.de
cmbs.visulate.net
www.tim-wang.com
bi.spira.com.mx
watermarks.io
link.talk2owner.com
admin.kiomda.fr
www.tuvsurgical.co.za
dev.wedzee.com
camp.edu.sv
academy.bbleads.in
www.darkmsph1t.io
did.asctech.net
lorp-feature-two.credibilitycapital.io
hawaiican.org
wataten5-otanoshimikuji.com
www.aboutcontent.de
app.mindler.link
r-d-c.org
clinicapv.rflex.io
app.splash.exchange
cascal.rflex.io
sneat.team
invites.biyelagse.com
screen.zen4.net
luna-re.xyz
get.instameal.in
ismseminars.org
rightsissue.sasgroup.net
meishi.ysyk.net
www.clarachick.me
andchill.app
alpha.flubble.app
staging.daoexchange.app
www.wecarebravely.org
www.paulrichter.org
web.astage.org
newauto.app
ch2-client.rangga420.xyz
www.promecpachino.it
www.experimentalsignage.org
chobani.wisy.ai
staging.passiver.xyz
tocre.app
www.nwlincolncoc.us
askvicky.tech
together.kakaotalk.app
fivefit.app
propertycalc.app
dev01-link.propertyloop.co.uk
jewellerydemo.estore.business
cracea.ro
website1033.estore.business
www.energywatch.live
www.radiator.link
www.vogelhaus.app

Other certificates including the domain name puntje.nl

(limited to 100 certificates)
www.sharingsong.com
media.youmewho.com
kbrielly.tk
spaar.puntje.nl
*.puntje.nl
www.piiq.app
media.youmewho.com
v5demo.anfitriones.mx
soufiane.co
vlra.app
bottomlesstech.com
*.puntje.nl
api.puntje.nl
*.puntje.nl
app.forecash.io
*.puntje.nl
mijn.puntje.nl
api.puntje.nl
api.puntje.nl
api.puntje.nl
topgrillburger.com.br
www.jessedevs.com
www.mairimed.com
client.melonseed.media
portinaxibiza.porcelanosapartners.com
api.puntje.nl
dev-pro.colavo.kr
spaar.puntje.nl
*.puntje.nl
m-doctor.cartulahealth.id
*.puntje.nl
nbkarandev.tech
api.puntje.nl
*.puntje.nl
foro.discoverymexico.com.mx
*.puntje.nl
fjdevesa.com
acad.ycohui.com
*.puntje.nl
www.jmscc.fi
api.puntje.nl
www.dashboard.avsemprize.com
www.timezonemeetingplanner.com
metaguru.guru
artel.london
enigma-group.org
admin.experienciavirtualfime.com.mx
profiles.aac.dog
*.puntje.nl
*.puntje.nl
oota.foundtreevtt.com
www.wayanadcamping.com

Certificate

The complete raw certificate details for spaar.puntje.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 197967835085586981830758662728615054437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 20:04:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 21:01:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spaar.puntje.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/knAxk8T6K1Q'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1959 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaar.puntje.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.labelator.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saizo-aoyagi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramen.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.j3s.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refintomu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabithahall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.docyrus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltagreenenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villasolida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.buscuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miandanishllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radarcrate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reign-game.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arthurghz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctaealumnisociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.public.scw.openvantage.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homolog.unimedvtrp.drtis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregorymermoud.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodrestos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anatta.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tip-top.day'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zagmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.petarumah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anatta.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wostle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflag.stge.keap.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bishalpokhrel.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krsnaapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betty.kick2cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.featurelogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aishdesigns.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roomly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miandanishllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.suivideflotte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel-sharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natureslapresort.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zaiqacaterer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consistent.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamianoor.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'query.kanakori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redforestal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multibrandsjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venturestudiocollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eti-institut.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmbs.visulate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tim-wang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.spira.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarks.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.talk2owner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kiomda.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuvsurgical.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wedzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp.edu.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.bbleads.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darkmsph1t.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'did.asctech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorp-feature-two.credibilitycapital.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wataten5-otanoshimikuji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboutcontent.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mindler.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r-d-c.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicapv.rflex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.splash.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cascal.rflex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sneat.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invites.biyelagse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screen.zen4.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luna-re.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.instameal.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ismseminars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightsissue.sasgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meishi.ysyk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarachick.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andchill.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.flubble.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.daoexchange.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wecarebravely.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulrichter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.astage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newauto.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch2-client.rangga420.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promecpachino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experimentalsignage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chobani.wisy.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.passiver.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tocre.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwlincolncoc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askvicky.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'together.kakaotalk.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivefit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertycalc.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev01-link.propertyloop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewellerydemo.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cracea.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website1033.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energywatch.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiator.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vogelhaus.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/zpK3TVGmVvI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c5ab207920000040300483046022100fceea4c720b8477f223b01bfcf9f4950ac927b4e38c3e9d1e6bc738d4ec4bf7b022100db526ff5a649a0f18fbafd0133e0fde5f1b62b5b7439ca246ad2b51ac6c658b600770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c5ab2077d000004030048304602210093ef18131bae6e25dfd1efe8e0bbd62df0c7d58ee4aa5d95430d12f0d78eebec022100829f1229612ba661055838498be34d3db99aae37324570841644678f4eacfdde
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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