studentcare.morningstar.org.sg

Issued by WR3

About this certificate

This digital certificate with serial number 6e:d2:5d:33:40:5c:ff:fa:0a:4a:79:1d:e3:1a:56:ed was issued on by Google Trust Services.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=studentcare.morningstar.org.sg

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6e:d2:5d:33:40:5c:ff:fa:0a:4a:79:1d:e3:1a:56:ed
Serial Number (int): 147307352201281958274092143952388577005
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: c7:81:f5:fd:8e:88:d9:00:3c:4d:63:a2:50:31:24:a0:ce:23:fe:23

Fingerprint (sha1): 77:07:84:4c:84:1a:8c:cf:af:73:1a:9b:c1:cf:3e:2c:cf:62:c3:52
Fingerprint (sha256): 2e:23:3d:6a:ed:75:66:04:81:54:05:47:84:5e:52:23:36:f5:fc:e9:36:61:9b:bf:5d:50:51:08:6c:d0:d8:95

Issuing Certificate URL: http://i.pki.goog/wr3.crt

Revocation information

OCSP Server: http://o.pki.goog/s/wr3/btI
CRL Distribution Point: http://c.pki.goog/wr3/zYdZL842DpI.crl

Check the revocation status for certificate studentcare.morningstar.org.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for studentcare.morningstar.org.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

studentcare.morningstar.org.sg
demo.hrfys.dk
smart-scan.app
chichiparty.com
firebase.yswalker.com
www.opendancemadeira.com
www.charlescaddy.com
www.leonardocaceres.com
perali.hiraku.space
tizo-v1.canalcircle.com
sumai.rocks
streetart.app
digital1.india1.co.in
www.kola-pujcovna.cz
cmcamocim.itransparencia.com.br
smalltest.mojifun.com
sunglass.zeero.tech
univa.ltd
boostytech.com
brewedlogic.com
coolrunlimited.com
www.sync-earth.com
albrima.be
rentbook.com
wordpuzzle.hdegames.com
app.servicezoid.com
runeassist.com
next-int.scansies.com
rubendelaiglesiapregal.es
app.shelftrend.com
shoofdoctor.com
app.ideate.nu
saulo.ch
figure1-admin-staging.figure1.com
www.decodable.io
thinktank.finance
procyonfinancial.partners
www.runeassist.com
sandbox.rooster-eu.com
dev.memorigi.com
appointment.garethpaul.com
app.walruslabs.com
alextotolici.com
blog.jamibot.com
tpapp2-dev.tabikobo.com
uat.fxhub.co.za
www.rileyparada.com
www.nadalini-portocarrero.com
maxim-development.com
www.stockingsapp.com
www.raftsbc.com
www.robindossche.be
jarvis.xpressdelivery.co
www.iisusstudio.com
gepiter.com
factorycat.chrislauer.net
stronger.bg
11521794.peerly.app
recmyswing.at-the-m.com
knife-fight.io
latourosgypsum.com
www.ibeck.me
work.denzildoyle.me
www.eojeah.app
berkustun.com
kyralnet.org
alpha.audits.lunarworks.co.uk
snout.org
fatwas.itqaninstitute.org
www.8bityoda.com
anda.queliga.com
www.dietelefonistinnen.de
www.intelliex.co
fire.ioo.li
affect-ai.com
www.gruene-neusaess2020.de
burhaninatural.com
onelifefieldstaffapp.finstein.ai
simposiumdeiluminacion.iesmexico.org
dreamgames.12traits.com
www.buttholescan.com
chubb.wallit.app
eregisterexpress.com
www1.dotdip.ca
photo.bus20.com
bodegas.daffl.com
dash.anovanet.com
portal.nostra.ai
djungelorm.com
www.katorio.ca
servit.tidann.dev
link.zeno.ltd
t.vinofyapp.com
dev.callingqueue.com
app.injaus.co
idolatre.milramasapp.com.br
www.maritimechamber.co.za
bloggeek.franlops.com
joepvandepol.nl
www.grodok.com

Other certificates including the domain name morningstar.org.sg

(limited to 100 certificates)
morningstar.org.sg
identifiedpaw.co
www.minetworking.com
www.seymour-locksmiths.co.uk
morningstar.org.sg
morningstar.org.sg
livetour.zenith-watches.com
studentcare.morningstar.org.sg
app.kontaktlinsen-preisvergleich.de
touchtech.digitalvenue.training
morningstar.org.sg
morningstar.org.sg
www.vcf-file-merger.com
morningstar.org.sg
morningstar.org.sg
morningstar.org.sg
www.bonesoffers.com
morningstar.org.sg
morningstar.org.sg
morningstar.org.sg
dashboard.owaystudio.com
togo2.woodoo.io
nus.karim.ooo
morningstar.org.sg
listopad.app
muttch.com
signupsk.textable.app
stachetracker.com
app.sohermaquinas.com.br
kalkulacje.pl
michellevill.centurycard.online
morningstar.org.sg
id.ratafia.cat

Certificate

The complete raw certificate details for studentcare.morningstar.org.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINKjCCDBKgAwIBAgIQbtJdM0Bc//oKSnkd4xpW7TANBgkqhkiG9w0BAQsFADA7
MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQww
CgYDVQQDEwNXUjMwHhcNMjQwNTI0MDgwMDIzWhcNMjQwODIyMDg1ODUzWjApMScw
JQYDVQQDEx5zdHVkZW50Y2FyZS5tb3JuaW5nc3Rhci5vcmcuc2cwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfMluTWj22EIM+fwQHA8PFGBtg7bvK1lp
mvjxipEFdcUrMGHvGiTW4Z+s4+Ivhb1kBKwx95yhbwFwpEvrs0W+pGbFZ5BxqYcf
5KQs+6L+UqmfbYAmAAVj+usVoyMj0XXhbsrbiwXEbHf17BzBSivUR2jvTVOpS4Zw
VevDzkgqwMifPdcRpsqR9Ek9kbKstCIiR6PpJVjBDwH0zUE684TebtxjuA0I4nAm
bHBbZvttT/jdasnYNG5tJAvK2QbvX16wfingCNWJr45mISDClhGwRCKejG/c2IWF
jWir4NTYFMmNJ4zpplhC9W8hf/lP211qum1gM1uJBSjJOtPbbCGvAgMBAAGjggo6
MIIKNjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUbHAkQcQZ/UpvGpvVj6IUTiYhEMgwHwYDVR0jBBgw
FoAUx4H1/Y6I2QA8TWOiUDEkoM4j/iMwXgYIKwYBBQUHAQEEUjBQMCcGCCsGAQUF
BzABhhtodHRwOi8vby5wa2kuZ29vZy9zL3dyMy9idEkwJQYIKwYBBQUHMAKGGWh0
dHA6Ly9pLnBraS5nb29nL3dyMy5jcnQwgggLBgNVHREEgggCMIIH/oIec3R1ZGVu
dGNhcmUubW9ybmluZ3N0YXIub3JnLnNngg1kZW1vLmhyZnlzLmRrgg5zbWFydC1z
Y2FuLmFwcIIPY2hpY2hpcGFydHkuY29tghVmaXJlYmFzZS55c3dhbGtlci5jb22C
GHd3dy5vcGVuZGFuY2VtYWRlaXJhLmNvbYIUd3d3LmNoYXJsZXNjYWRkeS5jb22C
F3d3dy5sZW9uYXJkb2NhY2VyZXMuY29tghNwZXJhbGkuaGlyYWt1LnNwYWNlghd0
aXpvLXYxLmNhbmFsY2lyY2xlLmNvbYILc3VtYWkucm9ja3OCDXN0cmVldGFydC5h
cHCCFWRpZ2l0YWwxLmluZGlhMS5jby5pboIUd3d3LmtvbGEtcHVqY292bmEuY3qC
H2NtY2Ftb2NpbS5pdHJhbnNwYXJlbmNpYS5jb20uYnKCFXNtYWxsdGVzdC5tb2pp
ZnVuLmNvbYITc3VuZ2xhc3MuemVlcm8udGVjaIIJdW5pdmEubHRkgg5ib29zdHl0
ZWNoLmNvbYIPYnJld2VkbG9naWMuY29tghJjb29scnVubGltaXRlZC5jb22CEnd3
dy5zeW5jLWVhcnRoLmNvbYIKYWxicmltYS5iZYIMcmVudGJvb2suY29tghd3b3Jk
cHV6emxlLmhkZWdhbWVzLmNvbYITYXBwLnNlcnZpY2V6b2lkLmNvbYIOcnVuZWFz
c2lzdC5jb22CFW5leHQtaW50LnNjYW5zaWVzLmNvbYIZcnViZW5kZWxhaWdsZXNp
YXByZWdhbC5lc4ISYXBwLnNoZWxmdHJlbmQuY29tgg9zaG9vZmRvY3Rvci5jb22C
DWFwcC5pZGVhdGUubnWCCHNhdWxvLmNogiFmaWd1cmUxLWFkbWluLXN0YWdpbmcu
ZmlndXJlMS5jb22CEHd3dy5kZWNvZGFibGUuaW+CEXRoaW5rdGFuay5maW5hbmNl
ghlwcm9jeW9uZmluYW5jaWFsLnBhcnRuZXJzghJ3d3cucnVuZWFzc2lzdC5jb22C
FnNhbmRib3gucm9vc3Rlci1ldS5jb22CEGRldi5tZW1vcmlnaS5jb22CGmFwcG9p
bnRtZW50LmdhcmV0aHBhdWwuY29tghJhcHAud2FscnVzbGFicy5jb22CEGFsZXh0
b3RvbGljaS5jb22CEGJsb2cuamFtaWJvdC5jb22CF3RwYXBwMi1kZXYudGFiaWtv
Ym8uY29tgg91YXQuZnhodWIuY28uemGCE3d3dy5yaWxleXBhcmFkYS5jb22CHXd3
dy5uYWRhbGluaS1wb3J0b2NhcnJlcm8uY29tghVtYXhpbS1kZXZlbG9wbWVudC5j
b22CFHd3dy5zdG9ja2luZ3NhcHAuY29tgg93d3cucmFmdHNiYy5jb22CE3d3dy5y
b2JpbmRvc3NjaGUuYmWCGGphcnZpcy54cHJlc3NkZWxpdmVyeS5jb4ITd3d3Lmlp
c3Vzc3R1ZGlvLmNvbYILZ2VwaXRlci5jb22CGWZhY3RvcnljYXQuY2hyaXNsYXVl
ci5uZXSCC3N0cm9uZ2VyLmJnghMxMTUyMTc5NC5wZWVybHkuYXBwghdyZWNteXN3
aW5nLmF0LXRoZS1tLmNvbYIOa25pZmUtZmlnaHQuaW+CEmxhdG91cm9zZ3lwc3Vt
LmNvbYIMd3d3LmliZWNrLm1lghN3b3JrLmRlbnppbGRveWxlLm1lgg53d3cuZW9q
ZWFoLmFwcIINYmVya3VzdHVuLmNvbYIMa3lyYWxuZXQub3Jngh1hbHBoYS5hdWRp
dHMubHVuYXJ3b3Jrcy5jby51a4IJc25vdXQub3JnghlmYXR3YXMuaXRxYW5pbnN0
aXR1dGUub3JnghB3d3cuOGJpdHlvZGEuY29tghBhbmRhLnF1ZWxpZ2EuY29tghl3
d3cuZGlldGVsZWZvbmlzdGlubmVuLmRlghB3d3cuaW50ZWxsaWV4LmNvggtmaXJl
Lmlvby5saYINYWZmZWN0LWFpLmNvbYIad3d3LmdydWVuZS1uZXVzYWVzczIwMjAu
ZGWCEmJ1cmhhbmluYXR1cmFsLmNvbYIgb25lbGlmZWZpZWxkc3RhZmZhcHAuZmlu
c3RlaW4uYWmCJHNpbXBvc2l1bWRlaWx1bWluYWNpb24uaWVzbWV4aWNvLm9yZ4IX
ZHJlYW1nYW1lcy4xMnRyYWl0cy5jb22CFHd3dy5idXR0aG9sZXNjYW4uY29tghBj
aHViYi53YWxsaXQuYXBwghRlcmVnaXN0ZXJleHByZXNzLmNvbYIOd3d3MS5kb3Rk
aXAuY2GCD3Bob3RvLmJ1czIwLmNvbYIRYm9kZWdhcy5kYWZmbC5jb22CEWRhc2gu
YW5vdmFuZXQuY29tghBwb3J0YWwubm9zdHJhLmFpgg5kanVuZ2Vsb3JtLmNvbYIO
d3d3LmthdG9yaW8uY2GCEXNlcnZpdC50aWRhbm4uZGV2gg1saW5rLnplbm8ubHRk
gg90LnZpbm9meWFwcC5jb22CFGRldi5jYWxsaW5ncXVldWUuY29tgg1hcHAuaW5q
YXVzLmNvghtpZG9sYXRyZS5taWxyYW1hc2FwcC5jb20uYnKCGXd3dy5tYXJpdGlt
ZWNoYW1iZXIuY28uemGCFWJsb2dnZWVrLmZyYW5sb3BzLmNvbYIPam9lcHZhbmRl
cG9sLm5sgg53d3cuZ3JvZG9rLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATA2BgNV
HR8ELzAtMCugKaAnhiVodHRwOi8vYy5wa2kuZ29vZy93cjMvellkWkw4NDJEcEku
Y3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA7s3QZNXbGs7FXLedtM0TojKH
Rny87N7DUUhZRnEftZsAAAGPqdR3IgAABAMARzBFAiEA3CczgtmV4rpslNmlzoc7
fJf321ZzSGOWWjW7ZO1fq5gCIG1Y+M1Gu9R8IFLcXe4ckCk8mItCQk4Q911WP/m8
04P4AHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGPqdR3XwAA
BAMARjBEAiAsAd9LEEmkkZkBZrjj/9EdpKZAUi359aJ7J3iqd1EhrAIgLfZw+Z2h
hu6UJ1x1A1sLRNG/tIyHe6bcHF1NSQIxefQwDQYJKoZIhvcNAQELBQADggEBAELn
N7QwsUA18nLoY+LrSNWTKBljzKrKn8CkJkf4xuyE9PMQiNKYgIdwEGl+D/wiATzI
rYp3b+tUE4B11U8q6RReDJ+6H5TmAxqWPo5AYIOHvm5wKQTcMZhyRWW8BF4k1j/w
Nprumc8+ex7jnXID1xJdzyOXlpcxVt+15gqSWkvAyN/thhcs5LC3hEXjhDmGNxpE
0IHagS9omBO91tpWWMw017MDzSDsgnreGYAbyd1bfjK9FeyvMAhTFaeimPDbAkZU
265jYHsSe0/85Hf//Kg7uaO8UiBXxZt9bfNijahDA+Fy22zNbimlRD656cAHLg/s
0iICFz+oKrKWHHITq0w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147307352201281958274092143952388577005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 08:00:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-22 08:58:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'studentcare.morningstar.org.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c781f5fd8e88d9003c4d63a2503124a0ce23fe23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr3/btI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentcare.morningstar.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.hrfys.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-scan.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chichiparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.yswalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendancemadeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlescaddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonardocaceres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perali.hiraku.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tizo-v1.canalcircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumai.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetart.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital1.india1.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kola-pujcovna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmcamocim.itransparencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smalltest.mojifun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunglass.zeero.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univa.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boostytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewedlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolrunlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sync-earth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albrima.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpuzzle.hdegames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.servicezoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runeassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next-int.scansies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubendelaiglesiapregal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.shelftrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoofdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ideate.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saulo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figure1-admin-staging.figure1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decodable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinktank.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procyonfinancial.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runeassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.rooster-eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.memorigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appointment.garethpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.walruslabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alextotolici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.jamibot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpapp2-dev.tabikobo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fxhub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rileyparada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nadalini-portocarrero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxim-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockingsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raftsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robindossche.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis.xpressdelivery.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iisusstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gepiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factorycat.chrislauer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stronger.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11521794.peerly.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recmyswing.at-the-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knife-fight.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latourosgypsum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibeck.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'work.denzildoyle.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eojeah.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkustun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyralnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.audits.lunarworks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatwas.itqaninstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.8bityoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anda.queliga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dietelefonistinnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intelliex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.ioo.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affect-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gruene-neusaess2020.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burhaninatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelifefieldstaffapp.finstein.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simposiumdeiluminacion.iesmexico.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamgames.12traits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buttholescan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chubb.wallit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eregisterexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.dotdip.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.bus20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodegas.daffl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash.anovanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.nostra.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djungelorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katorio.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servit.tidann.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.zeno.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.vinofyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.callingqueue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.injaus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idolatre.milramasapp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritimechamber.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloggeek.franlops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joepvandepol.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grodok.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr3/zYdZL842DpI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fa9d477220000040300473045022100dc273382d995e2ba6c94d9a5ce873b7c97f7db56734863965a35bb64ed5fab9802206d58f8cd46bbd47c2052dc5dee1c90293c988b42424e10f75d563ff9bcd383f8007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018fa9d4775f000004030046304402202c01df4b1049a491990166b8e3ffd11da4a640522df9f5a27b2778aa775121ac02202df670f99da186ee94275c75035b0b44d1bfb48c877ba6dc1c5d4d49023179f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0042e737b430b14035f272e863e2eb48d593281963ccaaca9fc0a42647f8c6ec84f4f31088d29880877010697e0ffc22013cc8ad8a776feb54138075d54f2ae9145e0c9fba1f94e6031a963e8e40608387be6e702904dc3198724565bc045e24d63ff0369aee99cf3e7b1ee39d7203d7125dcf239796973156dfb5e60a925a4bc0c8dfed86172ce4b0b78445e3843986371a44d081da812f689813bdd6da5658cc34d7b303cd20ec827ade19801bc9dd5b7e32bd15ecaf30085315a7a298f0db024654dbae63607b127b4ffce477fffca83bb9a3bc522057c59b7d6df3628da84303e172db6ccd6e29a5443eb9e9c0072e0fecd22202173fa82ab2961c7213ab4c