webportal.digi-dein-digitaler-bauassistent.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 6f:f8:5b:81:7a:eb:90:38:10:8a:c6:eb:b3:48:92:f6 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webportal.digi-dein-digitaler-bauassistent.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:f8:5b:81:7a:eb:90:38:10:8a:c6:eb:b3:48:92:f6
Serial Number (int): 148833853110791145607102996911946765046
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 24:14:70:22:f9:d7:38:93:7b:fd:10:7a:94:bf:3f:b8:70:c0:b6:5f
Fingerprint (sha256): 3a:81:ca:1f:c9:b9:c1:f9:18:c6:62:02:38:8b:d0:58:65:a9:26:99:32:7a:c5:8d:34:12:e8:18:03:32:be:81

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Qzvon-iOJdM
CRL Distribution Point: http://crls.pki.goog/gts1d4/xII4Pd1eREs.crl

Check the revocation status for certificate webportal.digi-dein-digitaler-bauassistent.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webportal.digi-dein-digitaler-bauassistent.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webportal.digi-dein-digitaler-bauassistent.de
josiptokic.from.hr
sormincorp.com
www.cacspmec.fin.ec
auth.mkrat.am
app.seidr.ai
realpizzas.lupi.delivery
links.chalkboard.io
xumkuyrcuafwqfwuhnkw.smartimob.io
app.clinicaneocor.com.br
losuj.majchrzak.info
velocity.finclear.net
chatmessagehub.test.phnx.review
beta.robertvandenborn.nl
expect.digital
www.kevinmassage.net
static.plataforma.must.pt
link-moski.kemakmuran.com
teamhyper.io
www.wannablab.com.ua
www.facialdoctors.com.br
www.alxios.com
www.fab2.at
getqp.app
support.bluehouse.is
clazz.evandroviana.com.br
auth.cuttles.us
www.jonathangin.me
wifisight.school
app.bromo.trixide.com
app.gurukula.one
test.georgeanthony.net
www.internsgdl.org
website1031.estore.business
www.easystory360.tools
backend.hirmer-hospitality.de
app.presentie.cz
www.logicomerinvest.pt
www.millionways.life
www.veniu.in
link.dev-bitcastle.work
www.abdulrehman.pro
rwevents.app
www.degeneggs.io
fallconn.com.br
shyamafoundation.caselets.io
wbt.vetera.si
www.babyganoush.app
app.loomer.se
www.accountswitcher.app
colorexpander.com
prd.ps.hacci.live
dashboard.sortme.io
demo.paperbits.io
crimewaves.ca
www.altschart.com
gestion.respire.institute
justdoit.strannizza.eu
app.stockhou.se
staging.clevertrack.dk
sms.vinoc.mx
link.toureka.app
events.lendlease.cloud
datinghear.com
back-office.dev.kultivierdich.de
ng-ponyracer.ninja-squad.com
energywebnfts.com
open-banji.edexa.com
www.bd365-management.com
admin.vuyap.com
dotnetabhishek.com
focuswithdot.com
bridgemaps.com
deepakshankar.com
fortydegreewaters.com
obi-g.dev-ltl-xpo.com
aiep-pretest.klarway.com
knockstoppers.com
assessment.dmtinstitute.com
www.thefund.app
xpresspill.ca
microsoft.ideacloud.com
www.photodoc.app
eac6.eestec.ro
www.actforliberty.eu
www.epesipay.com
drf-admin-staging.cpptl.co
ga4.project-g.co.jp
your.famspiration.com
currency.media-pro.co.il
nadjasglanz.com
sal.911micro.com
saifawan.com
androstoreapk.gq
fanfiero.com
policy.fea.flgroup.com.my
www.kivaloor.com
www.risystems.com.au
sickels.dev
www.undarkpixel.com

Other certificates including the domain name digi-dein-digitaler-bauassistent.de

(limited to 100 certificates)
www.codegratia.com
www.comexing.dev
parkerlocks.in
digi-dein-digitaler-bauassistent.de
webportal.digi-dein-digitaler-bauassistent.de
digi-dein-digitaler-bauassistent.de
hledasepremier.cz
digi-dein-digitaler-bauassistent.de
agent.sumdrop.com
eventsethiopia.com
vebizhuri.com
api2.sync247.net
nl.avto-choice.com
app.strigapay.com
dazvo.co
www.dfsshipping.com
www.gamemasterpay.com

Certificate

The complete raw certificate details for webportal.digi-dein-digitaler-bauassistent.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148833853110791145607102996911946765046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 21:23:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 22:20:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webportal.digi-dein-digitaler-bauassistent.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Qzvon-iOJdM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webportal.digi-dein-digitaler-bauassistent.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josiptokic.from.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sormincorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cacspmec.fin.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mkrat.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.seidr.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realpizzas.lupi.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.chalkboard.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xumkuyrcuafwqfwuhnkw.smartimob.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.clinicaneocor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losuj.majchrzak.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocity.finclear.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatmessagehub.test.phnx.review'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.robertvandenborn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expect.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevinmassage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.plataforma.must.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-moski.kemakmuran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamhyper.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wannablab.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facialdoctors.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alxios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fab2.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getqp.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bluehouse.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clazz.evandroviana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.cuttles.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonathangin.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifisight.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bromo.trixide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gurukula.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.georgeanthony.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internsgdl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website1031.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easystory360.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.hirmer-hospitality.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.presentie.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logicomerinvest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millionways.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veniu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.dev-bitcastle.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abdulrehman.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwevents.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.degeneggs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallconn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shyamafoundation.caselets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbt.vetera.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babyganoush.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.loomer.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accountswitcher.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorexpander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd.ps.hacci.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.sortme.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.paperbits.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crimewaves.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altschart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestion.respire.institute'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justdoit.strannizza.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stockhou.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.clevertrack.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.vinoc.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.toureka.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.lendlease.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datinghear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'back-office.dev.kultivierdich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ng-ponyracer.ninja-squad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energywebnfts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open-banji.edexa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bd365-management.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vuyap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotnetabhishek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focuswithdot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgemaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepakshankar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortydegreewaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obi-g.dev-ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiep-pretest.klarway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knockstoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assessment.dmtinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefund.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpresspill.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoft.ideacloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photodoc.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eac6.eestec.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actforliberty.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epesipay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drf-admin-staging.cpptl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga4.project-g.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.famspiration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currency.media-pro.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nadjasglanz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sal.911micro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saifawan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'androstoreapk.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanfiero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policy.fea.flgroup.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kivaloor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.risystems.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sickels.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.undarkpixel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/xII4Pd1eREs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d7b5e7a1b0000040300483046022100c4870e029652b5be31aad1361cf100c91d28211249e85be2a5a3435b7c6ab3a3022100c89d351003078590b3c3e3e93a8dd327f224cb92185fb94bafed521a2de1ca8c007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7b5e79f30000040300463044022074ab0c4bd55d4c2ad64b6fde2157efff63cd269d06ab3eac844bf85318c686250220246ebeb213aa91778ccdc0fa598ca1da8019ab0e2c9b87cec8b667820c667676
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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