www.lovoma.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number f9:ee:61:b6:ff:bf:a8:d6:0a:23:f0:9e:ee:c5:13:45 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.lovoma.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f9:ee:61:b6:ff:bf:a8:d6:0a:23:f0:9e:ee:c5:13:45
Serial Number (int): 332215519495182852778671213745927426885
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 45:e8:b6:5b:7f:ec:d7:cf:12:05:ce:c9:34:87:2b:b1:b9:53:6c:5b
Fingerprint (sha256): 29:bd:55:51:f4:e4:70:c8:70:57:67:77:1b:cf:fc:86:c2:42:f9:46:32:81:21:39:13:20:39:49:14:1f:1c:c0

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Fr1cXuPiDlo
CRL Distribution Point: http://crls.pki.goog/gts1d4/mnH6AJX_uWM.crl

Check the revocation status for certificate www.lovoma.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lovoma.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lovoma.de
pupillhealth.com
conheca2.automacaocuritiba.com.br
formulae.bepass.com.br
coinslive.org
trying-out-vue.zacke.dev
shamrockrovers.scouthub.app
konnormcdowell.com
quiz-mx2.moonsdental.ninja
minimou.shopinn.tw
docs.stadtkatalog.org
www.tealen.com
app.kc.qa.provisionai.com
www.portal-dev-restricted.jayu.us
canaletas-bandejas-portacable.com
devfest22.gdgsrilanka.org
www.playvj.com
www.arffis.com
app-staging.perkypot.com
www.iam-monopoly.com
tools.news.party
bkit.solutions
medico.rhodium.health
www.microplastic.io
dicom.petleo.net
kingent3.com
athenspostacute.com
www.qwisply.com
tngprotectyourselffromyourself.com
fsm.forthe.top
a.b.gcptestingdomain.com
thierryjean.com
www.webassembly.news
quadrupedate-ye-subdean.co.uk
www.avnir06.fr
interativaapps.com
comeon.social
yardhostle.com
app.nedvizhka.kz
www.zedbyte.in
console.rapidqapp.com
www.hrvendurance.com
tnprintworks.com
orcwater.com
wordsearch.requisite.link
sparrowtattoos.com
content-hub-qa.visitingmedia.com
content-hub-dev.visitingmedia.com
ellipsislounge.ph
pebble.sensemake.org
inreach.rescue-1.co.il
www.redstyle.kz
emathstudio.snapmentor.no
ref.khabarbanga.in
www.orcwater.com
saenterpriseconstruction.com
app.healthyplanbyann.com
autarke-experten.de
doc.luciaprotocol.com
aliguclu.dev
www.kingent3.com
www.songryder-shop.com
winone.in
aba.rxcx.au
alcontechnologydemo.clau.io
www.tnprintworks.com
shakispizza.clau.io
www.hanafikasim.com
www.elitepromotions242.com
www.pendlerkosten.de
mealkitz.clau.io
oceain.ai
manage-dev.vonder.co.th
www.comeon.social
tr.speakingathome.com
www.oceain.ai
newcastle.scouthub.app
naibylea.xyz
radvest.scheduly.org
test.portal.getcallforce.com
thepsp.org
galatasaray.scouthub.app
everton.scouthub.app
link.tradeblock.us
docs.luciaprotocol.com
www.dailybeagle.com
sib2022.dicoding.org
moderntix.io
www.workteen.org
lipitino.samui.rocks
magiabakery.com
streetstory.co
r42-web.spandl.ca
www.viewdigicard.com
gameonesports.co
www.wasmcoin.com
me.vvnovel.com
ghianda.xyz
www.mytown360.com
www.poppeg.com

Other certificates including the domain name lovoma.de

(limited to 100 certificates)
www.acaml.com
app.pedidos.casadasplantas.net.br
popmove.com.br
www.tekartik.com
www.lovoma.de
passportphotolab.com
supporter.vitanote.jp
www.jfl-bizpartners-conference.com
passportphotolab.com
www.averry.xyz
www.tekartik.com
www.o2exam.web2biz.in
www.titletab.com
www.fintlabs.no
www.nina.games
www.jfl-bizpartners-conference.com
quizatron.app
ringspirations.com
irepairstore-fix.de
www.acaml.com
bodytrace.storyhealth.ai
www.titletab.com

Certificate

The complete raw certificate details for www.lovoma.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINkTCCDHmgAwIBAgIRAPnuYbb/v6jWCiPwnu7FE0UwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMxMjE2MDQxMzQ1WhcNMjQwMzE1
MDUxMjI3WjAYMRYwFAYDVQQDEw13d3cubG92b21hLmRlMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisweg4/A08uxrfHKNwGnA6/
z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrWrb62Cf/HBei6zD4wuJAC
FRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89llhMA9p+/Uiat7X3Y3nYhr
fxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk//tVMMjOThi69wah13bI
Fcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82jXqtE4UCUJ2VR4GwrRhc
poaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+gQIDAQABo4IKpjCCCqIw
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFAap3NkUPVD1G5jttt0R570Wtwz8MB8GA1UdIwQYMBaAFCXi
GA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp
aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvRnIxY1h1UGlEbG8wMQYIKwYB
BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5kZXIwgghK
BgNVHREEgghBMIIIPYINd3d3Lmxvdm9tYS5kZYIQcHVwaWxsaGVhbHRoLmNvbYIh
Y29uaGVjYTIuYXV0b21hY2FvY3VyaXRpYmEuY29tLmJyghZmb3JtdWxhZS5iZXBh
c3MuY29tLmJygg1jb2luc2xpdmUub3Jnghh0cnlpbmctb3V0LXZ1ZS56YWNrZS5k
ZXaCG3NoYW1yb2Nrcm92ZXJzLnNjb3V0aHViLmFwcIISa29ubm9ybWNkb3dlbGwu
Y29tghpxdWl6LW14Mi5tb29uc2RlbnRhbC5uaW5qYYISbWluaW1vdS5zaG9waW5u
LnR3ghVkb2NzLnN0YWR0a2F0YWxvZy5vcmeCDnd3dy50ZWFsZW4uY29tghlhcHAu
a2MucWEucHJvdmlzaW9uYWkuY29tgiF3d3cucG9ydGFsLWRldi1yZXN0cmljdGVk
LmpheXUudXOCIWNhbmFsZXRhcy1iYW5kZWphcy1wb3J0YWNhYmxlLmNvbYIZZGV2
ZmVzdDIyLmdkZ3NyaWxhbmthLm9yZ4IOd3d3LnBsYXl2ai5jb22CDnd3dy5hcmZm
aXMuY29tghhhcHAtc3RhZ2luZy5wZXJreXBvdC5jb22CFHd3dy5pYW0tbW9ub3Bv
bHkuY29tghB0b29scy5uZXdzLnBhcnR5gg5ia2l0LnNvbHV0aW9uc4IVbWVkaWNv
LnJob2RpdW0uaGVhbHRoghN3d3cubWljcm9wbGFzdGljLmlvghBkaWNvbS5wZXRs
ZW8ubmV0ggxraW5nZW50My5jb22CE2F0aGVuc3Bvc3RhY3V0ZS5jb22CD3d3dy5x
d2lzcGx5LmNvbYIidG5ncHJvdGVjdHlvdXJzZWxmZnJvbXlvdXJzZWxmLmNvbYIO
ZnNtLmZvcnRoZS50b3CCGGEuYi5nY3B0ZXN0aW5nZG9tYWluLmNvbYIPdGhpZXJy
eWplYW4uY29tghR3d3cud2ViYXNzZW1ibHkubmV3c4IdcXVhZHJ1cGVkYXRlLXll
LXN1YmRlYW4uY28udWuCDnd3dy5hdm5pcjA2LmZyghJpbnRlcmF0aXZhYXBwcy5j
b22CDWNvbWVvbi5zb2NpYWyCDnlhcmRob3N0bGUuY29tghBhcHAubmVkdml6aGth
Lmt6gg53d3cuemVkYnl0ZS5pboIVY29uc29sZS5yYXBpZHFhcHAuY29tghR3d3cu
aHJ2ZW5kdXJhbmNlLmNvbYIQdG5wcmludHdvcmtzLmNvbYIMb3Jjd2F0ZXIuY29t
ghl3b3Jkc2VhcmNoLnJlcXVpc2l0ZS5saW5rghJzcGFycm93dGF0dG9vcy5jb22C
IGNvbnRlbnQtaHViLXFhLnZpc2l0aW5nbWVkaWEuY29tgiFjb250ZW50LWh1Yi1k
ZXYudmlzaXRpbmdtZWRpYS5jb22CEWVsbGlwc2lzbG91bmdlLnBoghRwZWJibGUu
c2Vuc2VtYWtlLm9yZ4IWaW5yZWFjaC5yZXNjdWUtMS5jby5pbIIPd3d3LnJlZHN0
eWxlLmt6ghllbWF0aHN0dWRpby5zbmFwbWVudG9yLm5vghJyZWYua2hhYmFyYmFu
Z2EuaW6CEHd3dy5vcmN3YXRlci5jb22CHHNhZW50ZXJwcmlzZWNvbnN0cnVjdGlv
bi5jb22CGGFwcC5oZWFsdGh5cGxhbmJ5YW5uLmNvbYITYXV0YXJrZS1leHBlcnRl
bi5kZYIVZG9jLmx1Y2lhcHJvdG9jb2wuY29tggxhbGlndWNsdS5kZXaCEHd3dy5r
aW5nZW50My5jb22CFnd3dy5zb25ncnlkZXItc2hvcC5jb22CCXdpbm9uZS5pboIL
YWJhLnJ4Y3guYXWCG2FsY29udGVjaG5vbG9neWRlbW8uY2xhdS5pb4IUd3d3LnRu
cHJpbnR3b3Jrcy5jb22CE3NoYWtpc3BpenphLmNsYXUuaW+CE3d3dy5oYW5hZmlr
YXNpbS5jb22CGnd3dy5lbGl0ZXByb21vdGlvbnMyNDIuY29tghR3d3cucGVuZGxl
cmtvc3Rlbi5kZYIQbWVhbGtpdHouY2xhdS5pb4IJb2NlYWluLmFpghdtYW5hZ2Ut
ZGV2LnZvbmRlci5jby50aIIRd3d3LmNvbWVvbi5zb2NpYWyCFXRyLnNwZWFraW5n
YXRob21lLmNvbYINd3d3Lm9jZWFpbi5haYIWbmV3Y2FzdGxlLnNjb3V0aHViLmFw
cIIMbmFpYnlsZWEueHl6ghRyYWR2ZXN0LnNjaGVkdWx5Lm9yZ4IcdGVzdC5wb3J0
YWwuZ2V0Y2FsbGZvcmNlLmNvbYIKdGhlcHNwLm9yZ4IYZ2FsYXRhc2FyYXkuc2Nv
dXRodWIuYXBwghRldmVydG9uLnNjb3V0aHViLmFwcIISbGluay50cmFkZWJsb2Nr
LnVzghZkb2NzLmx1Y2lhcHJvdG9jb2wuY29tghN3d3cuZGFpbHliZWFnbGUuY29t
ghRzaWIyMDIyLmRpY29kaW5nLm9yZ4IMbW9kZXJudGl4LmlvghB3d3cud29ya3Rl
ZW4ub3JnghRsaXBpdGluby5zYW11aS5yb2Nrc4IPbWFnaWFiYWtlcnkuY29tgg5z
dHJlZXRzdG9yeS5jb4IRcjQyLXdlYi5zcGFuZGwuY2GCFHd3dy52aWV3ZGlnaWNh
cmQuY29tghBnYW1lb25lc3BvcnRzLmNvghB3d3cud2FzbWNvaW4uY29tgg5tZS52
dm5vdmVsLmNvbYILZ2hpYW5kYS54eXqCEXd3dy5teXRvd24zNjAuY29tgg53d3cu
cG9wcGVnLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUDMDwG
A1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFkNC9tbkg2
QUpYX3VXTS5jcmwwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQB2/4g/Crb7lVHC
Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYxxC3kPAAAEAwBGMEQCIDJxDp13yVCz
l3PDxpOb9c8Gaq8nmkpBm/2taQnqCD14AiB3ofYjv5z6Ajui2RHgfaCOvVCvIxPs
LHd3fJXlE1cp9AB1ACnQOhu2dKpxHNMDW2VXwU+Kp4tP6DiUSeykU/lEvSRoAAAB
jHELeboAAAQDAEYwRAIgF8L3PukU8o5IPCemMqMwa5y0Ed9Gyr/DqGdtrSvFHwUC
IAyNHC1HyWpumxo2CX+Hp4gh6b7FYJMeWda9lgTAnV5cMA0GCSqGSIb3DQEBCwUA
A4IBAQBqBSX4YuWePRRmfzfv2QH+/++e8PXJ91LAPrcc14mN1vK7FUGyNrPIgQT1
GceOTYlYfkFAOLzK+P80MabpWhSVv96ZlARWqJTX5gOiWjZpWRTjgPw+BurcN7Ab
K85QnYpTdFx+otP7GHgzYIMULoAgUCpC7g+9YNWBvhmGZDdvYBcoGXBYySi08XAi
rJpitxqZZQfNjRrCgtXMpQdW2/mAzO6JOFVKLe93cPNKzaRJvNdqWXjGwZijXeU1
znS+0thdIyRF0IOFYoIBcOC/7KY/wnMkZpjt/hEMoiACAGtWY0gejjar0gacwlyj
M4MHQnxZaTnYS1oulesry80MyEHn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332215519495182852778671213745927426885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 04:13:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 05:12:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lovoma.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Fr1cXuPiDlo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovoma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pupillhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conheca2.automacaocuritiba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulae.bepass.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinslive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trying-out-vue.zacke.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shamrockrovers.scouthub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konnormcdowell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiz-mx2.moonsdental.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minimou.shopinn.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.stadtkatalog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tealen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kc.qa.provisionai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal-dev-restricted.jayu.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canaletas-bandejas-portacable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfest22.gdgsrilanka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playvj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arffis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-staging.perkypot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iam-monopoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.news.party'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkit.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medico.rhodium.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microplastic.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicom.petleo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingent3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenspostacute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qwisply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tngprotectyourselffromyourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsm.forthe.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.b.gcptestingdomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thierryjean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webassembly.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quadrupedate-ye-subdean.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avnir06.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interativaapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comeon.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yardhostle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nedvizhka.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zedbyte.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.rapidqapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrvendurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnprintworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orcwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordsearch.requisite.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparrowtattoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-hub-qa.visitingmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-hub-dev.visitingmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellipsislounge.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pebble.sensemake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inreach.rescue-1.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redstyle.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emathstudio.snapmentor.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.khabarbanga.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orcwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saenterpriseconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.healthyplanbyann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autarke-experten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.luciaprotocol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliguclu.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingent3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.songryder-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winone.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aba.rxcx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcontechnologydemo.clau.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnprintworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shakispizza.clau.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanafikasim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elitepromotions242.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pendlerkosten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mealkitz.clau.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceain.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage-dev.vonder.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comeon.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr.speakingathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceain.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcastle.scouthub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naibylea.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radvest.scheduly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.portal.getcallforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galatasaray.scouthub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everton.scouthub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.tradeblock.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.luciaprotocol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailybeagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sib2022.dicoding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moderntix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workteen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipitino.samui.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magiabakery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetstory.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r42-web.spandl.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewdigicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameonesports.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wasmcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.vvnovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghianda.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mytown360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poppeg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/mnH6AJX_uWM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c710b790f0000040300463044022032710e9d77c950b39773c3c6939bf5cf066aaf279a4a419bfdad6909ea083d78022077a1f623bf9cfa023ba2d911e07da08ebd50af2313ec2c77777c95e5135729f400750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c710b79ba0000040300463044022017c2f73ee914f28e483c27a632a3306b9cb411df46cabfc3a8676dad2bc51f0502200c8d1c2d47c96a6e9b1a36097f87a78821e9bec560931e59d6bd9604c09d5e5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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