www.yanachik.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number bd:59:12:f5:27:94:1f:61:12:ae:3c:aa:75:80:8c:51 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.yanachik.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bd:59:12:f5:27:94:1f:61:12:ae:3c:aa:75:80:8c:51
Serial Number (int): 251686590130280365950965736983471623249
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): c4:25:4a:54:04:cc:90:0d:8f:04:a7:4c:4e:c5:87:58:22:6f:89:db
Fingerprint (sha256): 20:9e:2d:94:63:80:c8:28:5b:36:78:49:b9:9a:9e:4c:98:a3:40:43:c5:0b:ea:78:a1:28:28:c6:37:31:4e:c5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/hSrcNU-lxNw
CRL Distribution Point: http://crls.pki.goog/gts1d4/Eo4JaO8L4BA.crl

Check the revocation status for certificate www.yanachik.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.yanachik.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yanachik.com
team.lernit.com.mx
www.rky.io
scrumpoker-online.org
sheska.co
chatpay.com.br
www.shineinvitations.co
altancare.com
link.tanamduit.com
www.ramanethralaya.com
chocolatedeouro.com.br
centroscomerciales-quiz.mymoons.cl
www.caminohealthapp.com
www.technorama.plus
www.prestiio.com
www.inviteme.es
animesoc.com
juanaleman.com
www.serenakuo.com
ranchapp.co
spacex.0xmoe.com
www.vertex.systems
front-dev.meetinganalytics.com
pungames.kinww.xyz
cienx35.co
www.trophyking.io
fabme.net
plan-staging.heob-ip.de
auth.imemo.asia
www.quizhub.info
comunicats.capleshortes.cat
ap.coffeego.com.ua
resultarsoluciones.com
www.cityworks.app
bytheyardenterprise.com
lwc-redux.com
avtokozmetika-tiva.si
aliados.tonelaje.com
download.minlyapp.com
clippje.feu.com.br
www.smartxelements.net
sigma.cao-textiel.appdashboard.nl
fakta.optoro.ingka.com
dynamic.handsomeapp.com
accordle.it
test.inmujeres.xprtcoders.com
www.rphlifesafety.com
www.foxfireindustries.com
www.thiswhole.online
osstftech.com
blueheaven.porcelanosapartners.com
callecolmenares.porcelanosapartners.com
dev.nicezki.com
www.parkimagesolutions.com
fieldmap.r-link.at
latam-sdk-sandbox.joinsherpa.io
www.vacations.k-9apps.com
m-aura.abiinteriors.co.nz
developers.sipay.es
diagnose-b2b.wacul-ai.com
www.fud.coach
app.swellstats.com
tike.bike
mckyla.tanssipelit.fi
www.xaviergarber.com
marche.link
www.draaco.es
bbmanager-tst.cbros.it
uereydavid.codexplus.net
bakerstreet.lk
shop.lnformationstudio.com
app.myweeklyroutine.com
ansl.it
shoutout.set.live
naomedical.io
fatihsanal.com.tr
registration.cat4school.de
nativewit.in
staging.forms.listique.com
s.feminine-care.com
www.lmuathleticscamps.com
barneyreecetgm.co.uk
tienda.tuopticahd.com
www.jcg.golf
www.zealluxe.in
brandoncounts.us
carlton-professional.co.uk
app.volunshare.net
www.danfebooks.com
b2b.zenelo.net
studyfor.xyz
grippy-shares-dev.griptonite.io
integration.upoint.mn
scannorder.fr
www.drop-back.com
appstest.ziizii.io
www.cleantask.com.br
firebase.neelyx.io
www.kausarindustrialcorporation.com
mesbro-scrap.mesbro.in

Other certificates including the domain name yanachik.com

(limited to 100 certificates)
www.thenext.vip
www.aarshremedies.com
basketball.yanachik.com
www.beec.in
heyremote.com
app.v2.truffle.fan
www.yanachik.com
www.devstore.app
westernroyaldiagnostics.com
figmacorp.backpac.co
www.savorymaps.com
ponchoui.nl
www.inon29.com
auth.homehabit.app
www.highwaydroptaxi.in
pillow.cash
auth.homehabit.app
evenconsult.com
adapptt.com
www.rentatool.com.co
apptransportador.com
www.mypiva.it
marche.link
styleguide.beautycounter.dev
pillow.cash
ponchoui.nl
store.nithinorganics.com
www.ni.clian.net
sheska.co
www.beseler.dev
nituengineeringworks.in
www.asmedia.jp
www.quizativ.com
www.goleio.app
portal.yathit.com
webplayer.crowdcanvas.com
www.slitsoft.com
cyberwavellc.com

Certificate

The complete raw certificate details for www.yanachik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 251686590130280365950965736983471623249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 10:27:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 11:23:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.yanachik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/hSrcNU-lxNw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yanachik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.lernit.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rky.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrumpoker-online.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheska.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatpay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shineinvitations.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altancare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.tanamduit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramanethralaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolatedeouro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centroscomerciales-quiz.mymoons.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caminohealthapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technorama.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestiio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inviteme.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animesoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juanaleman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serenakuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacex.0xmoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vertex.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'front-dev.meetinganalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pungames.kinww.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cienx35.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trophyking.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan-staging.heob-ip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.imemo.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizhub.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunicats.capleshortes.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.coffeego.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resultarsoluciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityworks.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytheyardenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwc-redux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtokozmetika-tiva.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliados.tonelaje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.minlyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clippje.feu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartxelements.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigma.cao-textiel.appdashboard.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakta.optoro.ingka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic.handsomeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accordle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.inmujeres.xprtcoders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rphlifesafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxfireindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thiswhole.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osstftech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueheaven.porcelanosapartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callecolmenares.porcelanosapartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nicezki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkimagesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldmap.r-link.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latam-sdk-sandbox.joinsherpa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacations.k-9apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-aura.abiinteriors.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.sipay.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnose-b2b.wacul-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fud.coach'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.swellstats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tike.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckyla.tanssipelit.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xaviergarber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marche.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.draaco.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbmanager-tst.cbros.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uereydavid.codexplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerstreet.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lnformationstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.myweeklyroutine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoutout.set.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naomedical.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatihsanal.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.cat4school.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativewit.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.forms.listique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.feminine-care.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmuathleticscamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barneyreecetgm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienda.tuopticahd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcg.golf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zealluxe.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandoncounts.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlton-professional.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.volunshare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danfebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.zenelo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studyfor.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grippy-shares-dev.griptonite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.upoint.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scannorder.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drop-back.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appstest.ziizii.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleantask.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.neelyx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kausarindustrialcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesbro-scrap.mesbro.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Eo4JaO8L4BA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae5d789070000040300483046022100cf3830e47fdba7004ced2dd358ae2a70fcf2180c5477a670bc3dec224543837c022100be84d2ba21340fc4b7cb480e938f86dec45d90ca613ba7e229554cad795918e5007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae5d788d2000004030046304402204901132a41a7d7a1ff74778466ade2b12ef3b05abd2e4c45bff5629de3f821ea02207e01361b9be5d2122f3025837fed2a0d310d5d74cceb1232c0bbc86db201352f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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