reading-easy.it

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 30:ea:1b:8e:f4:18:ce:88:09:d9:34:86:5f:89:03:5c was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reading-easy.it

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:ea:1b:8e:f4:18:ce:88:09:d9:34:86:5f:89:03:5c
Serial Number (int): 65018500213575819118137529101992919900
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): ea:c2:55:ba:1b:9e:37:49:dc:5d:bf:6e:12:8a:da:47:41:7c:9f:be
Fingerprint (sha256): 21:4d:17:37:c5:a8:0c:66:e6:1e:f9:3c:d3:4c:35:08:63:4f:18:62:86:87:53:ef:59:bb:3c:d6:0e:67:2b:da

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/gGwjvR_e4IQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/Oum6XtQWsIU.crl

Check the revocation status for certificate reading-easy.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reading-easy.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reading-easy.it
pokerand.io
agent.ssplmoney.com
www.cancelamazonprime.com
www.conatumex.com.mx
pitirestaurant.piticommerce.com
kepler-fire.dtws-work.in
demo.slavemgmt.com
stage.tripmaker.city
www.pokerand.io
taggl.io
playaonline.live
crookedcreekcabins.org
www.picapica.me
vladretca.dev
firechat.briankwong.me
showcase.remotemonster.com
s.shochiku.co.jp
react.mpix.de
links.en.tel
deals.umun.in
www.cesartorres.org
id.vitanote.jp
app.procomps.gg
matkonit.co.il
www.handsupfundraiser.com
dev.admin.thehopesurvey.com
2022.vlucendo.com
emploi.polyjobs.fr
euteajudotumeajuda.com.br
www.asska.org
www.webet.tech
liebn.de
www.chintzbaby.com
wp.mrc-wattens.at
app.podalarms.com
wir-sagen-danke.pixelgenau.com
screenception.wunder.io
www.comfortdental.com.mx
preciok.caveclm.es
www.hupper.life
foryoursweetheart.sg
wpm.netrise.co.il
www.analitica.id
robocon.tokyo
viewer-preview.input4you.be
www.hotel-palmiers.com
develop2.manaport.seto-solan.ed.jp
ikefukurou-home.live-stream-app.com
firebase.mipig.jp
portfolio.harkerhack.com
www.memo-de-vie.eu
pfg.dominos.sa
staging.faluche.app
appointments.gq
www.akupunyaadikhilang.xyz
shukisraeli.co.il
www.comments.new
sinhvien.td.edu.vn
www.beneathourscars.com
moreandmo.bywallof.co.za
admin.beenfo.com
www.onthisday.ru
maidslips.co.za
dev.cysec.mycrwds.com
www.huangsoon.com.tw
www.homesz.jp
www.daculrac.com
moonle.professionail.co.nz
www.receiptstory.ru
flm.interzonas.info
imoline.bremens.gr.jp
www.filmfilter.dk
warm-aanbevolen-zonmw.nl
www.fkl.gt
dev.chatfoto.id
mobile.app.naimix.info
www.yageservice.com
invite-meet.ktworks.co.kr
sbs.cdlbox.com.br
dynamic-form.labs.moon.lu
www.mydnight.net
www.peaci.edu.ph
bike-rent.berider.sk
www.andrechenriques.com
www.bolo.earth
kdm.vboard.games
theatomic.space
vishnubharathalampalli.com
murphyperformanceconsulting.com
bendoylegray.com
uniqart.app
fungaiaziendagricola.com
commoncrawler.com
www.logitnow.ca
mattressmattressdelivers.com
castleplayer.com
s.anybuddyapp.com
eladyosef.com
getpodrest.com

Other certificates including the domain name reading-easy.it

(limited to 100 certificates)
www.asska.org
iammoriz.net
reading-easy.it
app.salsanena.at
omwf.de
blackboard-dev.klarway.com
www.angularmaterial.dev
backoffice.local-elves.com
agent.ssplmoney.com
www.cholodelrosario.com
www.herzlichingatlan.hu
tests.dpielts.lk
frenchieballers.com
onrecord.online
admin.tokei.day
cvgranskningen.se
www.53cr3t.com
www.fbhelper.net

Certificate

The complete raw certificate details for reading-easy.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 65018500213575819118137529101992919900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 00:32:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 01:28:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reading-easy.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/gGwjvR_e4IQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2088 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reading-easy.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokerand.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.ssplmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancelamazonprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conatumex.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitirestaurant.piticommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kepler-fire.dtws-work.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.slavemgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tripmaker.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pokerand.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taggl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playaonline.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crookedcreekcabins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.picapica.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladretca.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firechat.briankwong.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcase.remotemonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.shochiku.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react.mpix.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.en.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deals.umun.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cesartorres.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.vitanote.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.procomps.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matkonit.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handsupfundraiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admin.thehopesurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2022.vlucendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emploi.polyjobs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euteajudotumeajuda.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asska.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webet.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liebn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chintzbaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.mrc-wattens.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.podalarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wir-sagen-danke.pixelgenau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screenception.wunder.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comfortdental.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciok.caveclm.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hupper.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foryoursweetheart.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.netrise.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.analitica.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robocon.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewer-preview.input4you.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotel-palmiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop2.manaport.seto-solan.ed.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikefukurou-home.live-stream-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.mipig.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.harkerhack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memo-de-vie.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfg.dominos.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.faluche.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appointments.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akupunyaadikhilang.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shukisraeli.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comments.new'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinhvien.td.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beneathourscars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moreandmo.bywallof.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.beenfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onthisday.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maidslips.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cysec.mycrwds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huangsoon.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homesz.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daculrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonle.professionail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.receiptstory.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flm.interzonas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoline.bremens.gr.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmfilter.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warm-aanbevolen-zonmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fkl.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.chatfoto.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.app.naimix.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yageservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite-meet.ktworks.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbs.cdlbox.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic-form.labs.moon.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydnight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peaci.edu.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bike-rent.berider.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrechenriques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bolo.earth'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdm.vboard.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theatomic.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vishnubharathalampalli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murphyperformanceconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendoylegray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniqart.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fungaiaziendagricola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoncrawler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logitnow.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattressmattressdelivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castleplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.anybuddyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eladyosef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getpodrest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Oum6XtQWsIU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018abfaa5e7f000004030046304402207c0f843e244289519259e8c805c176aad50857e3486a4190c31781256e573529022036520d8ed831b2065a0db8af4992d103dbff466d36fec4ba96cbbeac1c208f15007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018abfaa5ea10000040300473045022100f5d233b667d775e45a7f2e6b3407f9d9c9a768544be9332a6f754a87405d90d50220193d2d66902fead9b9404e8ea172711fa6d6906ba46dbd0aba2bd4f42047eadf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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