www.kalewi.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 3d:b5:e9:dc:21:d7:e7:57:10:e7:c8:d4:48:47:43:13 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.kalewi.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3d:b5:e9:dc:21:d7:e7:57:10:e7:c8:d4:48:47:43:13
Serial Number (int): 82027456716382092873323273681461789459
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 09:ec:e9:b0:36:11:7c:5e:d8:d8:e7:3b:bd:8c:1b:42:27:af:57:22
Fingerprint (sha256): 25:3e:11:ea:f4:b1:8b:3a:d8:65:0a:a8:33:f5:76:8f:05:e3:dd:b4:11:ad:dd:c5:c0:d0:0c:a7:ab:69:12:af

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/zhXFbnpqz5Q
CRL Distribution Point: http://crls.pki.goog/gts1d4/JkSj3uoey00.crl

Check the revocation status for certificate www.kalewi.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kalewi.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kalewi.de
pay.c14.money
watumedia.com
wanderingwithwattle.com
hugopretorius.dev
thayes.dev
spjbeauty.com
fredericton.ondagoapp.com
www.blockbrickbreaker.com
devclient.slashyapp.com
epi.fi
therangersfoundation.com
www.vikibell.com
akash.belovance.com
whatskart.com
benjamin.aghaeipour.co.uk
dashboard.vibrosight.ch
yip.institute
gifdraw.studysketch.com
www.goboop.me
virbnb.com
visimago.com
www.softprotectiamediului.ro
medisim.amcsoftware.pe
app.castlereptiles.com
cchrromania.ro
sa-email-builder.kevingermain.com
beta.neuronths.com
www.namai.nl
www.teknique.xyz
memer.wtf
mlube.traware.com
dev.unit.wec360.com
api.keepdoc.io
plat.kitchen
www.vneenz.dev
sync247.net
blog.motobase.jp
www.technoelevate.com
eigenheiminfo.de
www.villagetcg.com
ligenium.com
www.kraphx.com
hangs.me
www.bootspruefung.info
www.amalficoastapartments.it
deeb.com.mx
planen.annaundbrian.de
switchai.nl
api.radinn.com
www.massagemembersettlement.com
www.sync247.net
www.quickiesapp.com
sthlmfast.demo.movello.se
www.greymatterescaperoom.in
dkfw.me
www.midobapps.com
dons.test.eglise-boissiere.fr
cnterracotta.ati.com.vn
onillion.com
pacgen.lis.mobi
auth.businessinsider.co.za
www.wooohstore.com
sevendots.xyz
l.markwick.eu
t-mobile.tapp.online
www.ontheground.io
kabeloleboa.online
slowrunners.gr
weldpro.funkyfresh.no
knesset.run
habithopper.com
www.stdenisakoka.org
www.fs-wear.de
ncmss.org
www.sevendots.xyz
wapp.inzpire.me
www.coding-lab.me
ignitechannel.org
www.carson.lol
app.bsp.online
donnijssen.com
staging.syne.studio
zestec.nocoenergy.co.uk
r.blvd-mtl.com
villacrobatics.gr
makerdays.co.za
loop.conics.xyz
www.medeasy.se
app.solucionesrfid.mx
url.centraltexas.dog
astiltd.com
www.deeshastrawberry.com
foodwiseapp.com
www.timoborer.ch
cafetrespalmas.com
www.everydaymuslim.net
shop.sandrasoft.app
backoffice.lastgamemaster.com
www.web.qma.co.il

Other certificates including the domain name kalewi.de

(limited to 100 certificates)
pricetrends.io
napstjaertgaard.com
www.kalewi.de
dillan.photo
kod.eriksturesson.se
alpha.metisphere.com
write-staging.fromeveryst.com
staging-q500.quickmobilerepair.com
v13.wksp.dev
www.coddy.md
sparsh.app
droptaxivillupuram.com
app.thebridge.love
prasc.org
profileofmigal.dev
profileofmigal.dev
www.unterhaltshelfer.com

Certificate

The complete raw certificate details for www.kalewi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM4zCCC8ugAwIBAgIQPbXp3CHX51cQ58jUSEdDEzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDA0MjQwNTEzNTFaFw0yNDA3MjMw
NjEyMTNaMBgxFjAUBgNVBAMTDXd3dy5rYWxld2kuZGUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCq2zTJ4uANYulcbyxEHaJDwiPfPMQt2foPoTEJAiRQ
cYK/oe7CX1Dw8gheyJnJq36JJC9CEFn3BIdhi5gVa9cO3UrGPUA04oVYORZa+IL3
NZ2F1oo92VjO0Il5w36cCusY+fokeimM8aumgLI2rk4dc3KcUYG1+/Rod8+bfvVj
95StpQ50QEMyVfe2g5zKEguVmeNCHoaV0RX02wZ3PkA9D8XPCfCO+m3ho8kdU9oI
X0AaQDSXhg76qrvsny2+r538Ncux0PO7/MeHJmsXIgNrwLnH5zCHw/aiG0Nzli8u
DgmGcbKkiNj+/Ezjpk6WGrUF0QiQXj0tBslZYPleVVRVAgMBAAGjggn5MIIJ9TAO
BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUIUXCO6xMLOtrT7XnyeLDatG9s8IwHwYDVR0jBBgwFoAUJeIY
DrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilo
dHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC96aFhGYm5wcXo1UTAxBggrBgEF
BQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjCCB5oG
A1UdEQSCB5EwggeNgg13d3cua2FsZXdpLmRlgg1wYXkuYzE0Lm1vbmV5gg13YXR1
bWVkaWEuY29tghd3YW5kZXJpbmd3aXRod2F0dGxlLmNvbYIRaHVnb3ByZXRvcml1
cy5kZXaCCnRoYXllcy5kZXaCDXNwamJlYXV0eS5jb22CGWZyZWRlcmljdG9uLm9u
ZGFnb2FwcC5jb22CGXd3dy5ibG9ja2JyaWNrYnJlYWtlci5jb22CF2RldmNsaWVu
dC5zbGFzaHlhcHAuY29tggZlcGkuZmmCGHRoZXJhbmdlcnNmb3VuZGF0aW9uLmNv
bYIQd3d3LnZpa2liZWxsLmNvbYITYWthc2guYmVsb3ZhbmNlLmNvbYINd2hhdHNr
YXJ0LmNvbYIZYmVuamFtaW4uYWdoYWVpcG91ci5jby51a4IXZGFzaGJvYXJkLnZp
YnJvc2lnaHQuY2iCDXlpcC5pbnN0aXR1dGWCF2dpZmRyYXcuc3R1ZHlza2V0Y2gu
Y29tgg13d3cuZ29ib29wLm1lggp2aXJibmIuY29tggx2aXNpbWFnby5jb22CHHd3
dy5zb2Z0cHJvdGVjdGlhbWVkaXVsdWkucm+CFm1lZGlzaW0uYW1jc29mdHdhcmUu
cGWCFmFwcC5jYXN0bGVyZXB0aWxlcy5jb22CDmNjaHJyb21hbmlhLnJvgiFzYS1l
bWFpbC1idWlsZGVyLmtldmluZ2VybWFpbi5jb22CEmJldGEubmV1cm9udGhzLmNv
bYIMd3d3Lm5hbWFpLm5sghB3d3cudGVrbmlxdWUueHl6ggltZW1lci53dGaCEW1s
dWJlLnRyYXdhcmUuY29tghNkZXYudW5pdC53ZWMzNjAuY29tgg5hcGkua2VlcGRv
Yy5pb4IMcGxhdC5raXRjaGVugg53d3cudm5lZW56LmRldoILc3luYzI0Ny5uZXSC
EGJsb2cubW90b2Jhc2UuanCCFXd3dy50ZWNobm9lbGV2YXRlLmNvbYIQZWlnZW5o
ZWltaW5mby5kZYISd3d3LnZpbGxhZ2V0Y2cuY29tggxsaWdlbml1bS5jb22CDnd3
dy5rcmFwaHguY29tgghoYW5ncy5tZYIWd3d3LmJvb3RzcHJ1ZWZ1bmcuaW5mb4Ic
d3d3LmFtYWxmaWNvYXN0YXBhcnRtZW50cy5pdIILZGVlYi5jb20ubXiCFnBsYW5l
bi5hbm5hdW5kYnJpYW4uZGWCC3N3aXRjaGFpLm5sgg5hcGkucmFkaW5uLmNvbYIf
d3d3Lm1hc3NhZ2VtZW1iZXJzZXR0bGVtZW50LmNvbYIPd3d3LnN5bmMyNDcubmV0
ghN3d3cucXVpY2tpZXNhcHAuY29tghlzdGhsbWZhc3QuZGVtby5tb3ZlbGxvLnNl
ght3d3cuZ3JleW1hdHRlcmVzY2FwZXJvb20uaW6CB2RrZncubWWCEXd3dy5taWRv
YmFwcHMuY29tgh1kb25zLnRlc3QuZWdsaXNlLWJvaXNzaWVyZS5mcoIXY250ZXJy
YWNvdHRhLmF0aS5jb20udm6CDG9uaWxsaW9uLmNvbYIPcGFjZ2VuLmxpcy5tb2Jp
ghphdXRoLmJ1c2luZXNzaW5zaWRlci5jby56YYISd3d3Lndvb29oc3RvcmUuY29t
gg1zZXZlbmRvdHMueHl6gg1sLm1hcmt3aWNrLmV1ghR0LW1vYmlsZS50YXBwLm9u
bGluZYISd3d3Lm9udGhlZ3JvdW5kLmlvghJrYWJlbG9sZWJvYS5vbmxpbmWCDnNs
b3dydW5uZXJzLmdyghV3ZWxkcHJvLmZ1bmt5ZnJlc2gubm+CC2tuZXNzZXQucnVu
gg9oYWJpdGhvcHBlci5jb22CFHd3dy5zdGRlbmlzYWtva2Eub3Jngg53d3cuZnMt
d2Vhci5kZYIJbmNtc3Mub3JnghF3d3cuc2V2ZW5kb3RzLnh5eoIPd2FwcC5pbnpw
aXJlLm1lghF3d3cuY29kaW5nLWxhYi5tZYIRaWduaXRlY2hhbm5lbC5vcmeCDnd3
dy5jYXJzb24ubG9sgg5hcHAuYnNwLm9ubGluZYIOZG9ubmlqc3Nlbi5jb22CE3N0
YWdpbmcuc3luZS5zdHVkaW+CF3plc3RlYy5ub2NvZW5lcmd5LmNvLnVrgg5yLmJs
dmQtbXRsLmNvbYIRdmlsbGFjcm9iYXRpY3MuZ3KCD21ha2VyZGF5cy5jby56YYIP
bG9vcC5jb25pY3MueHl6gg53d3cubWVkZWFzeS5zZYIVYXBwLnNvbHVjaW9uZXNy
ZmlkLm14ghR1cmwuY2VudHJhbHRleGFzLmRvZ4ILYXN0aWx0ZC5jb22CGHd3dy5k
ZWVzaGFzdHJhd2JlcnJ5LmNvbYIPZm9vZHdpc2VhcHAuY29tghB3d3cudGltb2Jv
cmVyLmNoghJjYWZldHJlc3BhbG1hcy5jb22CFnd3dy5ldmVyeWRheW11c2xpbS5u
ZXSCE3Nob3Auc2FuZHJhc29mdC5hcHCCHWJhY2tvZmZpY2UubGFzdGdhbWVtYXN0
ZXIuY29tghF3d3cud2ViLnFtYS5jby5pbDAhBgNVHSAEGjAYMAgGBmeBDAECATAM
BgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5n
b29nL2d0czFkNC9Ka1NqM3VvZXkwMC5jcmwwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY8OvT9JAAAE
AwBIMEYCIQD3sG2zu+zX0rHd+NQ61I+A0wF8rFDac7fC1OtkvJc+bQIhAMNugWJZ
ltic8mRWGqw6CVpjBAIFdzLzHpsHvLJRQ7OdAHYASLDja9qmRzQP5WoC+p0w6xxS
ActW3SyB2bu/qznYhHMAAAGPDr0/dAAABAMARzBFAiEA1nvMtKOa90CjDPYtWyH/
bvhEmOdAUcB2QId2zeLpKscCIG4vSMUUhhvZY5sGg+UbJENo6F46G970CnkpkXXr
ylh/MA0GCSqGSIb3DQEBCwUAA4IBAQChk5tFkYgqyBQyf6rbIQDqviiKs/wTORtF
DeLfQJxvTb7WoDrXihMn7TIaAvB0RpSR6v8+cLcjtCKj1r4Ah7wxO7u/1JX1Pkf3
XHKGML+bcWMXLtlViJykivcyzq9RDVCP5S+CUOqXT0jlUqFpxL1ocaninKDj7uaL
F02H6rvFv3PROkl4r1JSo5JxeP9Ao2K7e1L2sLm+5Ert8aAN7lNAtGejnr4oRa7b
XI4/h+RjzZxeLdlrASZ1saT8kNi4iJgj9SlDyNA6jEi6pA8oQE33AEJa8MHrLve5
STWM9F+WD/t3W33xY52E/IwJxftVCjYt7PH4Pf5bVmumYVezGTW+
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82027456716382092873323273681461789459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 05:13:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 06:12:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kalewi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/zhXFbnpqz5Q'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1937 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalewi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.c14.money'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watumedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanderingwithwattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugopretorius.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thayes.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spjbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredericton.ondagoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockbrickbreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devclient.slashyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therangersfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikibell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akash.belovance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatskart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjamin.aghaeipour.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.vibrosight.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yip.institute'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifdraw.studysketch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goboop.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virbnb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visimago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softprotectiamediului.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medisim.amcsoftware.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.castlereptiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cchrromania.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-email-builder.kevingermain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.neuronths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namai.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknique.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memer.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlube.traware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.unit.wec360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.keepdoc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plat.kitchen'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vneenz.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.motobase.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technoelevate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eigenheiminfo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagetcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ligenium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraphx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangs.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bootspruefung.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amalficoastapartments.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeb.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planen.annaundbrian.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchai.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.radinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massagemembersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sync247.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quickiesapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthlmfast.demo.movello.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greymatterescaperoom.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkfw.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midobapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dons.test.eglise-boissiere.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnterracotta.ati.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onillion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacgen.lis.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.businessinsider.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wooohstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevendots.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.markwick.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobile.tapp.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ontheground.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabeloleboa.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slowrunners.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weldpro.funkyfresh.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knesset.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habithopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stdenisakoka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fs-wear.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncmss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sevendots.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wapp.inzpire.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coding-lab.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignitechannel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carson.lol'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bsp.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnijssen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.syne.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zestec.nocoenergy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.blvd-mtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villacrobatics.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makerdays.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loop.conics.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medeasy.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.solucionesrfid.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url.centraltexas.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astiltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deeshastrawberry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodwiseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timoborer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafetrespalmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everydaymuslim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sandrasoft.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.lastgamemaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web.qma.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/JkSj3uoey00.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f0ebd3f490000040300483046022100f7b06db3bbecd7d2b1ddf8d43ad48f80d3017cac50da73b7c2d4eb64bc973e6d022100c36e81625996d89cf264561aac3a095a630402057732f31e9b07bcb25143b39d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f0ebd3f740000040300473045022100d67bccb4a39af740a30cf62d5b21ff6ef84498e74051c076408776cde2e92ac702206e2f48c514861bd9639b0683e51b244368e85e3a1bdef40a79299175ebca587f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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