heerbrugg.avdis.ch

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ef:68:f9:19:d6:64:f0:7c:0a:fb:86:40:4d:d5:7c:c4 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=heerbrugg.avdis.ch

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ef:68:f9:19:d6:64:f0:7c:0a:fb:86:40:4d:d5:7c:c4
Serial Number (int): 318230542232929708159793896979095190724
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): a3:84:ea:6c:bf:5f:3b:27:3e:86:ac:25:55:4f:e0:cd:54:77:35:3e
Fingerprint (sha256): 30:e6:95:14:28:28:1d:7f:c2:4a:19:57:5d:38:3c:48:45:5c:6b:da:7f:57:c3:c9:17:37:e7:bc:93:12:52:ca

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/33dxkEE4Law
CRL Distribution Point: http://crls.pki.goog/gts1d4/3WiQwaWyyyo.crl

Check the revocation status for certificate heerbrugg.avdis.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heerbrugg.avdis.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heerbrugg.avdis.ch
finnovex.com
www.e-zbraslav.cz
view.getboostar.com
www.vinitaisnotana.me
www.arquba.co
www.equinox-cels.com
app.moodcompanion.com
login.langmaster.cz
livescorecards.com
novopatrimonio.com.br
popmove.com.br
www.bookallied.com
mobile.thetag.app
www.metatribute.metaqube.ai
go.komenteo.com
pilavstudios.com
www.commcards.com
nullbrewing.com
parthpadhiyar.com
apps.transportamf.ca
policy.skllzz.com
password-change-dev.1stcutoutings.com
nikolinaspirkovska.com
lagerstro.com
groovytask-dev.nerdyhippie.com
app.gottajoga.com
audio.selimcan.org
sym-n.com
www.ramoncuni.com
www.sandhillsartisan.com
stage.requid.com
dev-console.mimi.fd.ai
invite.newwit.com
kubruk.com
www.dominicandcompany.com
ncataggiescamps.com
www.richardbound.com
rocketmpprints22.com
supertaal.com
test.theeuwes-it.com
www.landesmark.com
edftw.com
www.uae.ihhsfair.com
deletefacebook.me
sandbox-concierge.poshvine.com
s.hotplate.com
go.icarebase.com
sphere88.com
rwl.weatherlogics.com
abetterdomainna.me
auth-staging.southpole.com
mariia-pankiv.me
stichtingjustitia.nl
ccm-demo.column.us
app.karatesnap.com
www.dropyonline.com
payam.de
demoescolar.schoolmarket.mx
app.zenwireframe.com
www.assisthub.io
www.todoaholic.com
dev-niceukraine.afuca.fr
www.lennoxdigital.com.au
tparc.xtend.properties
whitehacker.in
auth.ez-translate.co.il
www.mattheweric.com
www.sufera.com
m.2nd.gdn
www.ohyureka.com
app.talloo.com
devndata.com
tzuckim.rezidnet.com
so.express
www.wifiqrcode.com
www.outwitoutplayoutlast.app
walletwatcher.app
www.sexplorers.app
magnoliasensuel.fourby4.sg
admin.theweekendwarriors.com
www.theweekendwarriors.com
blackstire.tcsappts.com
mantrailing.app
actionnaire.monjuridique.infogreffe.fr
signin.tribecacare.com
pandicorn.app
www.tap.place
worduel.app
provincies.goedgesprek.app
backoffice.innerlyze.com
tablerox.app
ie-buster.qranoko.jp
www.wdg.me
www.narumi.app
yesdelft.venturebuilding.nl
contact.viewdigicard.com
a-c.app
www.movevirgo.co.uk
gulya.ch

Other certificates including the domain name avdis.ch

(limited to 100 certificates)
jayharveyspeaks.com
loren.propertyservicesexchange.com
microsystems.group
www.train-it.ro
avdis.ch
avdis.ch
webapp.flaner.com
raizdobrasil.com.br
the-tipping-point.info
haristudio.in
12n.app
buttwil.avdis.ch
naturheilpraxis-heetel.de
papergreen.in
jaquelinesilvapsicologa.com.br
grinari.com
litescan.io
predictivedata.ai
coordinatedcampaign.com
www.zudello.com
punditscope.com
quiz.golden-days.se
propl.in
genrephile.com
klaaslandsman.com
getmarketingtips.io
www.probooks.com
sanmarcos.marcafranca.com
jaquelinesilvapsicologa.com.br
bbf2.autolmeventos.com.br
admin.dictiro.de
school.subashreepublishers.com
prais.app
admin.waidy.it
k.koopid.ai
ringoid.app
nebikon.avdis.ch
all-finanz-regulierung.ch
www.semrush.vidon.ai
neets.wenstravel.ro
ssas.retirement.capital
solstis.xyz
myreportgenie.com
www.tkvelmos.ru
tumur.me
avdis.ch
sub52.rukab.xyz
www.fictionalthought.com
auth.allotta.io
admin.placeshaker.fr
www.srinivasank.net
coordinatedcampaign.com
aww.hawawa.tech
tracksugode.infomega.biz
webapp.flaner.com
mrewebsolutions.com
datalogics.pl
app.studyaffmarketing.com
manage.aigens.com
dev-links.resident.love
dev.codeheroes.app
www.verbia.systems
avdis.ch
takeup.dev
www.teachings.io
share.klinikals.com
www.fruity-flowers.de
communications.chief.systems
lojaalmeida.com
tuition.alfurqanacademy.co.uk
pruebas.neumobot.com
avdis.ch
viewer.structionsite.com
mijn.klikkie.nl
ugenc.com
avdis.ch
concretebyclassic.ca
blunet.avdis.ch
my.coinapp.co
www.vitaminbre.com
ctor.app
spike.episilia.net
word.classicaleffect.com
newswav.app
avdis.ch
songbook.ukelerele.com
q2.promptl.ink
heerbrugg.avdis.ch
qr.solkos.com.mx
www.kanatozgen.com
rxlogics.com
www.hellovallalkozo.hu
family.mcdonaldsnederland.app
avdis.ch
avdis.ch
opfikon.avdis.ch
ladecadencia.com
www.sasu-ou-eurl.fr
www.shylemon.co
bassersdorf.avdis.ch

Certificate

The complete raw certificate details for heerbrugg.avdis.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINXTCCDEWgAwIBAgIRAO9o+RnWZPB8CvuGQE3VfMQwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMxMDMwMDI1NjA0WhcNMjQwMTI4
MDM1MzEzWjAdMRswGQYDVQQDExJoZWVyYnJ1Z2cuYXZkaXMuY2gwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIDj51QpaAyxyMLB6KzB6Dj8DTy7Gt8co
3AacDr/P443tnK1ZoCC/H6r4RKqCB9U5jrxiCwSJOcegOGmCCtatvrYJ/8cF6LrM
PjC4kAIVEzgq1IpYcgWyP2MthqppaIib8LPih+znXBICLEjz2WWEwD2n79SJq3tf
djediGt/F8FDglFPqOfk73xzyq/YywJbdk1OhvlZHpYnEFLZBaT/+1UwyM5OGLr3
BqHXdsgVyCXekGUP/K5ELQn33VOpZX0JiBXXJTW2yHj0IRdkPzaNeq0ThQJQnZVH
gbCtGFymhrHNw6uFPIQ+diUcvYucRtDYkkpF0Yw56A6xV2Vzd76BAgMBAAGjggpt
MIIKaTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUBqnc2RQ9UPUbmO223RHnvRa3DPwwHwYDVR0jBBgw
FoAUJeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUF
BzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC8zM2R4a0VFNExhdzAx
BggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRl
cjCCCA8GA1UdEQSCCAYwgggCghJoZWVyYnJ1Z2cuYXZkaXMuY2iCDGZpbm5vdmV4
LmNvbYIRd3d3LmUtemJyYXNsYXYuY3qCE3ZpZXcuZ2V0Ym9vc3Rhci5jb22CFXd3
dy52aW5pdGFpc25vdGFuYS5tZYINd3d3LmFycXViYS5jb4IUd3d3LmVxdWlub3gt
Y2Vscy5jb22CFWFwcC5tb29kY29tcGFuaW9uLmNvbYITbG9naW4ubGFuZ21hc3Rl
ci5jeoISbGl2ZXNjb3JlY2FyZHMuY29tghVub3ZvcGF0cmltb25pby5jb20uYnKC
DnBvcG1vdmUuY29tLmJyghJ3d3cuYm9va2FsbGllZC5jb22CEW1vYmlsZS50aGV0
YWcuYXBwght3d3cubWV0YXRyaWJ1dGUubWV0YXF1YmUuYWmCD2dvLmtvbWVudGVv
LmNvbYIQcGlsYXZzdHVkaW9zLmNvbYIRd3d3LmNvbW1jYXJkcy5jb22CD251bGxi
cmV3aW5nLmNvbYIRcGFydGhwYWRoaXlhci5jb22CFGFwcHMudHJhbnNwb3J0YW1m
LmNhghFwb2xpY3kuc2tsbHp6LmNvbYIlcGFzc3dvcmQtY2hhbmdlLWRldi4xc3Rj
dXRvdXRpbmdzLmNvbYIWbmlrb2xpbmFzcGlya292c2thLmNvbYINbGFnZXJzdHJv
LmNvbYIeZ3Jvb3Z5dGFzay1kZXYubmVyZHloaXBwaWUuY29tghFhcHAuZ290dGFq
b2dhLmNvbYISYXVkaW8uc2VsaW1jYW4ub3JngglzeW0tbi5jb22CEXd3dy5yYW1v
bmN1bmkuY29tghh3d3cuc2FuZGhpbGxzYXJ0aXNhbi5jb22CEHN0YWdlLnJlcXVp
ZC5jb22CFmRldi1jb25zb2xlLm1pbWkuZmQuYWmCEWludml0ZS5uZXd3aXQuY29t
ggprdWJydWsuY29tghl3d3cuZG9taW5pY2FuZGNvbXBhbnkuY29tghNuY2F0YWdn
aWVzY2FtcHMuY29tghR3d3cucmljaGFyZGJvdW5kLmNvbYIUcm9ja2V0bXBwcmlu
dHMyMi5jb22CDXN1cGVydGFhbC5jb22CFHRlc3QudGhlZXV3ZXMtaXQuY29tghJ3
d3cubGFuZGVzbWFyay5jb22CCWVkZnR3LmNvbYIUd3d3LnVhZS5paGhzZmFpci5j
b22CEWRlbGV0ZWZhY2Vib29rLm1lgh5zYW5kYm94LWNvbmNpZXJnZS5wb3Nodmlu
ZS5jb22CDnMuaG90cGxhdGUuY29tghBnby5pY2FyZWJhc2UuY29tggxzcGhlcmU4
OC5jb22CFXJ3bC53ZWF0aGVybG9naWNzLmNvbYISYWJldHRlcmRvbWFpbm5hLm1l
ghphdXRoLXN0YWdpbmcuc291dGhwb2xlLmNvbYIQbWFyaWlhLXBhbmtpdi5tZYIU
c3RpY2h0aW5nanVzdGl0aWEubmyCEmNjbS1kZW1vLmNvbHVtbi51c4ISYXBwLmth
cmF0ZXNuYXAuY29tghN3d3cuZHJvcHlvbmxpbmUuY29tgghwYXlhbS5kZYIbZGVt
b2VzY29sYXIuc2Nob29sbWFya2V0Lm14ghRhcHAuemVud2lyZWZyYW1lLmNvbYIQ
d3d3LmFzc2lzdGh1Yi5pb4ISd3d3LnRvZG9haG9saWMuY29tghhkZXYtbmljZXVr
cmFpbmUuYWZ1Y2EuZnKCGHd3dy5sZW5ub3hkaWdpdGFsLmNvbS5hdYIWdHBhcmMu
eHRlbmQucHJvcGVydGllc4IOd2hpdGVoYWNrZXIuaW6CF2F1dGguZXotdHJhbnNs
YXRlLmNvLmlsghN3d3cubWF0dGhld2VyaWMuY29tgg53d3cuc3VmZXJhLmNvbYIJ
bS4ybmQuZ2RughB3d3cub2h5dXJla2EuY29tgg5hcHAudGFsbG9vLmNvbYIMZGV2
bmRhdGEuY29tghR0enVja2ltLnJlemlkbmV0LmNvbYIKc28uZXhwcmVzc4ISd3d3
LndpZmlxcmNvZGUuY29tghx3d3cub3V0d2l0b3V0cGxheW91dGxhc3QuYXBwghF3
YWxsZXR3YXRjaGVyLmFwcIISd3d3LnNleHBsb3JlcnMuYXBwghptYWdub2xpYXNl
bnN1ZWwuZm91cmJ5NC5zZ4IcYWRtaW4udGhld2Vla2VuZHdhcnJpb3JzLmNvbYIa
d3d3LnRoZXdlZWtlbmR3YXJyaW9ycy5jb22CF2JsYWNrc3RpcmUudGNzYXBwdHMu
Y29tgg9tYW50cmFpbGluZy5hcHCCJmFjdGlvbm5haXJlLm1vbmp1cmlkaXF1ZS5p
bmZvZ3JlZmZlLmZyghZzaWduaW4udHJpYmVjYWNhcmUuY29tgg1wYW5kaWNvcm4u
YXBwgg13d3cudGFwLnBsYWNlggt3b3JkdWVsLmFwcIIacHJvdmluY2llcy5nb2Vk
Z2VzcHJlay5hcHCCGGJhY2tvZmZpY2UuaW5uZXJseXplLmNvbYIMdGFibGVyb3gu
YXBwghRpZS1idXN0ZXIucXJhbm9rby5qcIIKd3d3LndkZy5tZYIOd3d3Lm5hcnVt
aS5hcHCCG3llc2RlbGZ0LnZlbnR1cmVidWlsZGluZy5ubIIYY29udGFjdC52aWV3
ZGlnaWNhcmQuY29tggdhLWMuYXBwghN3d3cubW92ZXZpcmdvLmNvLnVrgghndWx5
YS5jaDAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1
MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFkNC8zV2lRd2FXeXl5
by5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB2/4g/Crb7lVHCYcz1h7o0
tKTNuyncaEIKn+ZnTFo6dAAAAYt+uXgRAAAEAwBHMEUCIQDimB8QOq3YzTypZOi+
MraTmDvzdHH+sPvPj3gvrpHiQAIgVzvpZConeLJrOGc5GfRgCShFVOVGBHMQZYuo
qA8yVx4AdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYt+uXkG
AAAEAwBHMEUCIFo2Sn1ursrVn9kk1l9ACrAAL8ZuNJVnW8VL4bJQsg4FAiEA0wEl
oygVO4ocY0vX17jQA5jBmZw5MwplfdrBLoHFKIAwDQYJKoZIhvcNAQELBQADggEB
AFOL+D5WTf/+zDjZaZNj8kMnbh0TRvMDyK2MESNYxnUBsDgqKDSJ2tife7VXvUPA
35cTiWGENsDZRcqaTzBkCIemmew0DRiwtEbZ7z7Wd5NxWuAS+tHsbOR589Kjk+p6
GHtLAXOeHODIb+agbbl2dT7gaTpHuWoQao4vUIFm/k2nhCFZqFcG1Z6gYPt/Gt4R
ZBauyEW4M7wt2TfOOfNFec8Vdceh3vl33YAGY5Jpbm+gdTO7emnqe2P3O/exZxjv
V9fcr7boOltcIlLhNj+7oufjcXsi0yWQY/t1ddCf8B7p2V+lxjWxkKHV+T0Kpy0d
cE5YyJH8sIQfBzI0K2y9b3A=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318230542232929708159793896979095190724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 02:56:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 03:53:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heerbrugg.avdis.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/33dxkEE4Law'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heerbrugg.avdis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finnovex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-zbraslav.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.getboostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinitaisnotana.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arquba.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equinox-cels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.moodcompanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.langmaster.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livescorecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novopatrimonio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popmove.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookallied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.thetag.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metatribute.metaqube.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.komenteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilavstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nullbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parthpadhiyar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.transportamf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policy.skllzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'password-change-dev.1stcutoutings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikolinaspirkovska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagerstro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groovytask-dev.nerdyhippie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gottajoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audio.selimcan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sym-n.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramoncuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandhillsartisan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.requid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-console.mimi.fd.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite.newwit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubruk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominicandcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncataggiescamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketmpprints22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supertaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.theeuwes-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landesmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edftw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uae.ihhsfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deletefacebook.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-concierge.poshvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.hotplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.icarebase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sphere88.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwl.weatherlogics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abetterdomainna.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-staging.southpole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariia-pankiv.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stichtingjustitia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm-demo.column.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.karatesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dropyonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoescolar.schoolmarket.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.zenwireframe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assisthub.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.todoaholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-niceukraine.afuca.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lennoxdigital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tparc.xtend.properties'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehacker.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.ez-translate.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mattheweric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sufera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.2nd.gdn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohyureka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.talloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devndata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tzuckim.rezidnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'so.express'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wifiqrcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outwitoutplayoutlast.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walletwatcher.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sexplorers.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnoliasensuel.fourby4.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.theweekendwarriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theweekendwarriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackstire.tcsappts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantrailing.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionnaire.monjuridique.infogreffe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.tribecacare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandicorn.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tap.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worduel.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincies.goedgesprek.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.innerlyze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablerox.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie-buster.qranoko.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdg.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.narumi.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesdelft.venturebuilding.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.viewdigicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-c.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movevirgo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulya.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/3WiQwaWyyyo.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b7eb978110000040300473045022100e2981f103aadd8cd3ca964e8be32b693983bf37471feb0fbcf8f782fae91e2400220573be9642a2778b26b38673919f46009284554e546047310658ba8a80f32571e007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b7eb97906000004030047304502205a364a7d6eaecad59fd924d65f400ab0002fc66e3495675bc54be1b250b20e05022100d30125a328153b8a1c634bd7d7b8d00398c1999c39330a657ddac12e81c52880
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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