www.gite-chez-marinette.fr

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e5:a5:2d:73:f5:75:c6:8e:0a:3d:a6:ec:0a:f7:66:16 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.gite-chez-marinette.fr

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e5:a5:2d:73:f5:75:c6:8e:0a:3d:a6:ec:0a:f7:66:16
Serial Number (int): 305250861912041044295110899136588113430
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 2e:dd:8e:8a:49:24:e7:97:7c:71:3d:c6:15:ec:9b:5f:a9:df:9b:72
Fingerprint (sha256): 36:b6:7b:a7:95:ad:ae:b8:13:88:4d:f1:29:0f:03:66:ab:ab:65:ea:eb:01:66:f8:e6:8f:16:e1:09:2d:20:27

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/o9xzjzROJ9Q
CRL Distribution Point: http://crls.pki.goog/gts1d4/DEA1UR2bb1o.crl

Check the revocation status for certificate www.gite-chez-marinette.fr

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gite-chez-marinette.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gite-chez-marinette.fr
compday.no
app.cypherly.io
www.ankitha.yadavfamilies.com
www.hellman3mile.run
kurakatsu.com
mahmoud-magdy.art
releaseme.app
www.viewmed.com.ar
app.midiamarketingtecno.com.br
sample.b.dev.hotekan.com
www.travelengine.app
tardy.tgpapps.org
www.cebinde.app
qa-ab78d293.andvest.co
www.ivan-jurasik.fr
sso.littlesis.app
cao-kappers.appdashboard.nl
baic.center
snbx.miniland.cc
learning.futureamp.co
demo-deepgenin-bot.fadlogic.app
matlensilver.3diq.com
bim-xr.com
kroniken.bjerre.net
bamashower.com
atteberywedding.com
deepgenin-bot.fadlogic.app
www.bln.city
dcode.com.co
tester.thetorahapp.org
s.wyshlist.io
www.brunosbrunoro.com.br
www.solariumnft.art
medicusapp.co
www.bravoluis.com
www.lpdigital.info
pay.playground.beyondordering.com
joino.me
www.geotampas.com.br
console.bcbpayments.com
celebrity.beautifuluniquesnowflake.com
www.cloud129.com
cosasdebuenver.com
joonitalk.kr
ohmygod.jp
anriar.com
split-test.numerous.cloud
ai-dev.closefactor.com
www.blretroracing.fr
app.foodrazor.com
calculatemycandles.com
link.gopichand.co
fpscj.com
ai.closefactor.com
www.easyhvac.app
www.wanderlogue.it
horasolidaria.com
app.concili.de
app.imoveisvilela.com.br
www.aws25.com
publisher-demos.cedato.com
deutschdrift.com
www.makan.site
gmailmeter.com
join.wisdom.audio
www.voicas.audio
collect.gotrendable.com
eastwest.alpinemedia.com
www.gptappstore.com
dev-auth.cloverapp.com
www.onlinesolutionsgroup.website
lazysyntax.com
realyoon.com
sandiego.debsuites.com
seguros.momentu.co
exetertouch.com
noabook.com
www.kako.ng
seattle.debsuites.com
link.grandmarules.com
barda.com.ar
bo.dn2me.com
thecontractoradvisor.com
mythai.at
www.philomena-art.com
tewsil-track.com
app.cleanrobotics.com
sistemas.borigenbetzel.com.ar
oasisexc.com
fb.core.ec
www.homeandmorestudio.com
www.digitalsla.com.br
whoisrocket.com
monsterscleaning.com
marcsmanclothing.com
rythondev.com
www.dtcwarehouse.co.za
whdmgk.com
www.admin.easytap.co

Other certificates including the domain name gite-chez-marinette.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gite-chez-marinette.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305250861912041044295110899136588113430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 02:14:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 03:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gite-chez-marinette.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/o9xzjzROJ9Q'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gite-chez-marinette.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compday.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cypherly.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ankitha.yadavfamilies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellman3mile.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurakatsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahmoud-magdy.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releaseme.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewmed.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.midiamarketingtecno.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sample.b.dev.hotekan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelengine.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tardy.tgpapps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cebinde.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-ab78d293.andvest.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivan-jurasik.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.littlesis.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cao-kappers.appdashboard.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baic.center'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snbx.miniland.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.futureamp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-deepgenin-bot.fadlogic.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matlensilver.3diq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bim-xr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kroniken.bjerre.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamashower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atteberywedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepgenin-bot.fadlogic.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bln.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcode.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tester.thetorahapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.wyshlist.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunosbrunoro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solariumnft.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicusapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bravoluis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpdigital.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.playground.beyondordering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joino.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geotampas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.bcbpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebrity.beautifuluniquesnowflake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud129.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosasdebuenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joonitalk.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohmygod.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anriar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'split-test.numerous.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai-dev.closefactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blretroracing.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.foodrazor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculatemycandles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.gopichand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpscj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.closefactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyhvac.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanderlogue.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horasolidaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.concili.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.imoveisvilela.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aws25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publisher-demos.cedato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschdrift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makan.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmailmeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.wisdom.audio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voicas.audio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect.gotrendable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastwest.alpinemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gptappstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth.cloverapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinesolutionsgroup.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazysyntax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realyoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiego.debsuites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguros.momentu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exetertouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noabook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kako.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattle.debsuites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.grandmarules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barda.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.dn2me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecontractoradvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythai.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philomena-art.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tewsil-track.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cleanrobotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemas.borigenbetzel.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasisexc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.core.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeandmorestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalsla.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoisrocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterscleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcsmanclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rythondev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtcwarehouse.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whdmgk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.easytap.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/DEA1UR2bb1o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e694d2f8f0000040300463044022100cdb52d5d54a6c7713e472c8b2099a21b08c084df1f86c6736b55b9a654e1d210021f4ad70489fb0f74ff1d7dcfdde6165da02bce07ac0e7e6bc8c3d8676ded915e0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e694d2f6e0000040300483046022100adecf241ebbd1bc0b195e232ef6a2044d0004e9a31ba1fa71fe6fd03f6fd1ebf022100dc51afac24b614db2f83f8df1efb95ba228e1c3553ccb9f6568309e14a08df62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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