go.trantuanminh.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 08:71:d4:23:2b:36:20:53:09:83:63:bb:d0:f2:3b:ac was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=go.trantuanminh.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:71:d4:23:2b:36:20:53:09:83:63:bb:d0:f2:3b:ac
Serial Number (int): 11224856168488714722705834262500883372
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 5a:7c:f6:90:b2:a3:87:02:91:9f:0a:a9:da:8e:88:a5:3c:75:c7:5a
Fingerprint (sha256): 2f:78:47:7d:9e:c6:6c:2b:ae:e6:ca:6e:1c:47:3e:0c:5d:ad:88:3f:4a:68:69:16:3f:e4:44:96:69:8f:cc:0d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/ZSRl6_tVIs0
CRL Distribution Point: http://crls.pki.goog/gts1d4/d_e-NFnCJs8.crl

Check the revocation status for certificate go.trantuanminh.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.trantuanminh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.trantuanminh.com
dailydentist.ca
www.rutasegura.co
bizcardswallet.com
collaborativespirits.com
dantebaked.com
www.collaborativespirits.com
www.ivlivs.dev
meta.humans.work
beneficiario-hml.doctorclin.com.br
exchange.dexkit.com
training.lektorconsulting.com
itbh.at
www.cvmetalproducts.ca
www.delilahs.club
dmvglassllc.com
barekraft.ruter.no
www.infusiatte.com
ebuendiaf.com
portal.browns.darivault.com
getanamazingfuture.com
cookiesbis.com
www.transportescite.com
uren.educared.nl
phone-control.bellinmuseum.art
agropetsca.com
www.adroitoverseas.com
www.ekgoshta.com
www.shamim.app
www.eroticaudit.com
www.liplus-research.com
www.halasmi.com
www.lendbrary.com
hajonsoft.com
pnjbeautyshop-portal.hermes.aimgt.info
ww11.eroticaudit.com
datamosaic.staging.exploration.tools
fattypattyrestaurants.com
guest.hotel.chameon.app
lindasconfectioneries.com
www.croodsinc.com
etmoi.rostrenen.bzh
www.easton.co.in
navi.hogs.pl
api.appacus.hr
domumgym.com
dimsdeall.my.id
goodboyorsweetgirl.com
headlinerr.com
www.mylife.bio
stukkateur-koch.de
recycling-point.com
partify.kaibersz.in
www.adventuresinwonderland.io
da-gen.com
www.rptracker.com
se2c.de
ijmond.anchiano.nl
it.roti.io
camscott.nz
www.veralink.io
www.idolschoolmetaverse.com
www.prath.am
www.sesterce.app
grabthatspot.com
www.shadeai.ai
www.talleratres.com.ar
hci2023group610.tk
lacasadedrink.com
nlh.whyq.com.au
links.oriflame.synetech.cz
www.ridehugo.com
www.xdroppro.com
auth.stg.minga.io
icplus.cl
candl.fan
www.amjad.ca
message.gesture.gifts
anvinhtr.com
www.growbud.app
digatools.com
www.dustinbelliston.com
www.dahobi.com
frompersona.com
ukie.app
app-staging.geneowebapp.com
demo.workdesk.care
nivertech.com
app.kennedybio.com
charts-cd.hgmelectronics.com
homolog-app.usefixit.com
ivanostahoe.com
cutlassware.com
adabar.io
bgaworks.com
www.openspegt.com
kemal.elmizan.com
rvm.ltl-xpo.com
glory.company
mianaguo.com

Other certificates including the domain name trantuanminh.com

(limited to 100 certificates)
hillstarmedia.com
www.trantuanminh.com
trantuanminh.com
cdn.trantuanminh.com
shabeerpk.com
www.trantuanminh.com
phone-control.bellinmuseum.art
www.appricode.co
go.trantuanminh.com
shabeerpk.com
go.trantuanminh.com
riserhouse.mandolin.com
trantuanminh.com
top.smartseniorsavings.com
techki.com.au
machupicchu.viajes
app.electroluxlife.electroluxmobile.com
machupicchu.viajes
soft.trantuanminh.com
claimassist-ag-pilot-2.galaxy.ai
actor.ondrejbures.com
sni.cloudflaressl.com
go.trantuanminh.com
cdn.trantuanminh.com
sni.cloudflaressl.com
blog.trantuanminh.com
claimassist-ag-pilot-2.galaxy.ai
sni.cloudflaressl.com
www.gureum.me
sni.cloudflaressl.com
it.trantuanminh.com
www.thebakery.xyz
cdn.trantuanminh.com
eoko.org
made-in.africa
blog.trantuanminh.com
trantuanminh.com
menoctyl.mayamd.ai
formulasite.com.br
www.getfapulator.com
sni.cloudflaressl.com
login.raisely.app
www.trantuanminh.com
api.ricaud.dev
sni.cloudflaressl.com
it.trantuanminh.com
cdn.trantuanminh.com
rieaya.com
tamaru.app
blog.trantuanminh.com
blog.trantuanminh.com

Certificate

The complete raw certificate details for go.trantuanminh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11224856168488714722705834262500883372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 10:28:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 11:25:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.trantuanminh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/ZSRl6_tVIs0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1977 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.trantuanminh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailydentist.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutasegura.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizcardswallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborativespirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantebaked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collaborativespirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivlivs.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meta.humans.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneficiario-hml.doctorclin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.dexkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.lektorconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itbh.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvmetalproducts.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delilahs.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmvglassllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barekraft.ruter.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infusiatte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebuendiaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.browns.darivault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getanamazingfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookiesbis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transportescite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uren.educared.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phone-control.bellinmuseum.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agropetsca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adroitoverseas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ekgoshta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shamim.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eroticaudit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liplus-research.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halasmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lendbrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hajonsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnjbeautyshop-portal.hermes.aimgt.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww11.eroticaudit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datamosaic.staging.exploration.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fattypattyrestaurants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guest.hotel.chameon.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindasconfectioneries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croodsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etmoi.rostrenen.bzh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easton.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navi.hogs.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.appacus.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domumgym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimsdeall.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodboyorsweetgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headlinerr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mylife.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stukkateur-koch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recycling-point.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partify.kaibersz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventuresinwonderland.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da-gen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rptracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se2c.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijmond.anchiano.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.roti.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camscott.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veralink.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idolschoolmetaverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prath.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sesterce.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grabthatspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shadeai.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talleratres.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hci2023group610.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacasadedrink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlh.whyq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.oriflame.synetech.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ridehugo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xdroppro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.stg.minga.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icplus.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candl.fan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amjad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.gesture.gifts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anvinhtr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growbud.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digatools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dustinbelliston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dahobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frompersona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukie.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-staging.geneowebapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.workdesk.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nivertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kennedybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charts-cd.hgmelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homolog-app.usefixit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanostahoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutlassware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adabar.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgaworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openspegt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemal.elmizan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvm.ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glory.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mianaguo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/d_e-NFnCJs8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a98993d2f0000040300483046022100c2cf792c60a6c9a6235c8c8afa6ac990eaa8c37075d4bef8024c78d869086cd8022100e4684f7f4b5662a8e2e53caadd95ce0cfacba2db6e735276225aa427a09730090077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a98993d630000040300483046022100e38acf0d1246e664630cf611742f0906a67867b127914a71e477a8933e84b050022100aad60f990e3595d9f9ce4bd01a7b1bdbdb496e361d9193335ec9ccc302b2f557
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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