app.sophya.world

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ad:aa:12:a0:f4:6d:3a:94:0a:7c:47:e9:cc:8b:73:f2 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.sophya.world

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ad:aa:12:a0:f4:6d:3a:94:0a:7c:47:e9:cc:8b:73:f2
Serial Number (int): 230839511572266626660446330426323858418
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 61:77:c7:f5:a5:e4:02:1b:c9:0c:9f:62:43:49:5a:2f:8d:75:ee:47
Fingerprint (sha256): 24:a7:94:5f:2e:4e:32:ec:8c:b8:53:cf:3f:3e:4d:c3:21:5d:3f:75:03:ec:9f:12:2d:e3:4a:5f:9d:23:84:61

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/NkTba9nnoPU
CRL Distribution Point: http://crls.pki.goog/gts1d4/OFJedzixRUk.crl

Check the revocation status for certificate app.sophya.world

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.sophya.world

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.sophya.world
www.mommahubbs.com
package-abe.kiinnovator.com
hexcheck.com
www.mysteryfour.com
www.levelupnft.io
mvi1.11yearsafter11.nl
diegocoy.com
www.prashantmishra.pro
links.notestech.co.za
vanban.chinhquyenso.vn
sg-sai.com
getawayfrommyfruit.com
www.loganwes.com
events.habitatnycwc.org
www.chcentretirur.org
sahasinfo.com
app.volter.io
central.intelino.com
app.jiobit.com
test-api.cryptoraiders.xyz
www.insituapp.com.co
www.2na8.com
www.nothingburgerbook.com
us.codersinhoods.dev
mint.portchie-nft.com
app-prod.forextb.com
booking.sanimalis.app
nidhisoley.com
staging.horsebee.com
donate.stbarnabas-hospice.org.uk
welcome.stg.alpianservices.com
buildingcheckconsultants.com.au
ember.farm
smartr.com.mx
live.torriani.com.br
equestrian.digital
www.ajois.com
m.touchplan.io
app.getcupofsugar.com
blog-old.srikavin.me
usa.watzick.com
staging.schemes.sg
devaccounts.stem-council.com
cisco-staging-ideacloud.forgedx.com
go.go-pei.com
greensdiary.jp
links.caveo.ch
captrader.optionmaster.optionenhandeln.de
afa-ngo.org
krapeshnaik.com
evolutionwellness-sg.webplayer.fit
midas-sms.jp
www.g-immobilier.com
www.lendmo.com
app.zingoy.com
www.brilliantdrivingacademy.co.nz
www.housemixer.com
s.kc5m.com
sell.bogustracker.com
www.tatext.com
hosting.heyyou.it
oxed.com.ar
www.giorgioatanasov.com
quike.app
customer.clearquote.io
shoku.nargil.net
michael-quinlan.net
www.criski.ro
tracking.crumbs-benchmark.sertook.com
app.evolveacademyusa.com
www.quidvid.com
www.purpleeaglescamps.com
estron-qa.mobilenxt.app
www.emdrconnect.app
www.thefold.app
cname.crumbs-benchmark.sertook.com
shreeva.in
abs.com.al
southafrica.jual.club
resident.fetch.st
aspeppc.com
zdex.cc
test.tenant.woonig.app
users.digitalvenue.app
www.miranda.works
staging.beework.app
www.avianto.com
wsn.pw
coronavirus.againwewander.com
yonekul.co.za
epiphi.com
copilot-s3.onesky.ai
sales.axsar.com
destinynorge.no
portal.easyar.app
david-ochoa.com
atlantakidstherapy.com
lowes.kitchendesigner.3dcloud.com
metaseek.cloud

Other certificates including the domain name sophya.world

(limited to 100 certificates)
www.limeyer.co
bargybud.com
www.ellensofia.com
sophya.world
app.sophya.world
spotify.vbi.dev
sophya.world
sophya.world
www.viper.social
seagullbaygull.com
nozzsalgo.com
www.respondaaqui.com.br
app.blueprint.beauty
churchdiary.in
www.somewheretorun.app
sowork.com
sophya.world
www.fintlabs.no
otodeger.ezelpetrol.com
app.gyfthint.com
h2ocoach.ca
gutgebunden.ch
sophya.world
bodytrace.storyhealth.ai
www.salem-droptaxi.in
www.fatreductiontreatment.ca
dfs.dimodigital.lk
www.jfcboston.co.uk
admin-test.gemsotec.com
www.superationbn.org

Certificate

The complete raw certificate details for app.sophya.world in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINeDCCDGCgAwIBAgIRAK2qEqD0bTqUCnxH6cyLc/IwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMxMDEwMDA0MjQ4WhcNMjQwMTA4
MDEzOTMzWjAbMRkwFwYDVQQDExBhcHAuc29waHlhLndvcmxkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2iQ8Ij3zzELdn6D6Ex
CQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvXDt1Kxj1ANOKFWDkW
WviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5OHXNynFGBtfv0aHfP
m371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5APQ/Fzwnwjvpt4aPJ
HVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyIDa8C5x+cwh8P2ohtD
c5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVUVQIDAQABo4IKijCC
CoYwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFCFFwjusTCzra0+158niw2rRvbPCMB8GA1UdIwQYMBaA
FCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcw
AYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvTmtUYmE5bm5vUFUwMQYI
KwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5kZXIw
gggqBgNVHREEggghMIIIHYIQYXBwLnNvcGh5YS53b3JsZIISd3d3Lm1vbW1haHVi
YnMuY29tghtwYWNrYWdlLWFiZS5raWlubm92YXRvci5jb22CDGhleGNoZWNrLmNv
bYITd3d3Lm15c3Rlcnlmb3VyLmNvbYIRd3d3LmxldmVsdXBuZnQuaW+CFm12aTEu
MTF5ZWFyc2FmdGVyMTEubmyCDGRpZWdvY295LmNvbYIWd3d3LnByYXNoYW50bWlz
aHJhLnByb4IVbGlua3Mubm90ZXN0ZWNoLmNvLnphghZ2YW5iYW4uY2hpbmhxdXll
bnNvLnZuggpzZy1zYWkuY29tghZnZXRhd2F5ZnJvbW15ZnJ1aXQuY29tghB3d3cu
bG9nYW53ZXMuY29tghdldmVudHMuaGFiaXRhdG55Y3djLm9yZ4IVd3d3LmNoY2Vu
dHJldGlydXIub3Jngg1zYWhhc2luZm8uY29tgg1hcHAudm9sdGVyLmlvghRjZW50
cmFsLmludGVsaW5vLmNvbYIOYXBwLmppb2JpdC5jb22CGnRlc3QtYXBpLmNyeXB0
b3JhaWRlcnMueHl6ghR3d3cuaW5zaXR1YXBwLmNvbS5jb4IMd3d3LjJuYTguY29t
ghl3d3cubm90aGluZ2J1cmdlcmJvb2suY29tghR1cy5jb2RlcnNpbmhvb2RzLmRl
doIVbWludC5wb3J0Y2hpZS1uZnQuY29tghRhcHAtcHJvZC5mb3JleHRiLmNvbYIV
Ym9va2luZy5zYW5pbWFsaXMuYXBwgg5uaWRoaXNvbGV5LmNvbYIUc3RhZ2luZy5o
b3JzZWJlZS5jb22CIGRvbmF0ZS5zdGJhcm5hYmFzLWhvc3BpY2Uub3JnLnVrgh53
ZWxjb21lLnN0Zy5hbHBpYW5zZXJ2aWNlcy5jb22CH2J1aWxkaW5nY2hlY2tjb25z
dWx0YW50cy5jb20uYXWCCmVtYmVyLmZhcm2CDXNtYXJ0ci5jb20ubXiCFGxpdmUu
dG9ycmlhbmkuY29tLmJyghJlcXVlc3RyaWFuLmRpZ2l0YWyCDXd3dy5ham9pcy5j
b22CDm0udG91Y2hwbGFuLmlvghVhcHAuZ2V0Y3Vwb2ZzdWdhci5jb22CFGJsb2ct
b2xkLnNyaWthdmluLm1lgg91c2Eud2F0emljay5jb22CEnN0YWdpbmcuc2NoZW1l
cy5zZ4IcZGV2YWNjb3VudHMuc3RlbS1jb3VuY2lsLmNvbYIjY2lzY28tc3RhZ2lu
Zy1pZGVhY2xvdWQuZm9yZ2VkeC5jb22CDWdvLmdvLXBlaS5jb22CDmdyZWVuc2Rp
YXJ5Lmpwgg5saW5rcy5jYXZlby5jaIIpY2FwdHJhZGVyLm9wdGlvbm1hc3Rlci5v
cHRpb25lbmhhbmRlbG4uZGWCC2FmYS1uZ28ub3Jngg9rcmFwZXNobmFpay5jb22C
ImV2b2x1dGlvbndlbGxuZXNzLXNnLndlYnBsYXllci5maXSCDG1pZGFzLXNtcy5q
cIIUd3d3LmctaW1tb2JpbGllci5jb22CDnd3dy5sZW5kbW8uY29tgg5hcHAuemlu
Z295LmNvbYIhd3d3LmJyaWxsaWFudGRyaXZpbmdhY2FkZW15LmNvLm56ghJ3d3cu
aG91c2VtaXhlci5jb22CCnMua2M1bS5jb22CFXNlbGwuYm9ndXN0cmFja2VyLmNv
bYIOd3d3LnRhdGV4dC5jb22CEWhvc3RpbmcuaGV5eW91Lml0ggtveGVkLmNvbS5h
coIXd3d3Lmdpb3JnaW9hdGFuYXNvdi5jb22CCXF1aWtlLmFwcIIWY3VzdG9tZXIu
Y2xlYXJxdW90ZS5pb4IQc2hva3UubmFyZ2lsLm5ldIITbWljaGFlbC1xdWlubGFu
Lm5ldIINd3d3LmNyaXNraS5yb4IldHJhY2tpbmcuY3J1bWJzLWJlbmNobWFyay5z
ZXJ0b29rLmNvbYIYYXBwLmV2b2x2ZWFjYWRlbXl1c2EuY29tgg93d3cucXVpZHZp
ZC5jb22CGXd3dy5wdXJwbGVlYWdsZXNjYW1wcy5jb22CF2VzdHJvbi1xYS5tb2Jp
bGVueHQuYXBwghN3d3cuZW1kcmNvbm5lY3QuYXBwgg93d3cudGhlZm9sZC5hcHCC
ImNuYW1lLmNydW1icy1iZW5jaG1hcmsuc2VydG9vay5jb22CCnNocmVldmEuaW6C
CmFicy5jb20uYWyCFXNvdXRoYWZyaWNhLmp1YWwuY2x1YoIRcmVzaWRlbnQuZmV0
Y2guc3SCC2FzcGVwcGMuY29tggd6ZGV4LmNjghZ0ZXN0LnRlbmFudC53b29uaWcu
YXBwghZ1c2Vycy5kaWdpdGFsdmVudWUuYXBwghF3d3cubWlyYW5kYS53b3Jrc4IT
c3RhZ2luZy5iZWV3b3JrLmFwcIIPd3d3LmF2aWFudG8uY29tggZ3c24ucHeCHWNv
cm9uYXZpcnVzLmFnYWlud2V3YW5kZXIuY29tgg15b25la3VsLmNvLnphggplcGlw
aGkuY29tghRjb3BpbG90LXMzLm9uZXNreS5haYIPc2FsZXMuYXhzYXIuY29tgg9k
ZXN0aW55bm9yZ2Uubm+CEXBvcnRhbC5lYXN5YXIuYXBwgg9kYXZpZC1vY2hvYS5j
b22CFmF0bGFudGFraWRzdGhlcmFweS5jb22CIWxvd2VzLmtpdGNoZW5kZXNpZ25l
ci4zZGNsb3VkLmNvbYIObWV0YXNlZWsuY2xvdWQwIQYDVR0gBBowGDAIBgZngQwB
AgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5w
a2kuZ29vZy9ndHMxZDQvT0ZKZWR6aXhSVWsuY3JsMIIBBgYKKwYBBAHWeQIEAgSB
9wSB9ADyAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLF0BF
dwAABAMASDBGAiEA+xhM+DgEJWDBOC3VXEZrQ5oHO2sdgi5+irzp8Ecs8NkCIQCP
baODpgThVGmZLa4QKWHnPnpP6SsmdT6Pu8DdeJCrPQB3ANq2v2s/tbYin5vCu1xr
6HCRcWy7UYSFNL2kPTBI1/urAAABixdARokAAAQDAEgwRgIhAKrGVVBh6096TXA4
lDdItgJ+Nt3MZqduklarR0hupnM+AiEAkpoEquM1vOVufcoYetvX+d2Y5AqJJTCz
edZ+dYPdnWMwDQYJKoZIhvcNAQELBQADggEBAFI2HXoyhHOvyVV3eyBbyq+NmlkD
LftokOfsCWyutWtSYpvDqkO9QM7DOU+HPK4mTQVLNyEFXO2/XvoXMsxmqOMqfb4G
PtCmfFACo5pygHbI6xT6tywHHC3MOC5wtQ7BSKgl2BsM4Z+9DmGAN5eoqJh0gk6g
ih27XdBHP34dZL0rZqtTPX6n7pAgr8+eYxVooKGbZTOLuHMFLKouKv69uJqki8mv
fJb/tOEno9jTBSSm4JmHzj4tHT+K6POBx8mokoeDg3ZMfPRS+tAoxhmCxegRP1vf
Ku/LYwiISPwcNyN1tcg98nxMPyaG16AKTnXW4FyGGXLUW+WKwh6w4Xr8f1o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 230839511572266626660446330426323858418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 00:42:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 01:39:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.sophya.world'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/NkTba9nnoPU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2081 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sophya.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mommahubbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'package-abe.kiinnovator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysteryfour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levelupnft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvi1.11yearsafter11.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegocoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prashantmishra.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.notestech.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanban.chinhquyenso.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg-sai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getawayfrommyfruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loganwes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.habitatnycwc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chcentretirur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahasinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.volter.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.intelino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.jiobit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-api.cryptoraiders.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insituapp.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2na8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nothingburgerbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.codersinhoods.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mint.portchie-nft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-prod.forextb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.sanimalis.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nidhisoley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.horsebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.stbarnabas-hospice.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.stg.alpianservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingcheckconsultants.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ember.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartr.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.torriani.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equestrian.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.touchplan.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.getcupofsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog-old.srikavin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.watzick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.schemes.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaccounts.stem-council.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisco-staging-ideacloud.forgedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.go-pei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greensdiary.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.caveo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captrader.optionmaster.optionenhandeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afa-ngo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krapeshnaik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evolutionwellness-sg.webplayer.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midas-sms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.g-immobilier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lendmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.zingoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brilliantdrivingacademy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housemixer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kc5m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sell.bogustracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tatext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.heyyou.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxed.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giorgioatanasov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quike.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.clearquote.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoku.nargil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michael-quinlan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.criski.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.crumbs-benchmark.sertook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.evolveacademyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quidvid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purpleeaglescamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estron-qa.mobilenxt.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emdrconnect.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefold.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cname.crumbs-benchmark.sertook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shreeva.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abs.com.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southafrica.jual.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resident.fetch.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspeppc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdex.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.tenant.woonig.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.digitalvenue.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miranda.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.beework.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avianto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsn.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.againwewander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yonekul.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copilot-s3.onesky.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.axsar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinynorge.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.easyar.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'david-ochoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantakidstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowes.kitchendesigner.3dcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaseek.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/OFJedzixRUk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b174045770000040300483046022100fb184cf838042560c1382dd55c466b439a073b6b1d822e7e8abce9f0472cf0d90221008f6da383a604e15469992dae102961e73e7a4fe92b26753e8fbbc0dd7890ab3d007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b174046890000040300483046022100aac6555061eb4f7a4d7038943748b6027e36ddcc66a76e9256ab47486ea6733e022100929a04aae335bce56e7dca187adbd7f9dd98e40a892530b379d67e7583dd9d63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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