app.kubuni.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 5a:b0:33:38:e5:25:63:24:0a:8f:4f:ed:f5:15:05:d1 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.kubuni.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:b0:33:38:e5:25:63:24:0a:8f:4f:ed:f5:15:05:d1
Serial Number (int): 120545402778328710941497796838796101073
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 96:ea:b8:62:c8:b2:b1:e0:82:35:ff:a9:f1:09:83:e2:ac:d3:fc:05
Fingerprint (sha256): 2b:b0:f4:5d:38:d8:14:40:47:a5:09:23:e3:d8:ec:ca:9b:45:a8:2b:fc:ba:f8:f5:ee:98:40:fd:42:9e:6b:db

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/4ElJveUS7Gs
CRL Distribution Point: http://crls.pki.goog/gts1d4/3WiQwaWyyyo.crl

Check the revocation status for certificate app.kubuni.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.kubuni.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.kubuni.de
evstreets.ondagoapp.com
atteraisanen.dev
cbtdanieledu.com
www.lvshmedia.com
minhatrip.com
aitutor-sei.cloudpssolutions.com
scala.co-instructed.com
my.aisportswatch.com
bff.chat
theaisummer.com
www.app.letsaspiro.com
stanleyjean.com
api.d-navi.info
rencontres-gourmandes-pornichet.fr
thecoinstack.com
npm.remix.run
risks.johnfowler.co.uk
kudc.rhetoritask.com
agenda.ideastecnologicas.com.uy
watchfacespro.com
www.boutiquebliss.com.br
www.centralinvest.com.br
www.hueclips.app
app.tmpr.co.jp
play.primetimemath.com
www.digitaltownsq.co
agroform.de
zrzart.cz
www.insig.xyz
www.ski-sale.dk
www.qalki.com
a0i2.foodle.su
sigma33.finance
www.leahywrightlaw.com
www.a-ej.com
3xinco.me
mydiet.one
www.leahywright.com
www.innobizsac.pe
enerius.pl
www.asapglowparade.com
www.theballroomconnection.com
www.kriocare.com
functionalism.org
indexer-app.massbit.io
legal.drivecloud.com.au
absolutefavorites.app
sustainab.org
portal.senthurbalajicrackers.com
admin.baic.cz
sb.samearth.net
kizuna.fun-japan.jp
www.meurope.org
granmurallarestaurante.com
brninfodev.com
luxuryled.us
staging-aws.auth.playbook.vc
dl.thenewshub.co
www.aurohomes.in
admin.breazie.com
www.securelogin.one
www.jubaservices.com
www.swypelocal.com
www.burburata.com
imlocal.org
www.pelago.games
embassy.cognilements.com
burningmanstory.com
www.financeformuslims.com
art.z97.io
live.experiments.standards.site
hilalindustry.com
link.linehopper.app
intermediumemp.com
hectorcho.com
www.togetherunique.de
admin.noubodiez.com
oilcivitan.com
libertytips6.com
connect-ng-carrier-loadboard.rxoconnectdemo.rxo.com
lakewoodgh.com
www.boodschappenblender.nl
link.peton.me
links.gouldcs.com
secure.breazie.com
www.pialpha.net
connect-ng-analytics.rxoconnectdev.rxo.com
maycreekclub.com
www.ollietroward.com
app.carclean.voleep.com
about.tikti.me
connect-customer-ng-admin.rxoconnectdev.rxo.com
connect-ng-carrier-tenders.rxoconnectdev.rxo.com
link.apartame.mx
ipablog.site
mycapbann.com
dev-kizuna.fun-japan.jp
ssskinteriors.in
pantrypal.org

Other certificates including the domain name kubuni.de

(limited to 100 certificates)
*.kubuni.de
link.apollorejser.dk
admin.cidadegestao.com.br
*.kubuni.de
1050allen.com
www.kalpa.no
www.accleaninginc.com
popmove.com.br
devapi.nspkost.com
*.kubuni.de
swankeypankey.com
app.kubuni.de
*.kubuni.de
*.kubuni.de
www.westcoastcoders.com
*.kubuni.de
www.theconcordium.org
techweek.ieeensut.com
myaddress2.sameday.bg
rpgin.com
www.seaerogloballogistics.com
*.kubuni.de
*.kubuni.de
awwsmith.com
admin.lincomment.ai
tunap.kubuni.de
air-acservices.com
silly2018.yosi.work
bahamutech.com
stb-meyer-burgwedel.de
push.mylesapp.com
tunabeauty.com
link.iynk.com
nicolaschavez.com
swapnilchauhan.com
www.nagatani.app
tubedaddon.panicked.xyz
northlanenft.com
www.ovio.org
chats.kaadi.app
dev.thanks.team
fotosaereasdeextremadura.com
tunap.kubuni.de
abelgasque.dev
copingcard.com
*.kubuni.de
staging.banknote.sa
altinyayla.zeplinx.com
sandbox.oiko.life
kubuni.de
idashyou.com
app.kubuni.de
www.roboair.com
www.nommynommy.com
mudilar.com.br
demo.kubuni.de
test.delavega.cl
*.kubuni.de
www.relitex.in
www.michaelgt.dev
www.daglo.ai
staging.hub.hoxbycollective.com
skoolhub.com.ng
distri-metal.fr
*.kubuni.de

Certificate

The complete raw certificate details for app.kubuni.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120545402778328710941497796838796101073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 06:18:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 07:16:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.kubuni.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/4ElJveUS7Gs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kubuni.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evstreets.ondagoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atteraisanen.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbtdanieledu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvshmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minhatrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aitutor-sei.cloudpssolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scala.co-instructed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.aisportswatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bff.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theaisummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.letsaspiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanleyjean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.d-navi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontres-gourmandes-pornichet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecoinstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npm.remix.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risks.johnfowler.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kudc.rhetoritask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenda.ideastecnologicas.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchfacespro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutiquebliss.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralinvest.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hueclips.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tmpr.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.primetimemath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaltownsq.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agroform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zrzart.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insig.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ski-sale.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qalki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a0i2.foodle.su'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigma33.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leahywrightlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a-ej.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3xinco.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydiet.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leahywright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innobizsac.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerius.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asapglowparade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theballroomconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kriocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'functionalism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indexer-app.massbit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.drivecloud.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutefavorites.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.senthurbalajicrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.baic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb.samearth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kizuna.fun-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meurope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granmurallarestaurante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brninfodev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryled.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-aws.auth.playbook.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.thenewshub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurohomes.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.breazie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securelogin.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swypelocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burburata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imlocal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pelago.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embassy.cognilements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burningmanstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financeformuslims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art.z97.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.experiments.standards.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilalindustry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.linehopper.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermediumemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hectorcho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherunique.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.noubodiez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilcivitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytips6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-carrier-loadboard.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakewoodgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boodschappenblender.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.peton.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.gouldcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.breazie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pialpha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-analytics.rxoconnectdev.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maycreekclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollietroward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.carclean.voleep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.tikti.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-customer-ng-admin.rxoconnectdev.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-carrier-tenders.rxoconnectdev.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.apartame.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipablog.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycapbann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-kizuna.fun-japan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssskinteriors.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantrypal.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/3WiQwaWyyyo.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d352f8f0c000004030047304502200ade2bd015e25d9d591c4aa68494da733962d04f3e29136eec71ac98f82e5f67022100cacc76c60e8b552599b33e25368aedc566dc251058626b1f0667171ff7cbcceb007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d352f8ffc0000040300483046022100a2c6d20f48c1c1508dbf4b760d2417ab9a0ac3e71dfde5aef42438079c561e77022100e877e83edc566736d843d95fc799e0e390971502d5d89fe54c3628a616271833
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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