aig-costco.affinity.do

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 66:8a:ff:70:8f:3c:c6:dd:10:54:14:1a:75:89:80:0f was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aig-costco.affinity.do

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:8a:ff:70:8f:3c:c6:dd:10:54:14:1a:75:89:80:0f
Serial Number (int): 136302973468872189082589304232241365007
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): df:54:f7:b2:a3:c8:79:d6:42:54:ff:74:f6:b0:e4:3b:d2:55:2e:7a
Fingerprint (sha256): 22:01:32:52:ef:3c:76:8c:69:06:97:13:72:6f:5a:0f:8f:92:3a:db:40:2b:46:4b:6c:5b:ed:93:c7:66:4d:63

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/tmmb9gTRYuE
CRL Distribution Point: http://crls.pki.goog/gts1d4/73mEGYQCgDc.crl

Check the revocation status for certificate aig-costco.affinity.do

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aig-costco.affinity.do

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aig-costco.affinity.do
thrive.jeff.fitness
widget.simpletexting.com
landing.keymajorcoin.com
patrickjohansen.com
www.derivative.dev
minneapolis.profit.orderprinting.com
www.rustixmanor.com
www.prrtransglobal.com
virginia.profit.orderprinting.com
share.skiin.com
liar.fyi
www.danya.dev
msp.aiaiplay.com
wisconsin.profit.orderprinting.com
www.wellemploy.com
welo-wedding.com
amm-demo.y-okuda.dev
www.abeeralenezi-lawbh.com
portal.gemeinwerk.eu
app.taxhead.de
www.patek.cz
www.justinoh.dev
auth.google.powernettv.com.br
www.automatia.io
nivish.in
covaliu.dev
www.vipisms.com
dtc.affinity.do
unluckyvalidators.com
null418.justinbaldeo.com
toddwseattle.com
www.negociostic.com
pg.meldersoft.de
sachi.dev
www.taxhead.de
www.kingdomstudios.io
www.aushorsetips.com.au
colibriproject.io
www.mstaggs.info
www.patnem.com
www.zebra.fm
simul.vod.gg
bikr.se
11o.ooo
la-teranga.fr
app.moddifi.com
ovn-dispatch.devserver.cc
www.cryptocareers.jobs
ym-app-dev-mock.site-ymobile.net
www.agcharalampos.gr
dongigi.ro
app-stg.site-ymobile.net
kakobotasso.com.br
www.blankly.finance
electromalvinas.com.ar
caduceemedical.ca
jaisonpharma.in
lqtm.net
beta.spacefox.app
member.acuteplus.app
naala.app
spritzhero.app
basilsteiner.ch
devshah.ca
www.caduceemedical.ca
yomi100m.hamajima.co.jp
esgplay.net
shloopnft.io
everlywell.tinia.org
staging.intela.no
www.firstonscene.us
clubs.magic-form.fr
www.wrap.prl.one
nextplate.app
chillmood.club
carsalhaz.com
www.indvstry.app
agroecologiaemrede.neaes.eco.br
mischeapp.bjoernpetersen.net
covid-19.cards
www.snipbits.app
twitdeck.lynlab.co.kr
discover-mx.com
www.zebra.chat
paragemdotripui.com.br
chargemommybooks.com
www.bulletn.co
jumpwirefx.com
www.safetag.app
joshuas.software
keacast.app
www.inddex.fr
www.titanictechnicalservices.com
ava.awellhealth.com
pacificpatientadvocacy.com
corporativo.butaco.com.ar
glumberland.com
piensmash.pien.club
www.codeworks.bg

Other certificates including the domain name affinity.do

(limited to 100 certificates)
affinity.do
comunica.ptvtelecom.net
incapsula.com
www.pathtorecoveryla.com
www.palpiteagora.com.br
incapsula.com
incapsula.com
incapsula.com
www.reyesnicho.com
the-tipping-point.info
admin.gerejaku.net
www.asg.com.do
www.boekdrukken.com
pa.historypath.us
incapsula.com
www.mural21.com
incapsula.com
lasonrisafoods.com
incapsula.com
incapsula.com
www.mydentalcaresunnyvale.com
incapsula.com
affinity.do
lf-droner.dk
www.local-elves.com
incapsula.com
www.asg.com.do
footballprenup.com
www.madridnuevopoceros.es
incapsula.com
mijn-test.toegang.org
app.squadx.online
www.markkrieger.com
www.qurasense.com
*.affinity.do
fergmovinweight.com
admin-stag.halalfood.live
next.clabs.app
affinity.do
loyalio.at
plus.fitkit.mk
admin.canarymail.io
didavie.com
incapsula.com
clubcabbage.xyz
aig-costco.affinity.do
facecam.boo.chat
demo.processshop.com
expertmodels.fr
incapsula.com
www.busico.net
incapsula.com
www.cocanotes.com
incapsula.com
travelarranger365.com
stephen.mooir.im
incapsula.com
budgetina.org
system.affinity.do
dailysale.tmg.28east.co.za
chat.clyde-built.com
support.davesa.com
www.nuro-lab.com
watchlist.stage.veritone.com
incapsula.com
humble.fitness
uxagents.com
incapsula.com
app.crmone.com
go.1sur10.fr
poseperfect.dev
meylertech.ca
aliyah-ist-toll.de
brain.parfaitementweb.fr
fund.hapoel.dev
www.doctor.medikea.co.tz
incapsula.com
incapsula.com
*.affinity.do
www.elproveedor.com.co
incapsula.com
dev-vistaprint.thelevel.ai
metiermoney.com
quazarsoftech.com
incapsula.com
duisport.parklab.app
affinity.do
firebase.wanonet.biz
rafaelverde.eu
incapsula.com
incapsula.com
incapsula.com
app.umbra.stream
hokdb.com
incapsula.com
incapsula.com
belgefest.by
bertoelcon.com
yoloq.app
incapsula.com

Certificate

The complete raw certificate details for aig-costco.affinity.do in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136302973468872189082589304232241365007
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 14:44:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 15:41:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aig-costco.affinity.do'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/tmmb9gTRYuE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1986 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aig-costco.affinity.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrive.jeff.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.simpletexting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.keymajorcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrickjohansen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derivative.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneapolis.profit.orderprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rustixmanor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prrtransglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginia.profit.orderprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.skiin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liar.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danya.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msp.aiaiplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsin.profit.orderprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellemploy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welo-wedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amm-demo.y-okuda.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abeeralenezi-lawbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.gemeinwerk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.taxhead.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patek.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justinoh.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.google.powernettv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automatia.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivish.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covaliu.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vipisms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtc.affinity.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unluckyvalidators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'null418.justinbaldeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toddwseattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.negociostic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.meldersoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachi.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxhead.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingdomstudios.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aushorsetips.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colibriproject.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mstaggs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patnem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zebra.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simul.vod.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikr.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11o.ooo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-teranga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.moddifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovn-dispatch.devserver.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptocareers.jobs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ym-app-dev-mock.site-ymobile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agcharalampos.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dongigi.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-stg.site-ymobile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kakobotasso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blankly.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electromalvinas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caduceemedical.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaisonpharma.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lqtm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.spacefox.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'member.acuteplus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naala.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spritzhero.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basilsteiner.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devshah.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caduceemedical.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yomi100m.hamajima.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shloopnft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everlywell.tinia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.intela.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstonscene.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubs.magic-form.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrap.prl.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextplate.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillmood.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsalhaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indvstry.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agroecologiaemrede.neaes.eco.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mischeapp.bjoernpetersen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid-19.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snipbits.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitdeck.lynlab.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover-mx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zebra.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paragemdotripui.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargemommybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulletn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumpwirefx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safetag.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joshuas.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keacast.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inddex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titanictechnicalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ava.awellhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificpatientadvocacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporativo.butaco.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glumberland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piensmash.pien.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeworks.bg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/73mEGYQCgDc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ae19d0eaa000004030047304502200746ab36dd7c5897c10f488a895a8e46afba5cae9b38ede36d5a69f2049d68b40221009407a4288a6fe53b5a975ce1228454da955480adb572076244bc00bc953c48320076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae19d0eaf0000040300473045022100834ff338cdba7d9df9fa537b82834d87bbb0f118dcd8d3cfe3e02dbe41c6aa5a02201eb3d9463a479e37f991b6a8f78429f33783e0f4ae113628e94cf1b4180146a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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