www.gestmamma.it

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ed:87:6b:1c:43:e8:17:ac:10:f8:4a:55:d7:58:45:66 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.gestmamma.it

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ed:87:6b:1c:43:e8:17:ac:10:f8:4a:55:d7:58:45:66
Serial Number (int): 315730167534159482972863314550356198758
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 02:7b:4b:82:58:46:da:91:6b:e7:8c:8e:d4:f1:54:8d:a4:ac:cf:f5
Fingerprint (sha256): 25:06:e1:50:15:4c:34:b4:38:de:15:38:d1:dd:d9:84:d4:28:e5:28:10:22:66:27:29:b7:31:47:e6:bd:3a:e3

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/4Gc4ONuB95A
CRL Distribution Point: http://crls.pki.goog/gts1d4/kJdFfOPXKN8.crl

Check the revocation status for certificate www.gestmamma.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gestmamma.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gestmamma.it
nextevol.tech
similarweb.growthspace.us
app-dev.nannyadvisor.it
www.hive-korea.com
qweex.app
www.cerrajeria.uy
global.rescue-1.co.il
scrippet.app
www.konect.to
www.mbmenus.app
blushbyhawa.estore.business
duskxdawn.sg
shriradheythokbazaar.estore.business
thendralmaligai.estore.business
www.resvi.org
x.scoop.tech
weddingmusic.app
digitalmenu.vip
www.tildeanalytics.co.uk
mbmenus.app
dashboard.savvyinvest.us
www.feedback.place
connect-staging.timeless.investments
xev.kbi.works
link.saucemedia.net
funnystudy.app
digitalsoda.app
endoassist.com.br
data.truebpm.vn
www.walmartmyhealthjourney.org
ancoraflats.com.br
www.anastasya.ro
wait.andax.tech
kanto.snowday.club
links.penmark.jp
andesbit.com
radio.primaverasound.app
degendia.com
import.fenixwebserver.com
buildingmastery.com
whatch.website
oauth.oversoul.io
www.fawan.space
inv.mcom.app
laurahannawhite.com
veggiekoi.corntech.com.mx
app.gobertha.com
www.hoopstics.com
dev.app.epihelper.com
www.donazizafood.com.br
atozcars-rjy.com
www.calcularfretecorreios.com
www.laurahannawhite.com
www.missionmatters.org.au
link.scontrinoweb.it
genotrip.com
theflyingllamagroup.com
hifixinterio.com
kombit-test.virego.app
gebni.com
www.parkpayusa.com
www.kshitijsrv.com
flutter-hub.com
www.greetingcardeditor.com
order-mst.mpapps.app
client.enezatelecom.com
tic-tac.kulakovdmitr.com
davidjones.dev
games.kulakovdmitr.com
asilat.org
marandroptaxi.com
links.profit.com
admin.bared.com.au
seppe.dev
www.fleur.dev
vmarksolutions.com
purpletoko.com
loans.buja101.com
whatsnext.mayer-studios.com
app.preprod.paymytable.com
turkiyejava.community
opesi.fi
www.correoexpressgt.com
survey.cardiflab.com
yupidevshop.com
test-admin.roobixapp.com
codedrops.io
auth.wookein.com
fixy.ge
grafenschwimmteam.de
mikeandkellycrowe.com
www.alfaizanulquran.com
aeinc.io
richardfoster.me
link-po-tat-sc.jec-digital.com
embrace-tech.de
link.gavl.com
hello.iamharish.dev
aaim.in

Other certificates including the domain name gestmamma.it

(limited to 100 certificates)
browar-balans.pl
bkr.kartindo.com.br
admin.jhumkaplanet.com
www.gestmamma.it
cp-nm2017.ryugin.jp
www.unipathapp.com
www.tridenthse.co.uk
dev.sway.fund
toralles.uk
www.dishes-app.com
www.ics-container.com
guitarchordshape.com
youth-recruit.com
privat.tmr.se
alisabethrogers.com
t.cmpn.co
staging-sic.k-9apps.com
vsmontemigliore.it
t.cmpn.co
www.birapt.com
womenwired.com
poweredfs.com
campaign.ebanqo.com
www.famecapital.com.au
www.mycro.page
scsw.io
vsmontemigliore.it
api.hoopay.com.br
dev.sway.fund
www.alfamous.ca

Certificate

The complete raw certificate details for www.gestmamma.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315730167534159482972863314550356198758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 17:02:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 18:01:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gestmamma.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/4Gc4ONuB95A'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestmamma.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextevol.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'similarweb.growthspace.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev.nannyadvisor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hive-korea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qweex.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerrajeria.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.rescue-1.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrippet.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konect.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbmenus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blushbyhawa.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duskxdawn.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shriradheythokbazaar.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thendralmaligai.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resvi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x.scoop.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingmusic.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmenu.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tildeanalytics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbmenus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.savvyinvest.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feedback.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-staging.timeless.investments'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xev.kbi.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.saucemedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funnystudy.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalsoda.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endoassist.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.truebpm.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walmartmyhealthjourney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancoraflats.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anastasya.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.andax.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanto.snowday.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.penmark.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andesbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio.primaverasound.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degendia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.fenixwebserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingmastery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatch.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.oversoul.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fawan.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inv.mcom.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurahannawhite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veggiekoi.corntech.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gobertha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoopstics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.app.epihelper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donazizafood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atozcars-rjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calcularfretecorreios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurahannawhite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionmatters.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.scontrinoweb.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genotrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theflyingllamagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hifixinterio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kombit-test.virego.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gebni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkpayusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kshitijsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutter-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greetingcardeditor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order-mst.mpapps.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.enezatelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tic-tac.kulakovdmitr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidjones.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.kulakovdmitr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asilat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marandroptaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.profit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bared.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seppe.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fleur.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmarksolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purpletoko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.buja101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext.mayer-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.preprod.paymytable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkiyejava.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opesi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correoexpressgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.cardiflab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yupidevshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-admin.roobixapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codedrops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.wookein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixy.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafenschwimmteam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeandkellycrowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaizanulquran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeinc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richardfoster.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-po-tat-sc.jec-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embrace-tech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.gavl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.iamharish.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaim.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/kJdFfOPXKN8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d1dbd84c80000040300473045022100816cd98587fb82be8b563af1f948b1b5b27de9b235275ad52e245e579fb96f1e02207755cf0c62f33728b838daac9d2aedf1e8163cae9f5df5ffb0248f029223b14c00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1dbd84f0000004030047304502205af6bfd0ed1f32db94a9d35fa470d0c1be5f7c797f9f4b8004edcc384d23b6a8022100ee6c87d091c998686d3779ecbcb60d02cb4382af5bda2372e56b77ac67be38b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006e85c8d6d3abfa11c75204b03e1ea1c71c62fb9578c12f34a043c3f6f6801796f709e0a04cf5e11190639212d18138b897da5b09c8ab09e016acf118f4ac171dfc4ec70aa0bc2b8f4a6b0ef8fffbdc4afcf0f654051f72b17d008ea02fd8505166c96af58d04c7bd635f992cd3cf89c39a04e4548f36a733c39af090055b1b7bca0916e08c6824313c56b36083591ff6f2c87cad58f3c9e7cdd35ecfdd7b5f44f5db3e77bb4585d8191ac5544cce59e1975b2e2447cab0c3a239bd815e1ceb8671865f7bd06a3b4812a4d72793c127e3a3a49023acdff21088f6df5e8037d884c77e7ddfd6e43131deee6649ae5d0d62357bbd98591ac965c6776ed9ff3f9574