tienganh.org

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 03:02:b4:ae:3f:21:bc:66:0a:ba:ed:af:69:58:7b:5e was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tienganh.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:b4:ae:3f:21:bc:66:0a:ba:ed:af:69:58:7b:5e
Serial Number (int): 4001733220039091914671422683169192798
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 9a:77:bd:1d:12:25:32:8e:2c:2a:21:40:0a:09:a4:d2:a4:a4:fb:94
Fingerprint (sha256): 3c:1b:11:00:99:98:0f:92:f9:89:09:61:f3:40:e0:07:99:fb:5d:08:a3:5d:1e:c0:b6:84:00:8a:a2:ae:f7:d8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/xhdDNxQ_vpM
CRL Distribution Point: http://crls.pki.goog/gts1d4/EZ1B53EQ5b0.crl

Check the revocation status for certificate tienganh.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tienganh.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tienganh.org
hockeystats.site
staging-rjp.pinhome.id
invitation.sweepy.app
apphome.ddangkongschool.com
estereopicniconline.rebus.com.co
beta.test.gizmoplex.com
apphome-dev.ddangkongschool.com
apphome-stg.ddangkongschool.com
link.bythehour.app
www.sportfolio.co.uk
diaspora.peoplespension.global
aptiche-admin-staging.dscnitrourkela.org
ufsys.org
lundberg.guru
beta.api.coinmerge.io
innov-events.calendrier-noel.fr
games.janu.sh
2bros-games.com
evanova.paperwebsite.com
myferry.ishareit.dk
shoppingarcade.com
manylogue.com
silentdiscobreak.com
angulardoc.com.br
www.webasembly.com
test.undesigntheredline.com
www.skierdao.xyz
uniqusource.com
ncov.hopscotchhealth.co
www.waivcash.com
community2.karma.life
www.naviraacademy.com
app.loopcv.pro
vue.heroiccloud.com
mint.fadeawaybunny.com
www.partnerwithbrandon.com
jointimemaster.firefoggames.com
contacloudjd.com
ethdebug.com
qaz.dashboard.tap.bio
amiworthy.in
sachi.dreamcity.studio
mediusservices.com
static.unicornsurvey.com
rem-center.com
c.demandred.tk
gestionclientes.fain.es
bdgets.com
medgeai.com
dev.zendilemma.com
captchahive.dev
escrivaninha.pt
kinu.app
share.lightplay.app
uad.cloutflow.com
tompaavolainen.com
link.meezy.video
www.outerlimits.wtf
yeonkyulee.com
www.beyondvision.ai
botfighting.com
order.fuocos.com
contrareforma.com
okta.beaconforce.com
www.louieormston.co.uk
www.apie.tech
www.serendipico.com
www.bite.store
smartonesec.com
carlospedraza.com.mx
iture.co.uk
bbdo.parkalot.io
apsyocreatives.com
www.deepeshstha.com.np
www.zkassociate.com
admin.rekhraj.com.au
advocaciabirolli.com
demo.fufunote.com
baseballchartingapp.com
alen.sortingnet.com
anna.vs.estmodel.app
www.clastr.com
console.joinflyt.com
tucane.anukin.com
foxylookout.com
www.offten.xyz
www.dch.lk
anesthapp.com
legacygo.lciteam.club
sistema.colegiodegestores.com.ar
vtechbabyracepolling.sqwadhq.com
signandfill.whizpool.com
iloveyoubritts.com
kegel-exercises.care
demo.joinjobox.com
www.sfoairportclinic.com
compound.jamesonsaunders.com
nocoronanews.de
homepay.com.br

Other certificates including the domain name tienganh.org

(limited to 100 certificates)
sni188745.cloudflaressl.com
medgeai.com
plumbagocreekfarm.com
escrivaninha.pt
sni188745.cloudflaressl.com
plumbagocreekfarm.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
embargoeddata.rightstracker.org
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
tienganh.org
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
tienganh.org
gacha.acadarena.com
tienganh.org
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
kiri-woodruff.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
mahavirmarketingadmin.estore.business
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
www.pandasninja.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
tienganh.org
sni188745.cloudflaressl.com
gacha.acadarena.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
embargoeddata.rightstracker.org
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
kazcoin.net
app.suppdesk.mx
api.otd.ink
sni188745.cloudflaressl.com
tienganh.org
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
tienganh.org
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
sni188745.cloudflaressl.com
yulian.me

Certificate

The complete raw certificate details for tienganh.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4001733220039091914671422683169192798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 06:29:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 07:27:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tienganh.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/xhdDNxQ_vpM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienganh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeystats.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-rjp.pinhome.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invitation.sweepy.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apphome.ddangkongschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estereopicniconline.rebus.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.test.gizmoplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apphome-dev.ddangkongschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apphome-stg.ddangkongschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.bythehour.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportfolio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diaspora.peoplespension.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptiche-admin-staging.dscnitrourkela.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufsys.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lundberg.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.api.coinmerge.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innov-events.calendrier-noel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.janu.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2bros-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evanova.paperwebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myferry.ishareit.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppingarcade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manylogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silentdiscobreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angulardoc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webasembly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.undesigntheredline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skierdao.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniqusource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncov.hopscotchhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waivcash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community2.karma.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naviraacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.loopcv.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vue.heroiccloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mint.fadeawaybunny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnerwithbrandon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointimemaster.firefoggames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contacloudjd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethdebug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaz.dashboard.tap.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amiworthy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachi.dreamcity.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediusservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.unicornsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rem-center.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.demandred.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestionclientes.fain.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdgets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medgeai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.zendilemma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captchahive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escrivaninha.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.lightplay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uad.cloutflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tompaavolainen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.meezy.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outerlimits.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeonkyulee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondvision.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botfighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.fuocos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrareforma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okta.beaconforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louieormston.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apie.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serendipico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bite.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartonesec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlospedraza.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iture.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbdo.parkalot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apsyocreatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deepeshstha.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zkassociate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rekhraj.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocaciabirolli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.fufunote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballchartingapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alen.sortingnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anna.vs.estmodel.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clastr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.joinflyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucane.anukin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxylookout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offten.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dch.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anesthapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygo.lciteam.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistema.colegiodegestores.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtechbabyracepolling.sqwadhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signandfill.whizpool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iloveyoubritts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kegel-exercises.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.joinjobox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfoairportclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compound.jamesonsaunders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nocoronanews.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homepay.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/EZ1B53EQ5b0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001880490aac40000040300473045022100a4aadcbe1f815ca3a278fb9bbefae91ca4c0eadcc28d4a40561305ca32e00ca102205ebce5cf1f4000322c2739e30cfc040d2e45dd3f14fc03da37c16a22cf586dd6007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001880490aaa00000040300473045022100ff5c0ef87709c8d672f9b8ee0837a476370bb88f802606a8ec7874bba8d0292902205bc8f645b982a08d1fc114b8a244e011e869271c2a8f870b113f959caba436a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ca43c1daa3c7fd05a87763da6bcb1ede7e7339147e09e00b656dc96714811fdf06b88e06cf8bde249f1256f5010bd0793916ce8c0d9044d7658832ff8676187a98ffd55f33af3ea2bf655c03303003c190af1ccfa0652aeddfccee186702aff60ac0c0f9a6e7bdbf7a0097a42c00d3caacc79264cfa476f8b79b1575f0c84f2853145e4116195b8396a6cc795b3004f6a6cba34cb0b808bfae9600269fbc2bbd35cc96b686e3a420f0550ecd7d2e1dceb539f3247f3bf310a06755c213049fd9269079b0377c2504cabc5308fe8d0c9da559f6f3729b5a4b7d549eec2ac3923a0c4422dcd604ff08565569c98fffe49082f579715610ed5dae6c5547bb0fa2d