www.xpenzi.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number cc:57:37:37:69:b5:d0:b9:12:dd:b1:f6:63:34:60:2c was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.xpenzi.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cc:57:37:37:69:b5:d0:b9:12:dd:b1:f6:63:34:60:2c
Serial Number (int): 271615360889608234473297687175085973548
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 80:8b:ee:61:ee:0d:95:84:0c:8b:71:a7:08:c2:5b:85:09:76:c2:65
Fingerprint (sha256): 34:5c:47:4a:6f:d1:00:f5:ee:5e:d8:65:41:08:b8:7a:19:a0:26:22:ca:30:90:c7:9e:c4:5d:d9:1d:23:4f:cc

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Zhha9V5I61o
CRL Distribution Point: http://crls.pki.goog/gts1d4/Rc7g7RF2uGw.crl

Check the revocation status for certificate www.xpenzi.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.xpenzi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.xpenzi.com
sncaj.net
colorindo.net
uncleassist.com
ymizrahi.com
www.holzinn.com
www.swmobile.pl
docs.syn.bike
raugh.club
olegtsoy.me
video-makeup.com
pricemonster.us
www.ohiortc.com
www.oppeos.io
www.stoneybook.com
mi360.theagent.co.th
www.smartparkpass.com
www.homedinamics.com
www.hotelbnight.com
activations.selfservice.center
universitarios.groairas.ce.gov.br
pamisa.net
www.onesnow.com
www.midimonitor.com
demobutton.allezemm.at
www.zilbauer.me
ulem.my.id
www.notnot.se
newsboard.studis.it
web-dev.globalmenu.app
www.fivethreeone.app
labontour.de
ops.avis.co.uk
auth.staging.modernmarkets.io
mersinsefanakliyat.com
saitonaoya.com
www.freshconsole.in
tacolab.dev
fibredb.co.za
demo.lema.io
pos.queuer.app
topmetrictechnologies.com
cosmos.disperze.network
entry.urbanhome.app
admin.negociar.app
www.api.hintme.app
api-staging.nolanlive.app
www.itipton.com
oema.ltl-xpo.com
www.ptown.app
ipakeyboard.com
mn.goodgiving.com.au
www.jblongandsonbodyshop.com
nateferrero.com
damiansobieraj.com
www.softwarechain.io
musicdrill.com
fhac.ca
flyashpak.com
matsuhisajapan.com
admin.simplepager.com
athletemoment.kiswe.com
widget2.shiftboolean.com
geniusrepair.it
go.blitzshare.com
tanukabhadra.com
share.radioly.app
www.suitebrains.com
daleducation.com
pasco.highlander.ninja
app.shunboi.com
scorch.lunarworks.co.uk
old-pledger.fig.org
platform.playersvote.com
www.shashibhushan.com
taslonic.com
deeplink.qloudcity.com
fyeo.blockhead.co
stolingua.com
www.angelshare.xyz
accounts.edzag.com
cooking.keto-diet-app.com
banner73.aimtech.ca
jackiespadel.clau.io
devtest1.signup.myjobscorner.com
seemore.brains4drones.com
greencheddar.earth
stakepool.beyond-agentur.com
yirehcleaning.com
www.savingdom.com
hugop.dev
www.otwsg.com
topformaturas.com.br
link.sukoonawakening.com
www.sales-shopping.club
dwbqb.zachphelps.com
thehavelicafe.posify.in
www.mariaisabelvega.com
www.fastercyclist.com
www.happykidrecords.com

Other certificates including the domain name xpenzi.com

(limited to 100 certificates)
brushly.bullet-mobile.store
dev.getstarted.growflow.com
brownricepuritytest.com
www.ohiortc.com
countries.stephengordon.ie
www.xpenzi.com
www.sach.co.za
www.truepeaksound.com
wooah.re2fe.com
video-makeup.com
share.gardenize.com
www.truepeaksound.com
banner73.aimtech.ca
share.gardenize.com
auth.soompi.com

Certificate

The complete raw certificate details for www.xpenzi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271615360889608234473297687175085973548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 16:18:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 17:16:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xpenzi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Zhha9V5I61o'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xpenzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sncaj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorindo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncleassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymizrahi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holzinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swmobile.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.syn.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raugh.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olegtsoy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-makeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pricemonster.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohiortc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oppeos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoneybook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi360.theagent.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartparkpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homedinamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelbnight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activations.selfservice.center'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universitarios.groairas.ce.gov.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamisa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onesnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midimonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demobutton.allezemm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zilbauer.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulem.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notnot.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsboard.studis.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-dev.globalmenu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fivethreeone.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labontour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.avis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.staging.modernmarkets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mersinsefanakliyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saitonaoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshconsole.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacolab.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibredb.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.lema.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos.queuer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topmetrictechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos.disperze.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entry.urbanhome.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.negociar.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.hintme.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.nolanlive.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itipton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oema.ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptown.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipakeyboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mn.goodgiving.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jblongandsonbodyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nateferrero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damiansobieraj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softwarechain.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicdrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyashpak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matsuhisajapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.simplepager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athletemoment.kiswe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget2.shiftboolean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniusrepair.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.blitzshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanukabhadra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.radioly.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suitebrains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daleducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasco.highlander.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.shunboi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorch.lunarworks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old-pledger.fig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.playersvote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shashibhushan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taslonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplink.qloudcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyeo.blockhead.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stolingua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelshare.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.edzag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooking.keto-diet-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banner73.aimtech.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackiespadel.clau.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devtest1.signup.myjobscorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seemore.brains4drones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greencheddar.earth'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stakepool.beyond-agentur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yirehcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugop.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otwsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topformaturas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.sukoonawakening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sales-shopping.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwbqb.zachphelps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehavelicafe.posify.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariaisabelvega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastercyclist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happykidrecords.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Rc7g7RF2uGw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c54bca241000004030047304502201dd66e4cc22365b046efa30a08116bf924e7153e01223070e20dd4bdc8b6dab5022100ddfa01069f01bbd2fe98377479793edef2adf3272151ea513252d81034bef5b800750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c54bca23600000403004630440220612e79034832a5687251321d7759ad0d1caf2af4ddec7bea9427be96cf480a5a022065966a3232a0d61eeac044f2fe5a1e20d417b2e14178e6b45d024dab12e495e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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