app.calm-investing.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 52:40:62:bb:3a:88:9e:ac:09:12:a2:a9:58:1d:73:f1 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.calm-investing.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 52:40:62:bb:3a:88:9e:ac:09:12:a2:a9:58:1d:73:f1
Serial Number (int): 109331005163232172365974448911320708081
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 3f:a3:c5:12:89:c0:6a:66:3e:64:20:91:72:3b:a0:a5:fe:52:50:40
Fingerprint (sha256): 26:ef:28:5f:17:0f:d9:ff:de:69:e9:7e:f1:06:25:42:16:61:62:a2:00:24:6b:73:d4:e9:dd:ea:9b:16:98:f8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/CCMwrWXimw4
CRL Distribution Point: http://crls.pki.goog/gts1d4/bT8Xij6eRHU.crl

Check the revocation status for certificate app.calm-investing.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.calm-investing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.calm-investing.com
optimal-klima.hu
nhood-app.limmia.com
mtimer.maensystems.com
vvassociates.org.in
firebase-jan.247grad.de
kupan.drilldown.online
playside.sogafit.net
greentakaritas.hu
eylamandmarusa.info
www.phillyup.online
www.ocafe.com.ua
sushibay.ae
app.schaltschrankbau-wied.de
vento.clau.io
villaclara.flexi.com.ar
www.keyy-expertise-dev.mwinisoft.fr
oceanview.uz
www.andeinerseite.video
cafenook.co.uk
parkstonemotors.co.uk
centroemmabalaguerdevallejo.edu.do
dev.mable.co.uk
ecn.uz
servicio.restaurantes.eficiente.co
app.scanwine.io
academy.weblive.ng
acuplace.acus.eu
fanfundings.se
share.test.ultronar.com
invites.development.payd.com
www.parkstonemotors.co.uk
www.christopherflores.info
www.levendigdsgn.nl
www.linfieldstables.co.uk
www.iviworkout.site
renewcomputer.it
cross-harbour.sylvain.hk
www.webura.se
www.artbyeva.co.uk
donate.grandmasters.online
multimediabussum.nl
www.valentinoimoveis.com.br
corp.danno.nz
www.stolencar.pt
2023cisaconf.liveevent.co.za
www.riverwood-consultancy.eu
jklm.co.za
bluepenguin.app
nri.app
tiendas.apie.app
www.buddy.education
www.smartassistant.com.br
old.hugo.eynard-home.fr
test.easykasa.app
wordscount.kr
asiaair.co
conservadores.app
dev.webhooks.gamesheet.app
xse.app
mrgeoffrey.app
www.shoplocal.charnwood.gov.uk
www.aeru.co
www.akane.app
app.aimhi.co
weight.jansen.co
www.conservadores.app
www.happensdance.com.au
prana-apana-balance.be
swellbrands.co
ayusharyan.com
www.roundtriplabs.co
pingr.cc
demoo.labflow.cloud
electrokhandan.com
console.ifunds-capital.co.il
www.umfprep.ro
befriendok.com
baygullseagull.com
naoto-kagaya.com
priorifi.com
eresfit.com
www.9junio.com
order-dev.gospurr.com
bestcapitalcredit.com
estimation.club
journal.seefar.dev
austinpartnersgroup.com
www.nd-filter-expert.com
www.dogotea.com
translator.ljns.fr
www.maythispa.com
links.olapodcasts.com
dl.muuv.fit
leqvio-locator.com
ww1.smartdatapay.com
weatherapp-joe.webdevmobiledev.com
bfu-pary.ru
qrsh.mshguru.com
table-hero.co.kr

Other certificates including the domain name calm-investing.com

(limited to 100 certificates)
calm-investing.com
calm-investing.com
app.gohihome.com
survivorsportspark.com
app.calm-investing.com
quantri.mon-kids.com
yourwealthdojo.com
agmikhaylenko.ru
yourwealthdojo.com
app.calm-investing.com
ridpodelivery.com
calm-investing.com
yourwealthdojo.com
yourwealthdojo.com
yourwealthdojo.com
quantri.mon-kids.com
calm-investing.com
www.shubhamshrestha.com.np
yourwealthdojo.com
jasontanproperty.com
humancloudmanifesto.org
www.ericnewton.ca
pedromalo.dev
leveragekites.com
yourwealthdojo.com
calm-investing.com
www.meetploog.com
calm-investing.com
*.calm-investing.com
www.synove.se
www.wreely.com
yourwealthdojo.com
*.yourwealthdojo.com
psclient11254.philanthrosphere.com
yourwealthdojo.com
www.seedofprosperity.calm-investing.com
yourwealthdojo.com
estrazioni.eu
yourwealthdojo.calm-investing.com
www.wreely.com
calm-investing.com

Certificate

The complete raw certificate details for app.calm-investing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINbjCCDFagAwIBAgIQUkBiuzqInqwJEqKpWB1z8TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDAzMjgwOTA4MTZaFw0yNDA2MjYx
MDA1MzRaMCExHzAdBgNVBAMTFmFwcC5jYWxtLWludmVzdGluZy5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2zTJ4uANYulcbyxEHaJDwiPfPMQt
2foPoTEJAiRQcYK/oe7CX1Dw8gheyJnJq36JJC9CEFn3BIdhi5gVa9cO3UrGPUA0
4oVYORZa+IL3NZ2F1oo92VjO0Il5w36cCusY+fokeimM8aumgLI2rk4dc3KcUYG1
+/Rod8+bfvVj95StpQ50QEMyVfe2g5zKEguVmeNCHoaV0RX02wZ3PkA9D8XPCfCO
+m3ho8kdU9oIX0AaQDSXhg76qrvsny2+r538Ncux0PO7/MeHJmsXIgNrwLnH5zCH
w/aiG0Nzli8uDgmGcbKkiNj+/Ezjpk6WGrUF0QiQXj0tBslZYPleVVRVAgMBAAGj
ggp7MIIKdzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUIUXCO6xMLOtrT7XnyeLDatG9s8IwHwYDVR0j
BBgwFoAUJeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsG
AQUFBzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC9DQ013cldYaW13
NDAxBggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0
LmRlcjCCCB8GA1UdEQSCCBYwgggSghZhcHAuY2FsbS1pbnZlc3RpbmcuY29tghBv
cHRpbWFsLWtsaW1hLmh1ghRuaG9vZC1hcHAubGltbWlhLmNvbYIWbXRpbWVyLm1h
ZW5zeXN0ZW1zLmNvbYITdnZhc3NvY2lhdGVzLm9yZy5pboIXZmlyZWJhc2UtamFu
LjI0N2dyYWQuZGWCFmt1cGFuLmRyaWxsZG93bi5vbmxpbmWCFHBsYXlzaWRlLnNv
Z2FmaXQubmV0ghFncmVlbnRha2FyaXRhcy5odYITZXlsYW1hbmRtYXJ1c2EuaW5m
b4ITd3d3LnBoaWxseXVwLm9ubGluZYIQd3d3Lm9jYWZlLmNvbS51YYILc3VzaGli
YXkuYWWCHGFwcC5zY2hhbHRzY2hyYW5rYmF1LXdpZWQuZGWCDXZlbnRvLmNsYXUu
aW+CF3ZpbGxhY2xhcmEuZmxleGkuY29tLmFygiN3d3cua2V5eS1leHBlcnRpc2Ut
ZGV2Lm13aW5pc29mdC5mcoIMb2NlYW52aWV3LnV6ghd3d3cuYW5kZWluZXJzZWl0
ZS52aWRlb4IOY2FmZW5vb2suY28udWuCFXBhcmtzdG9uZW1vdG9ycy5jby51a4Ii
Y2VudHJvZW1tYWJhbGFndWVyZGV2YWxsZWpvLmVkdS5kb4IPZGV2Lm1hYmxlLmNv
LnVrggZlY24udXqCInNlcnZpY2lvLnJlc3RhdXJhbnRlcy5lZmljaWVudGUuY2+C
D2FwcC5zY2Fud2luZS5pb4ISYWNhZGVteS53ZWJsaXZlLm5nghBhY3VwbGFjZS5h
Y3VzLmV1gg5mYW5mdW5kaW5ncy5zZYIXc2hhcmUudGVzdC51bHRyb25hci5jb22C
HGludml0ZXMuZGV2ZWxvcG1lbnQucGF5ZC5jb22CGXd3dy5wYXJrc3RvbmVtb3Rv
cnMuY28udWuCGnd3dy5jaHJpc3RvcGhlcmZsb3Jlcy5pbmZvghN3d3cubGV2ZW5k
aWdkc2duLm5sghl3d3cubGluZmllbGRzdGFibGVzLmNvLnVrghN3d3cuaXZpd29y
a291dC5zaXRlghByZW5ld2NvbXB1dGVyLml0ghhjcm9zcy1oYXJib3VyLnN5bHZh
aW4uaGuCDXd3dy53ZWJ1cmEuc2WCEnd3dy5hcnRieWV2YS5jby51a4IaZG9uYXRl
LmdyYW5kbWFzdGVycy5vbmxpbmWCE211bHRpbWVkaWFidXNzdW0ubmyCG3d3dy52
YWxlbnRpbm9pbW92ZWlzLmNvbS5icoINY29ycC5kYW5uby5ueoIQd3d3LnN0b2xl
bmNhci5wdIIcMjAyM2Npc2Fjb25mLmxpdmVldmVudC5jby56YYIcd3d3LnJpdmVy
d29vZC1jb25zdWx0YW5jeS5ldYIKamtsbS5jby56YYIPYmx1ZXBlbmd1aW4uYXBw
ggducmkuYXBwghB0aWVuZGFzLmFwaWUuYXBwghN3d3cuYnVkZHkuZWR1Y2F0aW9u
ghl3d3cuc21hcnRhc3Npc3RhbnQuY29tLmJyghdvbGQuaHVnby5leW5hcmQtaG9t
ZS5mcoIRdGVzdC5lYXN5a2FzYS5hcHCCDXdvcmRzY291bnQua3KCCmFzaWFhaXIu
Y2+CEWNvbnNlcnZhZG9yZXMuYXBwghpkZXYud2ViaG9va3MuZ2FtZXNoZWV0LmFw
cIIHeHNlLmFwcIIObXJnZW9mZnJleS5hcHCCHnd3dy5zaG9wbG9jYWwuY2hhcm53
b29kLmdvdi51a4ILd3d3LmFlcnUuY2+CDXd3dy5ha2FuZS5hcHCCDGFwcC5haW1o
aS5jb4IQd2VpZ2h0LmphbnNlbi5jb4IVd3d3LmNvbnNlcnZhZG9yZXMuYXBwghd3
d3cuaGFwcGVuc2RhbmNlLmNvbS5hdYIWcHJhbmEtYXBhbmEtYmFsYW5jZS5iZYIO
c3dlbGxicmFuZHMuY2+CDmF5dXNoYXJ5YW4uY29tghR3d3cucm91bmR0cmlwbGFi
cy5jb4IIcGluZ3IuY2OCE2RlbW9vLmxhYmZsb3cuY2xvdWSCEmVsZWN0cm9raGFu
ZGFuLmNvbYIcY29uc29sZS5pZnVuZHMtY2FwaXRhbC5jby5pbIIOd3d3LnVtZnBy
ZXAucm+CDmJlZnJpZW5kb2suY29tghJiYXlndWxsc2VhZ3VsbC5jb22CEG5hb3Rv
LWthZ2F5YS5jb22CDHByaW9yaWZpLmNvbYILZXJlc2ZpdC5jb22CDnd3dy45anVu
aW8uY29tghVvcmRlci1kZXYuZ29zcHVyci5jb22CFWJlc3RjYXBpdGFsY3JlZGl0
LmNvbYIPZXN0aW1hdGlvbi5jbHVighJqb3VybmFsLnNlZWZhci5kZXaCF2F1c3Rp
bnBhcnRuZXJzZ3JvdXAuY29tghh3d3cubmQtZmlsdGVyLWV4cGVydC5jb22CD3d3
dy5kb2dvdGVhLmNvbYISdHJhbnNsYXRvci5sam5zLmZyghF3d3cubWF5dGhpc3Bh
LmNvbYIVbGlua3Mub2xhcG9kY2FzdHMuY29tggtkbC5tdXV2LmZpdIISbGVxdmlv
LWxvY2F0b3IuY29tghR3dzEuc21hcnRkYXRhcGF5LmNvbYIid2VhdGhlcmFwcC1q
b2Uud2ViZGV2bW9iaWxlZGV2LmNvbYILYmZ1LXBhcnkucnWCEHFyc2gubXNoZ3Vy
dS5jb22CEHRhYmxlLWhlcm8uY28ua3IwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYK
KwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29v
Zy9ndHMxZDQvYlQ4WGlqNmVSSFUuY3JsMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu
AHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOhIgnYAAABAMA
RjBEAiA+jUInpm3LtM0YianGBRBEOznqqc7X2pphide24Mzb8wIgRyTQWKU6NR9m
6bog6v9hJk1B5ZaXxKoSlrtUKvl+0ksAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bd
LIHZu7+rOdiEcwAAAY6EiCdKAAAEAwBGMEQCIQCpRyNRdj4PQ0+ip23amWAVG93/
LOeXblVr0fmBi1q5UAIfJ7RFUemBC+rZ8RCZazVAiqIprIQQlX4MstaLH4rRwDAN
BgkqhkiG9w0BAQsFAAOCAQEAUqhOo6udPV1ewNe3RTAzhiO5mUxYh6p31TspxwMj
auCBjcWaoZxagQ64VER5RsDLngk+DWco9V5TZWRj7EePPg1m7NjDbUb2IX6edFnD
FsZ1QEmxMVNWlqqCHU0+zfxRh6u9+lB6azRlQJG2kkPTbL3SqNNI7r9uEZQq1U1n
TQ4LjQZqu0ZBWd5WJw4+xPxWRPCWfkRgavLwrTJLVSGGiovxOub3PLmT54nOKs8Q
O2wqlqFBbLZfo3yKpoS8v8TNTC92Fs60mj+/IPeRjAXViyI1PguQHA6m0Bcd15pt
4D6R4BM/ia4gvk6QKHns4iPzbQAfZvxocO08oQhoAbB/XA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109331005163232172365974448911320708081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 09:08:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 10:05:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.calm-investing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/CCMwrWXimw4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2070 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.calm-investing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimal-klima.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhood-app.limmia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtimer.maensystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvassociates.org.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase-jan.247grad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kupan.drilldown.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playside.sogafit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greentakaritas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eylamandmarusa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillyup.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocafe.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushibay.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.schaltschrankbau-wied.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vento.clau.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villaclara.flexi.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keyy-expertise-dev.mwinisoft.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanview.uz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andeinerseite.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafenook.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkstonemotors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centroemmabalaguerdevallejo.edu.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mable.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecn.uz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicio.restaurantes.eficiente.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.scanwine.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.weblive.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuplace.acus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanfundings.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.test.ultronar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invites.development.payd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkstonemotors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christopherflores.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levendigdsgn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfieldstables.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iviworkout.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewcomputer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cross-harbour.sylvain.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webura.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artbyeva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.grandmasters.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediabussum.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valentinoimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.danno.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stolencar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2023cisaconf.liveevent.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverwood-consultancy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jklm.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluepenguin.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nri.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiendas.apie.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartassistant.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.hugo.eynard-home.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.easykasa.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordscount.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiaair.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservadores.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.webhooks.gamesheet.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xse.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrgeoffrey.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoplocal.charnwood.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeru.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akane.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aimhi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weight.jansen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conservadores.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happensdance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prana-apana-balance.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swellbrands.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayusharyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roundtriplabs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pingr.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoo.labflow.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrokhandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.ifunds-capital.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umfprep.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'befriendok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baygullseagull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naoto-kagaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priorifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eresfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9junio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order-dev.gospurr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcapitalcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estimation.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journal.seefar.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinpartnersgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nd-filter-expert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogotea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translator.ljns.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maythispa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.olapodcasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.muuv.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leqvio-locator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.smartdatapay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weatherapp-joe.webdevmobiledev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfu-pary.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrsh.mshguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'table-hero.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/bT8Xij6eRHU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e84882760000004030046304402203e8d4227a66dcbb4cd1889a9c60510443b39eaa9ced7da9a6189d7b6e0ccdbf302204724d058a53a351f66e9ba20eaff61264d41e59697c4aa1296bb542af97ed24b00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e8488274a0000040300463044022100a9472351763e0f434fa2a76dda9960151bddff2ce7976e556bd1f9818b5ab950021f27b44551e9810bead9f110996b35408aa229ac8410957e0cb2d68b1f8ad1c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052a84ea3ab9d3d5d5ec0d7b74530338623b9994c5887aa77d53b29c703236ae0818dc59aa19c5a810eb854447946c0cb9e093e0d6728f55e53656463ec478f3e0d66ecd8c36d46f6217e9e7459c316c6754049b131535696aa821d4d3ecdfc5187abbdfa507a6b34654091b69243d36cbdd2a8d348eebf6e11942ad54d674d0e0b8d066abb464159de56270e3ec4fc5644f0967e44606af2f0ad324b5521868a8bf13ae6f73cb993e789ce2acf103b6c2a96a1416cb65fa37c8aa684bcbfc4cd4c2f7616ceb49a3fbf20f7918c05d58b22353e0b901c0ea6d0171dd79a6de03e91e0133f89ae20be4e902879ece223f36d001f66fc6870ed3ca1086801b07f5c