bshefa.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 36:b3:a2:11:7b:31:ff:a6:0a:54:d7:4a:7e:1f:5d:34 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bshefa.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 36:b3:a2:11:7b:31:ff:a6:0a:54:d7:4a:7e:1f:5d:34
Serial Number (int): 72711020045424846434958623474414738740
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 1f:35:ef:48:2c:b5:fb:32:a9:58:cc:49:5f:d3:0e:69:6c:fc:06:63
Fingerprint (sha256): 1f:d2:26:00:29:ae:67:ba:ee:be:21:18:6d:1a:b5:70:fe:c7:9a:0c:54:33:cb:0e:03:a0:38:1e:f6:51:ee:3d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/ssI8jF7TrtM
CRL Distribution Point: http://crls.pki.goog/gts1d4/dsfiNr-mayI.crl

Check the revocation status for certificate bshefa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bshefa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bshefa.com
jacafe.cgapp.net.au
www.topbitcasinos.com
mediastock-popularvote.thaipbs.or.th
www.khaikiong.dev
core.qa.wunderkind.co
pentagono.ftrustee.com.br
www.rhemati.com
www.truecustomcabinetry.com
azpartners.swapptechs.com
dev.subscription-widget.stykite.com
patina-45.de
chat.frissegedachtes.nl
www.allsidesin.com
link.skuad.me
app.cuely.ai
expert.gobubble.app
music-of-our-desire.com
www.adamspaulding.com
www.breadcrumbdata.com
link.hoplagit.com
rahbar.akdnehrc.com
noxlock.dev
winred.opportunitymattersnetwork.org
riingo.com
shop.smartcheckout.co.uk
eat2win.mysportsd.com
app.coorganiz.com
player.colada.biz
oivis.com
sklypaipajuryje.lt
burger-builder.jimnguyen.dev
manage.carson.ca
www.foresthills-knysna.co.za
www.futpolemica.com
www.snobsolutions.com
www.kimpitt.com
wingtakwong.com
m.tktnew.com
sergiovechi.com
palazzogrossi.com
www.heyremote.com
www.spalatoriecovoarehorezu.ro
www.dnsrecord.how
app.thecpin.com
spl.weekendprojects.xyz
delightful.dussmann.com
test.guessfair.com
www.biljartstats.nl
www.magodhomestay.com
anv.com.mx
link.accesscareapp.com
domains.webseo.co.za
ponce.im
secure.haulex.com
web.hipposrl.com
sound.pakiela.com
app.sportsinnovated.de
l.daslab.de
link.use-beez.com
www.maintenance-enterprises.com
xyzrobotics.in
i2i.co.jp
triviamotors.in
ddavid.net
app.finni.health
www.edvinlin.com
admin.servicing.getaround.com
test2.prazskabojovka.cz
caniapp.nanitook.xyz
www.fufast.com
admin.mosahay.net
overengineering.hu
www.rocklandinstantcopy.com
skype.profitableservices.com
happymonkey.org
measurecamp.lukascech.cz
www.darksideof5g.com
app.redburger.es
clasificados.lavozdelafrontera.com.mx
www.buchiinc.com
ciarand.me
theclosetcompany.net
app.igrow.social
fotoplayapp.com
www.ddavid.net
www.somosadoracion.com
www.trust.do
admin.gericard-pros.es
axel65.com
andreerehnberg.com
test.o-paipai-games.com
nagornykh.me
wireless.coffee
apidocs.appfielder.com
exbrain.me
medconnect.io
www.app.yadadatrading.com
miracl.at
auth.help.jhc.uk

Other certificates including the domain name bshefa.com

(limited to 100 certificates)
erikvanegmond.nl
bshefa.com
resonancetrading.com
ps5-heartbeat.com
chizu-puzzle.com

Certificate

The complete raw certificate details for bshefa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 72711020045424846434958623474414738740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 13:05:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 14:01:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bshefa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/ssI8jF7TrtM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2065 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bshefa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacafe.cgapp.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topbitcasinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediastock-popularvote.thaipbs.or.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khaikiong.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.qa.wunderkind.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentagono.ftrustee.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhemati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truecustomcabinetry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azpartners.swapptechs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.subscription-widget.stykite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patina-45.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.frissegedachtes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsidesin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.skuad.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cuely.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expert.gobubble.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music-of-our-desire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adamspaulding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breadcrumbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.hoplagit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rahbar.akdnehrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noxlock.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winred.opportunitymattersnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.smartcheckout.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eat2win.mysportsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.coorganiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.colada.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oivis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sklypaipajuryje.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burger-builder.jimnguyen.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.carson.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foresthills-knysna.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futpolemica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snobsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimpitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingtakwong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tktnew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sergiovechi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palazzogrossi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heyremote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spalatoriecovoarehorezu.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnsrecord.how'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thecpin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spl.weekendprojects.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delightful.dussmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.guessfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biljartstats.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magodhomestay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anv.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.accesscareapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domains.webseo.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponce.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.haulex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.hipposrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sound.pakiela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sportsinnovated.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.daslab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.use-beez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maintenance-enterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xyzrobotics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i2i.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triviamotors.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddavid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.finni.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edvinlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.servicing.getaround.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.prazskabojovka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caniapp.nanitook.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fufast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mosahay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overengineering.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklandinstantcopy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skype.profitableservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happymonkey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'measurecamp.lukascech.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darksideof5g.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.redburger.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clasificados.lavozdelafrontera.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buchiinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciarand.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclosetcompany.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.igrow.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotoplayapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddavid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somosadoracion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trust.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gericard-pros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axel65.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andreerehnberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.o-paipai-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagornykh.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wireless.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidocs.appfielder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exbrain.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medconnect.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.yadadatrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miracl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.help.jhc.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/dsfiNr-mayI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc1af3a210000040300473045022100d68f380821f0805b1b93610c2e8e0303829f4a94a48ff9de20c1e0ee28790ee5022055cdc5320d22cc068c28d10d93a2b5066db68713ca5957a2a5a4820fc3fce6b2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018dc1af3a620000040300483046022100ec72da0de79867ea1e6c74ecdb8e6bde70be578610d6f2ee3abfb7402703fd5f0221009c539a9c9b0467f83e2d6b4138a651cb60beec56136383a38136895a43789d60
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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