webapp.cma.edu.sg

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 01:c7:2c:b3:4e:3c:5b:fc:10:7f:e1:91:bf:c4:f5:28 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webapp.cma.edu.sg

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:c7:2c:b3:4e:3c:5b:fc:10:7f:e1:91:bf:c4:f5:28
Serial Number (int): 2363401702709797998156616419508548904
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 3b:f1:8e:23:b5:f4:0f:78:79:15:57:92:4c:b2:bb:75:f4:b3:63:4b
Fingerprint (sha256): 30:ca:2a:d9:d3:6d:28:99:cb:88:ca:fc:e9:69:75:02:f6:7a:31:55:7c:98:72:f2:82:51:9e:f9:be:f1:6e:82

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/MBfMk7z6-e0
CRL Distribution Point: http://crls.pki.goog/gts1d4/SuXeq4F0tuc.crl

Check the revocation status for certificate webapp.cma.edu.sg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webapp.cma.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webapp.cma.edu.sg
jamilcards.com
app.noovo.cl
ozodinc.com
lodestarapp.com
aesr.tilfin.com
manasamitr.com
suireikai.com
casting.ultrapremiumdirect.com
starcat.dev
admin.lowcostrace.com
geantech-project.ma
kandmrenovation.com
myarmypost.com
www.fongming-studio.tw
www.protosimulator.com
acinettoyage.fr
console.saliency.com
link.thestaymile.com
www.rightroutine.com
www.jimmytang.dev
partners.socialdiese.com
admin.wirolimo.com
app.rxdeliverednow.com
unsceptiqueaubureau.com
admin.latitude360.bitpointx.com.au
toledo-prd.promise-pay.com
staging.promise-pay.com
backoffice-staging.youbumerang.com
www.siproexpress.com
space-check.solvay.com
app.pipestream.tatvic.com
mysalesboard.in
cimm.riseaccel.com
evelight.in
deeperfaith.harul.ro
admin.pickcarmobility.com
auth.pro.adadapted.com
filter-lighthouse-torus-disco-string-seventeen.fairlight.nu
vmeet.lrlcloud.com
mystic-world.co.in
admin.jiujitsuteam.com
nurofy.com
calendar.mojoule.com
superfanstudio.merci-michel.com
www.hisy.in
gife50.it
admin-dev.serveedo.com
lavacarrental.caren.io
www.shriramnursinghome.com
www.ourse.online
www.sun360.co.in
achievebot.fdmt.hk
zzas11.me
www.llegamarket.com
www.lighttourandtravels.com
jli-union.com
uniben.portalcliente.izii.io
www.hasini.lk
www.leemcrae.net
locationti.me
artlock.dnode.link
birdhabits.mx
www.thechiliwey.com
www.pivotflix.com
squad.peprix.io
service.alko-garden.ge
inventory.fifthventricle.in
bingo.sharpmind.de
mrperfume.pk
uniben.hml.portalcliente.izii.io
www.birdhabits.mx
auth.mixed.games
calla-dev.valuesccg.net
delivery.qizy.in
fortunepandaadmin.online
kdsoctrang.xbot.com.vn
app.snapdown.io
buzzer.banan4.com
stg.busica.jp
datingstack.com
aiasanta.org
form-dev.fynchmobility.com
studioesencia.site
www.kenu.me
www.vanterwis.ga
mlt-prod.da.letsdive.io
www.admin.planl.nl
gracent.tech
moogle.wiki
foodfeels.xyz
gestaltor.store
discord.docsoc.co.uk
qrdemo.resourcify.de
auth.www.filmflex.in
private-equity-in-media.briefcase.news
mullet.town
hi.creditplus.ua
aseestance.uk
www.leloo.it

Other certificates including the domain name cma.edu.sg

(limited to 100 certificates)
apiapp.cma.edu.sg
www.eminsinani.com
cma.edu.sg
saml.siftai.com
wpapp.cma.edu.sg
trial.cma.edu.sg
firstdot.io
cma.edu.sg
cma.edu.sg
raceme.io
webapp.cma.edu.sg
adminapp.cma.edu.sg
pixis.eganhub.spark-staging.dev
cma-edu-sg.tsccma.com
enrichment.cma.edu.sg
cma.edu.sg
www.alextomkins.ca
www.eminsinani.com
wpapp.cma.edu.sg
enrichment.cma.edu.sg
cma.edu.sg
www.localfluence.com
www.cgdcounselling.com
webapp.cma.edu.sg
admin.audioluceslimitada.com
www.cgdcounselling.com
adminapp.cma.edu.sg
www.dontlaughatmygiraffe.com
www.david-rebecca.fr
cma.edu.sg
votations.tdg.ch
trial.cma.edu.sg
cma.edu.sg
enrichment.cma.edu.sg
midnightnursery.ca
sbstransit-test.quicta.io
trial.cma.edu.sg
enrichment.cma.edu.sg
mastertradecrypto.com
cma.edu.sg
enrichment.cma.edu.sg
en.revitalair.com
cma.edu.sg
cma.edu.sg
www.taddcreations.com
admin.pickcarmobility.com
trial.cma.edu.sg
apiapp.cma.edu.sg
cma.edu.sg
cma.edu.sg
kanban.institute
cma.edu.sg
cma.edu.sg
enrichment.cma.edu.sg
webapp.cma.edu.sg
trial.cma.edu.sg
enrichment.cma.edu.sg
portal.cloverbyte.com
www.dontlaughatmygiraffe.com
cma.edu.sg
votations.tdg.ch
trnstfile-s.dev-ltl-xpo.com

Certificate

The complete raw certificate details for webapp.cma.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2363401702709797998156616419508548904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 03:26:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 04:24:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webapp.cma.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/MBfMk7z6-e0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2099 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.cma.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamilcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.noovo.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozodinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lodestarapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesr.tilfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manasamitr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suireikai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casting.ultrapremiumdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starcat.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lowcostrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geantech-project.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kandmrenovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myarmypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fongming-studio.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protosimulator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acinettoyage.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.saliency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.thestaymile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightroutine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jimmytang.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.socialdiese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wirolimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rxdeliverednow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsceptiqueaubureau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.latitude360.bitpointx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toledo-prd.promise-pay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.promise-pay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice-staging.youbumerang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siproexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'space-check.solvay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pipestream.tatvic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysalesboard.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimm.riseaccel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evelight.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeperfaith.harul.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pickcarmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.pro.adadapted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filter-lighthouse-torus-disco-string-seventeen.fairlight.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmeet.lrlcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystic-world.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jiujitsuteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurofy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.mojoule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superfanstudio.merci-michel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hisy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gife50.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-dev.serveedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavacarrental.caren.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shriramnursinghome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourse.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sun360.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achievebot.fdmt.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzas11.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llegamarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lighttourandtravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jli-union.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniben.portalcliente.izii.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hasini.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leemcrae.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locationti.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artlock.dnode.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdhabits.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thechiliwey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pivotflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squad.peprix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.alko-garden.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inventory.fifthventricle.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bingo.sharpmind.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrperfume.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniben.hml.portalcliente.izii.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birdhabits.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mixed.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calla-dev.valuesccg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.qizy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortunepandaadmin.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdsoctrang.xbot.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.snapdown.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzer.banan4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.busica.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datingstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiasanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form-dev.fynchmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioesencia.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanterwis.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlt-prod.da.letsdive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.planl.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracent.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moogle.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodfeels.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestaltor.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discord.docsoc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrdemo.resourcify.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.www.filmflex.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-equity-in-media.briefcase.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mullet.town'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.creditplus.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aseestance.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leloo.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/SuXeq4F0tuc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e698f946c000004030047304502201b3cba28685f378653775dc2df5e9ecf148c1a9df571e28f8a25fdb4fcbc199f022100b50d581cfeba93647580aab5ef1fb69728f053f04652b9cada9c5af0f9fd75ff007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e698f94a60000040300483046022100e62046994bc1bcbab9e66d99d886d57f557ee65753fe957101446c28605f6d91022100b6991b4331180c7022ba864836aea2fbb0703334ab8da54c16fa21b21177c8ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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