www.kalpa.no

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ad:41:c0:84:76:5f:a4:22:12:67:45:26:1a:89:f9:9f was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.kalpa.no

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ad:41:c0:84:76:5f:a4:22:12:67:45:26:1a:89:f9:9f
Serial Number (int): 230297847283991417020227765564248553887
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 15:31:b3:da:c7:74:45:8f:2a:7d:33:ed:b4:2e:48:24:5f:e5:e4:a6
Fingerprint (sha256): 20:4d:4f:a1:89:b0:d1:3a:97:fd:e5:a9:40:3a:3a:d0:49:27:11:b1:97:a3:22:f4:8a:79:46:20:b8:99:bf:54

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Ygbao-w6QAY
CRL Distribution Point: http://crls.pki.goog/gts1d4/aTfX4DvYwr4.crl

Check the revocation status for certificate www.kalpa.no

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kalpa.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kalpa.no
pay.bravobit.nl
itinerantrecords.musik.digital
www.enigmatlantis.com
bmn-malutkemenkumham.com
tot.zenselect.jp
m.smarthome.rt.ru
www.stvworld.co.in
s.7sgood.com
news.boca.gov.tw
oms.cahayamascemerlang.co.id
hbcmusik.com
momentsadmin.estore.business
earlyalerting.com
benputthisonyourplex.com
bonealo.com
www.decobienesrealestate.com
app.b2allsolution.com
grokbasis.com
elakevakuutukset.com
5minutechill.com
chatnowbutton.com
awe-docs-staging.dogonews.com
www.hiddencaliber.com
jbalazer.com
jellymountain.com
dev-csr.dena.com
taverntools.net
www.jannaazabache.com
dashboard.apolocrm.com
sonomera.com
kyleschiller.com
meup.com.ar
adev-mp.fr
improve10x.com
contractme.io
25secondscreative.com
scottcurry.dev
moderation.bluerobot.com
app.intelligere.co
deltagale.com
bintin.io
client.qr-serv.fr
beyondbudget.net
auth.milkywire.com
allura.app
qc4application.com
menab.co
karregister.thinktac.com
appvibes.fr
networkcat.marketingwithayush.com
meeko.markuso.com
fantown.net
beta.eurika.fr
vintage.heartbeat.com.mx
www.lemniscater.com
click.staging.rakutenadvertising.io
support.currency-one.com
dandd.therestinmotion.com
universalsikh.com
auth.debug.milkywire.com
openpetrucio.com
www.plazamotriz.com
www.shivamenta.me
wrap.aquafinance.live
yondr.es
api-staging.ethy.co.uk
app.visitpensacola.com
jobchance.me
dev.eurika.fr
groupwben.ch
labs.skydea.co
www.oxy.family
onevest.co.za
lilpockets.estore.business
pascalbrokmeier.de
brunoripa.com
www.monaai.de
www.haticeakpinar.com
arf-pwa.nci-staging.com
getlicensedbondedinsured.com
www.navjotsinghs.com
planet.singularitybd.com
ourcastles.co
freestrawpoll.com
www.siciliainnova.com
iotals.ie
link.chilindo.com
corporacionsuper.com
bba.co.za
www.galaxy-tale.de
byobuzzer.com
www.wfhgamers.com
www.easy-web.org
www.timeboxe.com
ytsoftball.leaguesquare.com
wayklase.eskwela.app
newlifestyle.co
weather.ordunodev21.com
www.haiphongmedialtd.net

Other certificates including the domain name kalpa.no

(limited to 100 certificates)
kalpa.no
www.smaccoun.com
app.fxr-insights.com
admin.hoffen-tech.com
www.sparc.agency
www.kalpa.no
www.kalpa.no
fairplate.org.au
f.link.mustard.love
tonyloveshan.com
www.zohodocs.aristoc.ug
www.musicrewards.com
www.mycluetivity.com
www.full-truck.com
docs.puzzlemazing.online
www.coelum.es
www.poupado.com.br
manifestaffirmations.com
monsterroom.app
accordle.at
worldcup2018.acpfc.com
vedur.arnigu.info
signin.statusfy.com
mexicantrain.app
app-rrios.cydocs.cl
f.link.mustard.love
ahmetarici.com
averyevans.xyz
minusman.ru
anjumanbarui.com
hirebaze.com
www.braximob.com
www.moduleq.com
hirebaze.com
samesex.app
weather.theoctagon.in
www.kalpa.no
feedgo.app
christtribe.ng
elplural.marcafranca.com
mndcntrl.ca
www.spaza.tech
thomasbenhamou.com
khalilsabha.com
account.snappyxo.io
www.evelynbauer.ca
www.clearintent.org

Certificate

The complete raw certificate details for www.kalpa.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 230297847283991417020227765564248553887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 13:30:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 14:28:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kalpa.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Ygbao-w6QAY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1997 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalpa.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.bravobit.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itinerantrecords.musik.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enigmatlantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmn-malutkemenkumham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tot.zenselect.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.smarthome.rt.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvworld.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.7sgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.boca.gov.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.cahayamascemerlang.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcmusik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momentsadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlyalerting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benputthisonyourplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonealo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decobienesrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.b2allsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grokbasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elakevakuutukset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5minutechill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatnowbutton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awe-docs-staging.dogonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiddencaliber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbalazer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jellymountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-csr.dena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taverntools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jannaazabache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.apolocrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonomera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyleschiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meup.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adev-mp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'improve10x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractme.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '25secondscreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottcurry.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moderation.bluerobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.intelligere.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltagale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bintin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.qr-serv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondbudget.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.milkywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allura.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc4application.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karregister.thinktac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appvibes.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkcat.marketingwithayush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeko.markuso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantown.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.eurika.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintage.heartbeat.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemniscater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.staging.rakutenadvertising.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.currency-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dandd.therestinmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalsikh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.debug.milkywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openpetrucio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plazamotriz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shivamenta.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrap.aquafinance.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yondr.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.ethy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.visitpensacola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobchance.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eurika.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupwben.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.skydea.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxy.family'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onevest.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilpockets.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pascalbrokmeier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunoripa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monaai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haticeakpinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arf-pwa.nci-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getlicensedbondedinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navjotsinghs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planet.singularitybd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourcastles.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freestrawpoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siciliainnova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iotals.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.chilindo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporacionsuper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bba.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galaxy-tale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byobuzzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wfhgamers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy-web.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timeboxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytsoftball.leaguesquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayklase.eskwela.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlifestyle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.ordunodev21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haiphongmedialtd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/aTfX4DvYwr4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc9174b2c0000040300473045022100b421aafa8ff8d87d6ae1b601f65f7cf142fbd4d54648ac25ccd817d25ff8e408022054ef68823413fd703f2c124715a1045b43164e57508c17c5838bfa870c9d28de00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bc9174752000004030047304502207f5f9ff6a082b12b45a120a86e275ea991d0cf1abfe6167d7282018493e6a5ec022100c8fa5b18a69f63cef3be9f1dcdccbbc67b4fae40fb2cb00254f09b3915918b07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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