almargiardinodicostanza.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 74:63:a2:72:bb:39:0d:b1:10:b3:8b:57:50:b8:5b:31 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=almargiardinodicostanza.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 74:63:a2:72:bb:39:0d:b1:10:b3:8b:57:50:b8:5b:31
Serial Number (int): 154707779740354177654160302046872886065
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 09:09:f0:ed:be:39:e3:4a:1c:9a:a7:59:03:d6:cc:36:9d:d2:02:f8
Fingerprint (sha256): 27:90:b0:4d:2d:c3:67:3e:fa:58:22:4f:40:cb:a5:7b:ff:53:3d:90:dc:61:84:23:ca:d2:cd:ce:03:8e:73:81

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/2-ZXQ45LAMQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/zLRA_3j-FJU.crl

Check the revocation status for certificate almargiardinodicostanza.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for almargiardinodicostanza.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

almargiardinodicostanza.com
www.jakobmuehlbacher.com
www.resourcemodelingsolutions.com
app2.tryit.cl
platform-products.blmbastion.nl
auth.app.undock.com
saketsuman.com
kble.co.uk
uat.recyclesmart.com
gruposim.empresti.me
registration.hawkridgesys.com
www.ozanirav.com
digitaltrainer.app
kathryn.stranex.com
link.kondo-kougei.co.jp
paulinedevine.co.uk
moyela.co.uk
beta.turbogrant.io
www.cloudpine.co.uk
stagesacademy.co.uk
justreminder.app
link.timelesstoday.tv
homestatistics.app
justim.app
stanville.app
www.drumlessonsleeds.co.uk
bye.mom
redisyon.app
aerave.app
harryjacks.co.uk
factoryquarter.co.uk
p.letzgo.io
vaultup.app
stappy.co.uk
ilovepixels.co.uk
ramexa.fr
creatorbeta.phenomena.app
www.guardrail.ai
web.omes.app
web.happily.ai
open.digidentity-staging.eu
alpha.martintoddbuilding.co.uk
www.web.omes.app
welectrify.app
mazapp.mazumamoney.co.uk
sycle.app
formularz.superpaczka24.pl
test.shoutout.ai
admin-dev.sexcellent.app
sistersuzie.ca
goo2geul.store
allowgrowth.com
www.tchisama.com
chat.vested.one
amazonvideo.hashito.biz
link.boardible.com
www.tradobar.com
austincondolaw.com
apexgenesisnft.com
link.labamu.co.id
baggr.uk
briansawaylunch.com
test.tnmt.cc
inprose.biz
environment-test.nucor.report
signin.blueprintcorp.com
shop4.training.mindyourpass.io
popdrinks-orders.crispnow.com
naveenr.com
mta-sts.cherre.com
auth.ko-ko-na.com
makeup-blumen.de
posturepanda.com
fretboard.bogdan-niculescu.co.uk
americanbandinstrumentrecycling.com
staging.getguider.co
www.ruhland-kallenborn.de
vv-sistema-prove-sso.plugins.skore.io
s.vgt.tv
customer.cornfieldeng.co.uk
mrnrecargas.com
scarlets.swapp.work
stinkysockshockey.com
boredasheck.com
stacygaudreau.com
www.msradiologia.com
www.preremeselnikov.sk
vivedeporte.dashport.run
www.keramosrestoration.co.uk
sandbox-portal.warrantysphere.com
www.a2apay.co.uk
backoffice-frontend-christian.rechtsportal24.de
cannonsoft.dev
album.scottcrossen.com
share.healthbuy.tw
dynamiclink.notino.com
www.codecrib.co.uk
mod.tallyfor.com
pb-ac.s.openkind.me
test.audiocaffeine.org

Other certificates including the domain name almargiardinodicostanza.com

(limited to 100 certificates)
www.padelpuigreig.com
www.taruc.com.my
resolvi.cloud
freemarket.fr
almargiardinodicostanza.com
order.thanhdev.com
bucatekel.net
info.beatsempire.org
www.bailey.is
dev.sparqle.app
ventonorteimoveis.com.br
anatole.stepinsight.com.au
www.wedready.com
r3dcloud.co
app-stage.unbox.com.my
app-stage.unbox.com.my
publisher.staging-bookbites.com
mesbro-refurbished.mesbro.in
offscore.band
342804524.xyz
www.asiatechbusinessschool.com
solarwash.me
www.padelpuigreig.com

Certificate

The complete raw certificate details for almargiardinodicostanza.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154707779740354177654160302046872886065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 21:11:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 22:08:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'almargiardinodicostanza.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/2-ZXQ45LAMQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almargiardinodicostanza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jakobmuehlbacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcemodelingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2.tryit.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform-products.blmbastion.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.app.undock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saketsuman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kble.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.recyclesmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruposim.empresti.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.hawkridgesys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozanirav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaltrainer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathryn.stranex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.kondo-kougei.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulinedevine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moyela.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.turbogrant.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudpine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagesacademy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justreminder.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.timelesstoday.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homestatistics.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justim.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanville.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drumlessonsleeds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bye.mom'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redisyon.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerave.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harryjacks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factoryquarter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.letzgo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaultup.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stappy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilovepixels.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramexa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creatorbeta.phenomena.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guardrail.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.omes.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.happily.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.digidentity-staging.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.martintoddbuilding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web.omes.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welectrify.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazapp.mazumamoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sycle.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formularz.superpaczka24.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.shoutout.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-dev.sexcellent.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistersuzie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goo2geul.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allowgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchisama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.vested.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonvideo.hashito.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.boardible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradobar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austincondolaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apexgenesisnft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.labamu.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baggr.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briansawaylunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.tnmt.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inprose.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environment-test.nucor.report'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.blueprintcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop4.training.mindyourpass.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popdrinks-orders.crispnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naveenr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.cherre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.ko-ko-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeup-blumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posturepanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fretboard.bogdan-niculescu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanbandinstrumentrecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.getguider.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruhland-kallenborn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vv-sistema-prove-sso.plugins.skore.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.vgt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.cornfieldeng.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrnrecargas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarlets.swapp.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stinkysockshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boredasheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stacygaudreau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msradiologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preremeselnikov.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivedeporte.dashport.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keramosrestoration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-portal.warrantysphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a2apay.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice-frontend-christian.rechtsportal24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannonsoft.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'album.scottcrossen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.healthbuy.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamiclink.notino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codecrib.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mod.tallyfor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pb-ac.s.openkind.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.audiocaffeine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/zLRA_3j-FJU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ea604250a0000040300483046022100a204e609936b14263e206b2cb207b5fe4303bf09f73705a405854c3fa8f05f66022100c3c468c5c0dfadccc64f974718ebf92a016c464a4ff5ed3813c2ec833959baea0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ea604251a0000040300473045022100c2e0c79372dd12509dd60facf622fee9ea612eab69eb0927a3a709c9454a310502207b330330233d90793bc0fee06fdd4dc67b73cf85f1da11d0adfe83d7838764c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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