firebaseapp.com

- Firebase, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:95:84:00:02:1e:4b:fe:56:e8:c4:0e was issued on by GlobalSign nv-sa.

With 136 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Firebase, Inc.

Organization: Firebase, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:95:84:00:02:1e:4b:fe:56:e8:c4:0e
Serial Number (int): 5441998466613827701649753102
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: c2:dd:ee:25:dc:f2:c2:c0:97:9c:ec:f0:35:0f:28:67:cf:61:9b:59
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 6a:85:ef:9b:43:da:f7:3a:f2:24:e1:31:16:19:73:ba:2a:17:68:76
Fingerprint (sha256): 20:25:cd:ae:44:52:5b:f9:91:b5:10:fc:b1:e3:57:42:f0:03:22:e3:e9:de:81:4c:ea:c2:11:3a:0c:1b:15:32

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate firebaseapp.com

136

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for firebaseapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

firebaseapp.com
*.firebaseapp.com
adisorganizedsport.com
*.adisorganizedsport.com
ambrosioapp.com
*.ambrosioapp.com
angular-formly.com
*.angular-formly.com
asimetriq.com
*.asimetriq.com
barkersogilvyapps.com
*.barkersogilvyapps.com
basingstokemosque.org.uk
*.basingstokemosque.org.uk
birra.land
*.birra.land
bmgg.co.ve
*.bmgg.co.ve
boolean.cloud
*.boolean.cloud
bwhitfield.com
*.bwhitfield.com
cerux.eu
*.cerux.eu
congchen.me
*.congchen.me
cosplayapp.net
*.cosplayapp.net
dataeyeq.co.za
*.dataeyeq.co.za
discoverauburn.org
*.discoverauburn.org
drmomohseun.com
*.drmomohseun.com
edelsah.com
*.edelsah.com
elanalynn.com
*.elanalynn.com
everydaypeople.chat
*.everydaypeople.chat
fasthamster.com
*.fasthamster.com
flowup.cz
*.flowup.cz
foundation.az
*.foundation.az
freqs.net
*.freqs.net
gdgsudbury.ca
*.gdgsudbury.ca
gdgsv.com
*.gdgsv.com
geeksolutions.co
*.geeksolutions.co
geoidit.com
*.geoidit.com
hervillage.co
*.hervillage.co
ilink.de
*.ilink.de
itkrem.com
*.itkrem.com
jumbotronup.com
*.jumbotronup.com
keng42.com
*.keng42.com
kervice.com
*.kervice.com
kidshappytime.com
*.kidshappytime.com
larp.org.ua
*.larp.org.ua
mamaz.me
*.mamaz.me
neudie.com
*.neudie.com
noschoollee.info
*.noschoollee.info
novigolabs.com
*.novigolabs.com
patelharsh.com
*.patelharsh.com
petsdiaries.com.br
*.petsdiaries.com.br
prasadwedsdhanashree.com
*.prasadwedsdhanashree.com
realityandbeyond.co.ke
*.realityandbeyond.co.ke
requestafrica.com
*.requestafrica.com
reversal.site
*.reversal.site
rpy.me
*.rpy.me
rsvp.dog
*.rsvp.dog
sah-sh.ch
*.sah-sh.ch
sapexam.site
*.sapexam.site
satchl.io
*.satchl.io
schalamonek.hu
*.schalamonek.hu
sdahymns.org
*.sdahymns.org
sigma.ws
*.sigma.ws
slowrush.co.uk
*.slowrush.co.uk
sparkntnu.no
*.sparkntnu.no
steelreflex.com
*.steelreflex.com
teamsontrack.com
*.teamsontrack.com
temporalfame.com
*.temporalfame.com
thinkersanddoers.co
*.thinkersanddoers.co
tinphuong.com
*.tinphuong.com
twixtures.com
*.twixtures.com
ururu.store
*.ururu.store
utexas-gifts.com
*.utexas-gifts.com
vnbconferenties.com
*.vnbconferenties.com
weedvendor.com
*.weedvendor.com
zentostudios.com
*.zentostudios.com
zsoltnemeth.com
*.zsoltnemeth.com

Certificate

The complete raw certificate details for firebaseapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VU8BSJ+zbUwWxuahG6k
7DoaHtDKS16u4r2RC9a0ZG1MYf3cviLB59E0kwMO16Oduq+ACPzCSlm19VS62NLH
bBvfrOpxUPc4XcS7EyqVH0KVO5uuCd7dJucMuqFVF8UKGjG+IMmO645j0JGG5CnS
cVOB+huCsdH/i8e0dKPnBJ6y+PIxTw+nRnzmvQuEXND1lOniY8r8gaY1kxuiuQU+
DdwYWBWPiuiWbVuiuX48V8Ht9JhOXq2s3iy9N0cPt6MluzObO6sO8Z5usVB5iPLH
Wp+li0C+eecqs/DcV1GVV1uKqpymU6UDfLmEP8Wh2D67O3rra2sXL9RAs3UHSS9W
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5441998466613827701649753102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-10 18:27:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-01 14:20:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Firebase, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'firebaseapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26930789633222111557435949378612531209134579697598685771807029707254976039471461410204437860930028792320952182806135499331220072955148214346941585958805851709375511521404332988068618635739042728284859201409129733516694290398972066029461191108811773406745966040681289816735499184412814194209593102434695819172985599546776661220602565329882124850003719681516276057088945771087735541998474525258527300970799030283112753345863471677396796457520229038886365460424139606733922466906078897573211739068648747064884013526288607338174827915851703992907171109471765335376553716555917504352910976827305494413705571315266872104689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adisorganizedsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adisorganizedsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambrosioapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambrosioapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angular-formly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angular-formly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asimetriq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asimetriq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barkersogilvyapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barkersogilvyapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basingstokemosque.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basingstokemosque.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birra.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birra.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmgg.co.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmgg.co.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boolean.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boolean.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwhitfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bwhitfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerux.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerux.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congchen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.congchen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosplayapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosplayapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataeyeq.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dataeyeq.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverauburn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discoverauburn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drmomohseun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drmomohseun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edelsah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edelsah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elanalynn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elanalynn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydaypeople.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everydaypeople.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasthamster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fasthamster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foundation.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freqs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freqs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdgsudbury.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gdgsudbury.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdgsv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gdgsv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geeksolutions.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geeksolutions.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoidit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geoidit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hervillage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hervillage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilink.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilink.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itkrem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itkrem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumbotronup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jumbotronup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keng42.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keng42.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kervice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kervice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidshappytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidshappytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larp.org.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larp.org.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamaz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mamaz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neudie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neudie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noschoollee.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noschoollee.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novigolabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novigolabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patelharsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patelharsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petsdiaries.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petsdiaries.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prasadwedsdhanashree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prasadwedsdhanashree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realityandbeyond.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realityandbeyond.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.requestafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reversal.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reversal.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsvp.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rsvp.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sah-sh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sah-sh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapexam.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sapexam.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satchl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satchl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schalamonek.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schalamonek.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdahymns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdahymns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigma.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigma.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slowrush.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slowrush.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkntnu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelreflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steelreflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsontrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamsontrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporalfame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temporalfame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkersanddoers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinkersanddoers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinphuong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinphuong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twixtures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twixtures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ururu.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ururu.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utexas-gifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utexas-gifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnbconferenties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vnbconferenties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedvendor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weedvendor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zentostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zentostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zsoltnemeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zsoltnemeth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2ddee25dcf2c2c0979cecf0350f2867cf619b59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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