www.ajour.ch

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 80:ad:dc:a0:41:d6:ac:79:10:37:05:f9:c6:0d:f7:7e was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ajour.ch

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 80:ad:dc:a0:41:d6:ac:79:10:37:05:f9:c6:0d:f7:7e
Serial Number (int): 171043925643990612805254818750138283902
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 7f:4c:a6:bb:a9:ad:2c:11:58:fc:ee:3a:7d:2f:3c:8f:bd:6d:d9:d4
Fingerprint (sha256): 3d:84:07:e8:1c:50:75:0c:5e:cb:dd:bd:1b:d1:3d:36:fd:d8:28:d2:ff:bd:3e:3a:42:16:22:e4:09:48:b4:cb

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/ZiQkrYMab3w
CRL Distribution Point: http://crls.pki.goog/gts1d4/KS3or9pF2-o.crl

Check the revocation status for certificate www.ajour.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ajour.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ajour.ch
counterbase.beautycounter.com
dieselwynwood.me
onepuppyaday.com
choicesanitation.com
exploradogs.com
rankthebesties.com
pidchat.com
www.parx.city
smart-notes-extension.com
link.smartclip.co.il
www.orangecapinnovative.com
app.onfat.pl
colmotos.com
cardnudge.com
whiskeyrichardcle.com
www.godscombine.com
admin.concursos360.com
gympass.rootd.io
sinasinterior.com
app.nostock.pl
buybots.ru
linkspoc.dev.orbital8.com.au
calculator-docs.mifinancialplanning.co.nz
dev.coparenter.pro
find-home.innovcmr.com
varnavn43e.parkalot.io
admin.ysport.de
staging.mymilk.de
www.yourjapaneseacademia.com
link.doublecheck.kr
www.centuryx.dev
kevinvo.dev
tracker.analytics4notion.com
test.nibeprogram.dk
gunacorporation.com
preprod-trust-webapp.knolskape.com
platform-pcm.stolwijkkelderman.nl
www.start.biltapp.com
ourrabbitry.com
tweerous.dev
www.maksconnect.com
auth.emitus.com
www.futuremindsfund.org
futuremindsfund.org
covidkhoj.in
www.earthscape.build
merchant-dev.bayanihan.eu
app.poderegularizar.com.br
lexi.page
my.kahu.work
www.hofac.org
iacheck.cesamcorp.com
translate.myknittingjournal.no
brunotorres.dev
app.reclip.pro
www.usberyl.com.tw
www.obatinovasi.id
kitchensink.console.appabrik.jp
candan.app
ampoo.app
olae.ca
www.trattoriadelmolino.com
dev.save.lendage.com
www.parkpixie.com
erispdf.studio
app.bujia.io
argyleink.com
sales.wtf.menu
www.diveinforest.net
qoftheday.co.uk
admin.vigilproject.app
www.1kmwine.io
www.cosmedical.ca
app.tapcast.io
scarborough.me
www.noah.mobileappster.co.uk
source.jasig.org
www.kylebyte.com
staging.staqy.com
ogongsyd.posnet.com.au
s.kss-pc.club
www.editoravirtualis.com
www.leigh.net.au
robbieelias.ca
transcription.today
decisionjam.com
www.app.intecc.org
einfach-anstellen.de
go.buzzzly.com
firebase-stg.editorialistyx.com
www.novimarket.net
api-dev.hyperseed.com
trueblaq.liveevent.co.za
rtc.bee-teknoloji.com
www.denaryin.com
store2.zweb.shop
links.cocodelivery.com
app.nexhance.com
www.poetryofthemachine.com

Other certificates including the domain name ajour.ch

(limited to 100 certificates)
cwkc.org
www.noonesavesyou.art
www.ajour.ch
vertimucentras.eu
butlerwax-portal.hermes.aimgt.info
campusgfa.lernit.app
www.loudnsound.com
www.gnaane.in
plans.risingsun.solar
www.sliceq.com
screens-ipad.deploy-cd.com
disneybetter.app
www.physiochat.app
nenga2020.junni.co.jp
ryanrousseau.com
www.leigh.net.au
share.paidleave.us
xclusivecarsbasingstokeltd.co.uk
www.noonesavesyou.art
quizdraw.cashslide.co.kr
detroitlake.thepredictionlab.com
ryanrousseau.com
luislaugga.com

Certificate

The complete raw certificate details for www.ajour.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 171043925643990612805254818750138283902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 01:08:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 02:06:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ajour.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/ZiQkrYMab3w'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2061 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajour.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counterbase.beautycounter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dieselwynwood.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onepuppyaday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choicesanitation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploradogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rankthebesties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pidchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parx.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-notes-extension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.smartclip.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orangecapinnovative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.onfat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colmotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardnudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whiskeyrichardcle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godscombine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.concursos360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gympass.rootd.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinasinterior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nostock.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buybots.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkspoc.dev.orbital8.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculator-docs.mifinancialplanning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.coparenter.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'find-home.innovcmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varnavn43e.parkalot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ysport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mymilk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourjapaneseacademia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.doublecheck.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centuryx.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevinvo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.analytics4notion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.nibeprogram.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunacorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-trust-webapp.knolskape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform-pcm.stolwijkkelderman.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.start.biltapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourrabbitry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tweerous.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maksconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.emitus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futuremindsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futuremindsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidkhoj.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthscape.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchant-dev.bayanihan.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.poderegularizar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexi.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.kahu.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hofac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iacheck.cesamcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translate.myknittingjournal.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunotorres.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.reclip.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usberyl.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obatinovasi.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchensink.console.appabrik.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candan.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampoo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olae.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trattoriadelmolino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.save.lendage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkpixie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erispdf.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bujia.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argyleink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.wtf.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diveinforest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qoftheday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vigilproject.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1kmwine.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmedical.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tapcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarborough.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noah.mobileappster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.jasig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kylebyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.staqy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogongsyd.posnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kss-pc.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.editoravirtualis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leigh.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robbieelias.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcription.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisionjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.intecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einfach-anstellen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.buzzzly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase-stg.editorialistyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novimarket.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.hyperseed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trueblaq.liveevent.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtc.bee-teknoloji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denaryin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store2.zweb.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.cocodelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nexhance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poetryofthemachine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/KS3or9pF2-o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018abfcbd6a30000040300473045022044875f91c86712b2859a72183fa9bfb32698feb86ada752d67821567a37888c902210098c350bbf41d5e9d6789cc859a40cc7a2268e76d864a786d07a90ec4f814f0d9007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018abfcbd6710000040300473045022100f1ffcbaf05a8f3e7cd1162f3a76aa3e5cbb3d91e1f97848f1c80e67e32ea933f0220524eb96aca24235f37b2c85d5228144ea3c22316d83d575dc8357287e95d3e4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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