immatrix.be

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 56:68:f9:4e:bc:cf:bc:f6:12:00:76:e5:bf:54:5d:ef was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=immatrix.be

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 56:68:f9:4e:bc:cf:bc:f6:12:00:76:e5:bf:54:5d:ef
Serial Number (int): 114858663069012694356816564171432025583
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): fc:ac:06:9f:e0:42:4b:29:a3:5b:1b:4b:c9:f3:0d:f4:b8:fe:05:e0
Fingerprint (sha256): 29:f6:5f:c6:7a:27:eb:36:b3:d4:4d:15:98:4f:2c:ed:b6:5e:d3:90:94:1c:2c:c9:e4:6b:36:fe:d6:cc:94:04

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/bsVZEysTh5w
CRL Distribution Point: http://crls.pki.goog/gts1d4/8Rld6CneJeA.crl

Check the revocation status for certificate immatrix.be

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for immatrix.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

immatrix.be
inschrijvingen.tckatteberg.be
partners.onebangkok.sustainability.in.th
clinica.flipsaude.com.br
lalahi-cms.hicity.world
appbuilder.tekitoni.com
www.inlearning.edu.pe
www.decimoapp.it
amai.fit
www.clm.li
www.castodian.de
www.dienay.io
jeroengoudsmit.nl
www.voylib.fr
otodeger.dndmotors.com.tr
poker.tv.whitebet.games
console.sozy.tw
www.temple-du-haiku.fr
spoxi.es
www.vr.sumy.ua
atualsolucoesdigitais.com.br
www.instaspy.com.br
mindtick.flinders.edu.au
test.brisstudio.no
www.dmvaljevo.rs
www.paisan.in
firebase.decathlonpro.fr
www.kirillsolo.com
avikacoldchainsolutions.com
aerooceanlogistics.com
gunsense.danielburns.info
trendev.in
helseogarbeid2022.mmevent.no
kuizzi.app
hardwickcider.com
www.biopmconsulting.com
jamnguyen.com
www.xnknwn.space
test.mathologic.com
purewaterhub.com
links.pictrove.com
unidragon.io
homesdesigner.in
api-dev.gokeepup.com
www.solocochelectrico.es
www.keirin-rookies.jp
www.you-chat.app
auth.app.heylo.co
experiences.modeka.space
waffd.co.za
sunset.yoyaku.cc
admin-36453047345.derevcrowdfunding.com
mediahd.org
www.logicaljupiter.in
4th-anniv.shionchan.fan
pp.prshl.de
fueradejuego.net
test.iopsmobile.com
castelodeclaras.com
www.test.iopsmobile.com
www.gtacarscrapping.com
app.rulecat.com
www.lseq.dev
memento.dobler.studio
qr.fitkore.com
dashboard.iot20k.com
coinleague.com
www.beecolo.com
vednutri.com
pflink.de
www.ustadium.com
freelancertogo.com
helixpoem.com
gdgjalandhar.com
godrim.com
d.yoko-app.dev.shippio.jp
fresnostatecamps.com
niko.celniker.xyz
aaronturton.com
d.chris-app.dev.shippio.jp
slack.devaibhav.me
sublimetask.com
vip.vetzen.fr
takashi.one
kalpeshtrivedi.com
auth.assured.jp
hugot-dev.pbcd.net
www.moorlandmassagetherapies.co.uk
links.ekincare.com
app.soundbrenner.com
kafas-admin.demo.jeffreyaboh.co.uk
hugot-dev3.pbcd.net
be-driven.io
himadventure.com
www.bardicious.com
jokevourng.com
mssecuritykart.com
bouquetperfume.shop
hugot-dev4.pbcd.net
www.ys-hayashi.me

Other certificates including the domain name immatrix.be

(limited to 100 certificates)
dancesportdj.app
immatrix.be
immatrix.be
immatrix.be
immatrix.be
immatrix.be
immatrix.be
immatrix.be
docs.globalconsent.com
immatrix.be
www.theatomic.space
immatrix.be
gunsense.danielburns.info
www.html-css.co.uk
immatrix.be
www.alfadombg.com
immatrix.be
www.xavirincon.es
immatrix.be
immatrix.be
immatrix.be
immatrix.be
immatrix.be
immatrix.be
www.athleticroomprops.net
split.shemasleep.pro
immatrix.be
immatrix.be
soldwithrys.com

Certificate

The complete raw certificate details for immatrix.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114858663069012694356816564171432025583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 07:46:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 08:44:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'immatrix.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/bsVZEysTh5w'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2035 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immatrix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inschrijvingen.tckatteberg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.onebangkok.sustainability.in.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinica.flipsaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalahi-cms.hicity.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appbuilder.tekitoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inlearning.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decimoapp.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amai.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clm.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castodian.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dienay.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeroengoudsmit.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voylib.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otodeger.dndmotors.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poker.tv.whitebet.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.sozy.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temple-du-haiku.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoxi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vr.sumy.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atualsolucoesdigitais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instaspy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindtick.flinders.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.brisstudio.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmvaljevo.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paisan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.decathlonpro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirillsolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avikacoldchainsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerooceanlogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunsense.danielburns.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendev.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helseogarbeid2022.mmevent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuizzi.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardwickcider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biopmconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamnguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xnknwn.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mathologic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purewaterhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.pictrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidragon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesdesigner.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.gokeepup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solocochelectrico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirin-rookies.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.you-chat.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.app.heylo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiences.modeka.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waffd.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunset.yoyaku.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-36453047345.derevcrowdfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediahd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logicaljupiter.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4th-anniv.shionchan.fan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp.prshl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fueradejuego.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.iopsmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelodeclaras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.iopsmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtacarscrapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rulecat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lseq.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memento.dobler.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.fitkore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.iot20k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beecolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vednutri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pflink.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ustadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelancertogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helixpoem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdgjalandhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.yoko-app.dev.shippio.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnostatecamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niko.celniker.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaronturton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.chris-app.dev.shippio.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slack.devaibhav.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sublimetask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip.vetzen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takashi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalpeshtrivedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.assured.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugot-dev.pbcd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moorlandmassagetherapies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.ekincare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.soundbrenner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kafas-admin.demo.jeffreyaboh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugot-dev3.pbcd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-driven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'himadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bardicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokevourng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mssecuritykart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouquetperfume.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugot-dev4.pbcd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ys-hayashi.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/8Rld6CneJeA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac137e434000004030046304402206bcc31174a8a210089ea844d1fe618df73811d0b540d044cbd9c5db10e8c824302200935f3b9d7b4e12be2ee7c6c81959d96e4b41374824df9643251670b83ca23960077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac137e4480000040300483046022100eda57f14f424af9271116878da47c444d364408d47f277e3d28fc897d757ddfa022100c282d07e2e99d5352d62bf046d532386324e210f530eefb3f327839f2430830c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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