firebaseapp.com

- Firebase, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 3a:b6:55:76:cb:4f:9c:2d:b8:7b:95:ab was issued on by GlobalSign nv-sa.

With 132 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Firebase, Inc.

Organization: Firebase, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:b6:55:76:cb:4f:9c:2d:b8:7b:95:ab
Serial Number (int): 18170558661324820946446161323
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 89:ab:e6:21:ac:54:6c:1f:64:8f:8c:75:1c:b2:1c:ec:fe:2c:70:52
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 77:89:20:40:42:b9:c9:33:77:a1:66:51:11:7e:34:65:73:d2:50:bf
Fingerprint (sha256): 33:fb:a4:5f:08:1b:cf:e2:74:9a:36:db:fd:86:72:be:d8:88:35:a8:d2:b2:4f:c9:89:86:39:fd:7a:62:4e:59

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate firebaseapp.com

132

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for firebaseapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

firebaseapp.com
*.firebaseapp.com
aravindputrevu.in
*.aravindputrevu.in
arkheon.com.br
*.arkheon.com.br
aspsele.com
*.aspsele.com
ayatk.com
*.ayatk.com
battlerok.com
*.battlerok.com
binnurmadencilik.com
*.binnurmadencilik.com
budgefrownie.com
*.budgefrownie.com
corsa.consulting
*.corsa.consulting
devfest.com.br
*.devfest.com.br
dicey.company
*.dicey.company
eelessons.com
*.eelessons.com
factualfood.com
*.factualfood.com
felix-halim.net
*.felix-halim.net
finozen.com
*.finozen.com
flameweb.com.au
*.flameweb.com.au
foodicize.me
*.foodicize.me
foxx-framework.com
*.foxx-framework.com
freemanweb.jp
*.freemanweb.jp
gdgporto.xyz
*.gdgporto.xyz
gstsamadhaan.com
*.gstsamadhaan.com
gtlab.co
*.gtlab.co
h2oaguaviva.cl
*.h2oaguaviva.cl
hasilpaudyal.tk
*.hasilpaudyal.tk
healthywaterohio.org
*.healthywaterohio.org
horsingboard.com
*.horsingboard.com
hoyt.io
*.hoyt.io
humancentered.io
*.humancentered.io
hv.com.ua
*.hv.com.ua
jeff-hage.com
*.jeff-hage.com
kevinchow.co
*.kevinchow.co
kingrtp.com
*.kingrtp.com
lifetouch.io
*.lifetouch.io
lizardpic.com
*.lizardpic.com
lovebarrel.org
*.lovebarrel.org
madebyjun.com
*.madebyjun.com
motorcycleyogi.com
*.motorcycleyogi.com
nextamericanpresident.org
*.nextamericanpresident.org
nirgn.com
*.nirgn.com
pattern.mx
*.pattern.mx
pavelkaltygin.com
*.pavelkaltygin.com
pixsure.co.uk
*.pixsure.co.uk
playstudios.tech
*.playstudios.tech
rangoon.com.br
*.rangoon.com.br
rivablindsadmin.com.au
*.rivablindsadmin.com.au
rotify.com.br
*.rotify.com.br
rupt.io
*.rupt.io
sellclic.com
*.sellclic.com
sheppard.be
*.sheppard.be
sherpafiber.com
*.sherpafiber.com
shopgro.in
*.shopgro.in
spkr.co.uk
*.spkr.co.uk
surmotriz.com
*.surmotriz.com
thegioiorder.com
*.thegioiorder.com
toshab.com
*.toshab.com
totalfood-hersheys.com.tw
*.totalfood-hersheys.com.tw
tradematesports.com
*.tradematesports.com
trendaro.cz
*.trendaro.cz
trytrippy.com
*.trytrippy.com
tuinposterland.nl
*.tuinposterland.nl
twinjack.com
*.twinjack.com
vitallium-app.com
*.vitallium-app.com
wearesharecare.co.uk
*.wearesharecare.co.uk
whatdoisay.at
*.whatdoisay.at
wolley.com.br
*.wolley.com.br
xvx.tokyo
*.xvx.tokyo

Certificate

The complete raw certificate details for firebaseapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30ieIVClFusDLYouEyIy
A9eIBNzkAKKs/UfUmdwmtlTf4+AyBUMede76m0g99dwfa2O97FpWSAgVeSQMNRzw
0ADsbs01FJCnP1J8ligsTWOArBK0zHLakquNLtq4DD0dHf1abviN3vGeBk8yPVzQ
kTSkka283m9uYtQoHkoagJn3fjj0I9U/fm6Q85neP2n4IqgpEXeMZ6E6p9YgXADb
PMy5z6LDjkz0PXvtc/wCoMan0XlHyb72K9rzpwFNqYfC3Ng3X+4lfNJvfCJEGzL2
glKh+JYc8YFOER5pbTDtbZop0GQFbNmcgZ7QjPOoIne2ypzkrs7Jzjv8KN1DfRSO
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18170558661324820946446161323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-10 17:59:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-01 14:22:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Firebase, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'firebaseapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28186951127877349934649667746855260533656754468158066646870760964467918830407608136261057848663573501212567219300404348483640979588549557057045898770786154259991571274937355876263948376227747723259274636011653376822729887877399319020954125660444615299150708722068574115268104106349838816911881390272086604935344555560469620232681281020328442666117480372254922989029348283033583988123222784671937967634803606384785421295940733579457163190271683870445346474100943778577332571146049655350635505631540974672562073460614230087594830813619208109462386041276554944553548390736458784985342674014560975212575918752581754850829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firebaseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aravindputrevu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aravindputrevu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkheon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkheon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspsele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspsele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayatk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ayatk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'battlerok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlerok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binnurmadencilik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binnurmadencilik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgefrownie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgefrownie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsa.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corsa.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfest.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devfest.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicey.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dicey.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eelessons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eelessons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factualfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factualfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felix-halim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.felix-halim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finozen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finozen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flameweb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flameweb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodicize.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodicize.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxx-framework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxx-framework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemanweb.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemanweb.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdgporto.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gdgporto.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstsamadhaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gstsamadhaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtlab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2oaguaviva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h2oaguaviva.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasilpaudyal.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasilpaudyal.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthywaterohio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthywaterohio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horsingboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horsingboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoyt.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoyt.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humancentered.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.humancentered.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hv.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hv.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeff-hage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeff-hage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevinchow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kevinchow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingrtp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingrtp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetouch.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifetouch.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lizardpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lizardpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovebarrel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovebarrel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madebyjun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madebyjun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorcycleyogi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorcycleyogi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextamericanpresident.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextamericanpresident.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirgn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nirgn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pattern.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pattern.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pavelkaltygin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pavelkaltygin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixsure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixsure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playstudios.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playstudios.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangoon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rangoon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivablindsadmin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivablindsadmin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotify.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotify.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rupt.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rupt.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sellclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheppard.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheppard.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherpafiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpafiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopgro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopgro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spkr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spkr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surmotriz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surmotriz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegioiorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegioiorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toshab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toshab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalfood-hersheys.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalfood-hersheys.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradematesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradematesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendaro.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendaro.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trytrippy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trytrippy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuinposterland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuinposterland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitallium-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitallium-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearesharecare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wearesharecare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatdoisay.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatdoisay.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolley.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolley.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvx.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvx.tokyo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89abe621ac546c1f648f8c751cb21cecfe2c7052
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003aaf9ebb256b59b619007a7e19ccbc94e0016eb8471839dcda8f95e76aee6c0493265803da946185acafba500528d01f734ddcaa2621b6958c709009e1154809ccff68f0d79126112e4e5a419079494d796d6db2fb68d00e76a878383445ac9dc40205985f9bdc724f59bff8dc4e51dcc9b4768dd06c48cd0b524a43c4986699e3d354fda532bf0ddd17f7c5367ebcca19b570fdf0c09ebee956aa0f58717f54b8cc3eb90e6ba575f98fdad2a69e76d91c4242664e1d1ee004ba89748fea62b4eda05e8270af1c8e6133fa9031f3fc0fbf82c6e90be4373ecd856c9e399517bc6afe575bc410c9d34895233934e24de2c2d3bcdeb2f84b488b21a66d51db54b8