www.bci.lu

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number d5:93:9b:25:d5:d2:f1:b4:0a:00:00:00:00:93:7d:f8 was issued on by Google Trust Services.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bci.lu

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d5:93:9b:25:d5:d2:f1:b4:0a:00:00:00:00:93:7d:f8
Serial Number (int): 283891977511497602552123542142855642616
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 50:c7:3b:9a:9f:92:e1:a8:14:2c:7b:0f:dd:9d:53:b6:7d:4c:04:39
Fingerprint (sha256): 27:06:80:10:54:20:f0:0a:5e:34:b3:f3:90:55:3f:d6:e7:12:9f:e6:ae:19:c0:55:5b:a1:fc:e3:57:8f:01:e4

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate www.bci.lu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bci.lu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bci.lu
ustidchecker.comline.app
agustina.mouly.ar
bratwurst-mergelyan.am
qaffeine.be
www.qaffeine.be
rately.afx.app.br
silviabernardelli23.com.br
www.chamadofacil.com.br
www.silviabernardelli23.com.br
gilkvb.gerenciazap.smartmidiasdigitais.com.br
larijani-lab.ca
www.charlieparty.club
www.larijani-lab.ca
www.muv-k.ch
link.newfit.club
comerzio.co
agora.sinova.co
absolutionscol.com
www.comerzio.co
link.staging.actio.com
ch-latrujillana.betpredator.com
www.aroyomatch.com
bntlab.com
www.buzzibox.com
products.candbdev.com
www.dreamersconcert.com
catering.cravedelivery.com
admin.stage.connectsx.com
creativeadsdev.com
dantelabstest.com
paypal.income-world.com
www.creativeadsdev.com
ch-elbodegondelprado.elinmejorable.com
www.de-luxeshoponline.com
www.fitzet.com
www.dantelabstest.com
www.getaquasource.com
cdn.fluxpanda.com
auth.google.mundialtelenoticias.com
istanbulmailing.com
www.planmecaddwt.com
training.portalsquare-order.com
puercoachers.com
cdn-staging.fluxpanda.com
www.pushkarregency.com
sms.qnectu.com
sheffieldadvantage.com
student.scadoosh.com
hrge.fastdocs.de
assets.theamericansweepstakes.com
theclipr.com
www.sheffieldadvantage.com
topresgardsale.com
admin.69b.taxsat.com
trendmailing.com
debug-app.therapify.eu
www.theclipr.com
adriz.fr
osdivae.fr
gstudies.gstores.in
liquidity.lgo.group
yourdigigo.ga
www.adriz.fr
bom.test.bexpress.io
www.osdivae.fr
cdn-demo.respresso.io
mimbele.ir
app.mkts.me
eternalsports.co.jp
jeeng.me
www.simplonsolutions.nl
amflow.online
sapienciacol.org
www.mimbele.ir
www.eternalsports.co.jp
momi.pl
trekk.site
qr.blat.pt
www.lonewolves.co.uk
www.momi.pl
luteran.sk
momikids.pl
momi.store
weather-mate.tk
tixsta-app.co.uk
aero-style.com.ua
www.cape.org.uk
dev-booking.easygolf.vn
www.tixsta-app.co.uk
ecg.gramme.io
table.dog
rajinikanthreddy.com
prendoaprendo.cl
dadhatgames.com
howardedwards.xyz
cadastro.xpenergy.com.br
thedivinator.com
abetter-media.com
www.dadhatgames.com

Other certificates including the domain name bci.lu

(limited to 100 certificates)
start.reaction-club.app
operation.cognite.com
fodeu.app
www.bci.lu
getmagma.app
manikandanramar.com
www.dinomehmedovic.com
www.bci.lu
preciocarro.com
gdgsearch.com
www.hyperbare-zuurstof-kamer-biobarica.nl
dswenlinea.com
mi.gramola.app
www.washitdms.xyz
getmagma.app
yell-toyama.jp
www.hellodokta.com
dev.vcml.app
www.doadoodle.app
escueladigital.sepyc.edu.mx
dswenlinea.com
laptopberatung.de
manikandanramar.com
www.thaiswampbuffalo.com
insidevitamins.online
newcarslease.buja101.com
balazsorban.com
rospilot.com
www.doadoodle.app
bci.lu
test-google-optimize-serverside.easylanding.io
www.brendansaunders.com
returnhero.app
tsukunin.com
laser-chess.com
www.hellodokta.com
dhammah.com
storydsoftware.net
dirtyminds.dk
portal.jayu.us
escueladigital.sepyc.edu.mx
dirtyminds.dk
swipetube.io
gnettvirtual.com.br
admin.sanikid.leanera.work
tsukunin.com
migration.bci.lu
start.reaction-club.app
www.jaredxford.com
callenge.com
staging.account.additive-apps.eu
callenge.com
mi.gramola.app

Certificate

The complete raw certificate details for www.bci.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283891977511497602552123542142855642616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-07 02:27:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-07 02:27:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bci.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2031 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bci.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustidchecker.comline.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agustina.mouly.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bratwurst-mergelyan.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaffeine.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaffeine.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rately.afx.app.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silviabernardelli23.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chamadofacil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silviabernardelli23.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilkvb.gerenciazap.smartmidiasdigitais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larijani-lab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlieparty.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.larijani-lab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muv-k.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.newfit.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comerzio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora.sinova.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutionscol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comerzio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.staging.actio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-latrujillana.betpredator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aroyomatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bntlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buzzibox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'products.candbdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamersconcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catering.cravedelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stage.connectsx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativeadsdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantelabstest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paypal.income-world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creativeadsdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-elbodegondelprado.elinmejorable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.de-luxeshoponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitzet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dantelabstest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getaquasource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.fluxpanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.google.mundialtelenoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istanbulmailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planmecaddwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.portalsquare-order.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puercoachers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-staging.fluxpanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pushkarregency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.qnectu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheffieldadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.scadoosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrge.fastdocs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.theamericansweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclipr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheffieldadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topresgardsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.69b.taxsat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendmailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debug-app.therapify.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theclipr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adriz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osdivae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstudies.gstores.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidity.lgo.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourdigigo.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adriz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bom.test.bexpress.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osdivae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-demo.respresso.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimbele.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mkts.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eternalsports.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeeng.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplonsolutions.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amflow.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapienciacol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mimbele.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eternalsports.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trekk.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.blat.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lonewolves.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.momi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luteran.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momikids.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momi.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather-mate.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tixsta-app.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aero-style.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cape.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-booking.easygolf.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tixsta-app.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecg.gramme.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'table.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rajinikanthreddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prendoaprendo.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadhatgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howardedwards.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadastro.xpenergy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedivinator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abetter-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dadhatgames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000176dae29991000004030047304502210088c56ca2fb2e937b02a687840db09fc22441ba34f775b9de99fa7f8964b398e502206659e67a92d384d285295d2a3712e3897a8f440c9b7980a919a6a4084887b2da0077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000176dae299740000040300483046022100b94bb3fde2e4b76378f7b53ece590778405e2862f872043eb76abe8a567c14fa022100a89d2413491509f2fb0f14184758513cafe44e92167e130a70ea76896fdd7ca3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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