app.theotokos.fr

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number fc:af:b0:31:c2:e0:29:13:0a:ba:66:ec:1a:cb:18:2e was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.theotokos.fr

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fc:af:b0:31:c2:e0:29:13:0a:ba:66:ec:1a:cb:18:2e
Serial Number (int): 335877680534623685956920971622112499758
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 0d:4b:0e:10:98:6d:a4:42:15:e8:9c:94:a7:ac:c0:42:41:d8:58:c6
Fingerprint (sha256): 26:d2:8e:25:fe:5e:82:68:c7:5c:68:0b:0f:83:e5:ea:fb:61:75:a8:02:ef:11:3f:ff:79:68:5e:f4:bb:48:c8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/3JSSszu2Xuk
CRL Distribution Point: http://crls.pki.goog/gts1d4/EST6rpoTEPY.crl

Check the revocation status for certificate app.theotokos.fr

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.theotokos.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.theotokos.fr
api.live.b-reel.com
www.mehraz.studio
lgtm.hatelabo.jp
staging.mysukarela.com
avanteq.io
www.fjgeriksson.se
percussion.ninja
vocacionarte.net
tkombuis.be
members.giv.link
intersoftone.net
di2pra.fr
aegle.consolidata.one
www.devtaxes.com
adnan.zubairmd.com
www.getbap.com
hclivetest.your.church
bozovapeynir.com
playground.eventmix.live
yogurtfactorypolygone.order.pulp.eu
www.mamagallinasitters.com
www.chidalusoftware.com
www.myvrs.io
fb.12bay.vn
universe.staging.roboflow.com
kotob.ma
repeatoffense.site
www.memeverse.money
www.supertalent.io
fund.zebull.in
www.stopandbook.com
dist.craftsake.com
zorychta.xyz
firstchoicefoundation.org.uk
pagos.mision.education
www.fotokurs-niedersachsen.de
www.dvereprum-cl.cz
restoran-tema-2.ultof.com
dev.jdfmumbai.org
artmemo.caric.jp
app.octobot.pro
mordor.turnosweb.app
hemotiv.com
highondata.com
onceuponatimer.com
www.payasyougohealthcare.com
www.rocklandinstantcopy.net
tiktok.mega.lol
datajutsu.com.mx
d2works.hu
play.walkthru.ai
egcseattle.com
console.diarkis.io
deqspills.ugrc.utah.gov
scsc.globalgoalsvolunteering.org
www.aalders.xyz
www.streetjokers.gr
www.bengueladining.com
drevostavbybruno.cz
marilyncordova.com
www.highondata.com
stand-up.be
www.exposportmedia.net
admin.citybox.tec.br
dimensionhospitality.visitingmedia.com
hub.hoxbycollective.com
app.triplings.com
dev01.app2.wakuas.com
halmsugror.se
atomia-cert.3dcloud.io
www.jordinebot.me
www.dev.crecheferranddemissol.com
explorer.charged.fi
www.nnc-unesco-ihp.com
incontact.co.in
wfodelivery.it
fototocka.myphotopal.shop
admin.woki.ar
klang-heimlich.me
whitecalendar.com
contentinventory.net
pokemon1.arenakouryaku.com
cai.hxmspace.io
www.veriforever.com
retinset.com
www.digitalcontriver.com
demo.api.lievel.jp
solarspot.ecoprojektant.pl
www.bcregistry.gov.bc.ca
go.athletic.net
hdocto.ma
afterparty.mertes-lieu.de
evafadrique.com
s3ms8.poda.incentable.com
blog.ali-m.net
ever-fit-up.online
www.imobiliariaclassinet.com.br
www.neurohealth.uk
www.riseup.lu

Other certificates including the domain name theotokos.fr

(limited to 100 certificates)
deisis03.theotokos.fr
www.theotokos.fr
withbook.club
www.cylium.app
deisis03.theotokos.fr
theotokos.be
69games-uat-backoffice.cbdata.cz
app.theotokos.fr
deisis03.theotokos.fr
deisis03.theotokos.fr
theotokos.be
theotokos.be
theotokos.be
deisis03.theotokos.fr
deisis03.theotokos.fr
www.ashandamri.com
theotokos.be
viagrarecept.se
kds.pedefacil.com
theotokos.be
theotokos.be
www.theotokos.fr
www.theotokos.fr
deisis03.theotokos.fr
theotokos.be
www.theotokos.fr
deisis03.theotokos.fr
www.pm-dash.online
www.theotokos.fr
theotokos.be
www.theotokos.fr
www.theotokos.fr
deisis03.theotokos.fr
deisis03.theotokos.fr
deisis03.theotokos.fr
www.theotokos.fr
deisis03.theotokos.fr
deisis03.theotokos.fr
www.theotokos.fr
mesbro-refurbished.mesbro.in
theotokos.be
deisis03.theotokos.fr
theotokos.be
www.theotokos.fr
www.theotokos.fr
www.theotokos.fr
www.theotokos.fr
www.theotokos.fr
theotokos.be
mywnetwork.com
deisis03.theotokos.fr
www.fimbed.com
deisis03.theotokos.fr
theotokos.be
www.theotokos.fr
group-match.com
streamer.visit2-0.com
gango.app
theotokos.be
theotokos.be
www.theotokos.fr
www.2mamina.co.za
ostya.hardsoftcomputers.com.co

Certificate

The complete raw certificate details for app.theotokos.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335877680534623685956920971622112499758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 09:34:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 10:31:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.theotokos.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/3JSSszu2Xuk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2089 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.theotokos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.live.b-reel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mehraz.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgtm.hatelabo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mysukarela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avanteq.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fjgeriksson.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'percussion.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocacionarte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkombuis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.giv.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intersoftone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'di2pra.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegle.consolidata.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devtaxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adnan.zubairmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getbap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hclivetest.your.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bozovapeynir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playground.eventmix.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogurtfactorypolygone.order.pulp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamagallinasitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chidalusoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvrs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.12bay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universe.staging.roboflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kotob.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repeatoffense.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memeverse.money'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supertalent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fund.zebull.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopandbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dist.craftsake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zorychta.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstchoicefoundation.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagos.mision.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fotokurs-niedersachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dvereprum-cl.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restoran-tema-2.ultof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.jdfmumbai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artmemo.caric.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.octobot.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mordor.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemotiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highondata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onceuponatimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.payasyougohealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklandinstantcopy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktok.mega.lol'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datajutsu.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd2works.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.walkthru.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egcseattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.diarkis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deqspills.ugrc.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scsc.globalgoalsvolunteering.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aalders.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.streetjokers.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bengueladining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drevostavbybruno.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marilyncordova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highondata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stand-up.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exposportmedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.citybox.tec.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimensionhospitality.visitingmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.hoxbycollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.triplings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev01.app2.wakuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halmsugror.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomia-cert.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jordinebot.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.crecheferranddemissol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorer.charged.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nnc-unesco-ihp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incontact.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfodelivery.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fototocka.myphotopal.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.woki.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klang-heimlich.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitecalendar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentinventory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemon1.arenakouryaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cai.hxmspace.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veriforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retinset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalcontriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.api.lievel.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarspot.ecoprojektant.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcregistry.gov.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.athletic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdocto.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterparty.mertes-lieu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evafadrique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3ms8.poda.incentable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ali-m.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ever-fit-up.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imobiliariaclassinet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neurohealth.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riseup.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/EST6rpoTEPY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b6666326b00000403004630440220619a4ab43babe42048bc3879bfe929aa02925e43fc0167f672dfa837d6c11dfe0220680c0d6f684ea6537f21ae571a22bc186e1a65e55e96ae184482f5c103974f3e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b66663286000004030047304502200708ce35b68ff61e97f77158d8316d17d5c9c227eba056833f6c6c7d3831cb0e022100cd1c1277261254737ee65e60d8e0db7d34abd3e321b1415a7b2aa388f52d9746
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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