www.rekafoodfinder.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number b4:ec:37:89:05:6e:db:56:10:4c:bf:86:3f:3c:58:c3 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.rekafoodfinder.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b4:ec:37:89:05:6e:db:56:10:4c:bf:86:3f:3c:58:c3
Serial Number (int): 240487547688366984414224632928809015491
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): c2:e1:ec:d7:e5:5c:10:46:22:36:89:bd:3e:99:49:70:50:23:c8:69
Fingerprint (sha256): 3f:0f:e1:b4:9f:c1:c3:0e:9d:c0:b2:b6:b4:e6:ad:44:57:f9:fb:59:73:f7:c0:5a:05:3c:ba:0c:af:95:de:b9

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/WRoN5QDp0f8
CRL Distribution Point: http://crls.pki.goog/gts1d4/80QChtRoEi4.crl

Check the revocation status for certificate www.rekafoodfinder.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rekafoodfinder.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rekafoodfinder.com
store.grocito.com
www.aetherdao.io
keter.cloud
www.virtoustack.com
links.careportal.org
www.keter.cloud
barnettecpa.com
enfasis.profesionales.pedidos.online
sgmentores.liidutpl.ec
xlr8.swimmingwaikato.co.nz
www.mytapau.com
ben-wolfe.com
split.guzguz.fr
asiastar.co.kr
www.oneupking.com
tools.simcept.com
longoncapital.com
andreisarbu.dev
app.recarguita.com
www.getboutiq.com
dev.zappboard.quickcommerce.org
preprod.briefcase.news
mydigifuture.com
chords.cz
app.engage.wdsra.voyagernetz.us
kidcode.co.il
referer.playmister.com
a18.zooz.cf
a17.zooz.cf
diegofrabasa.dev
russellaterrell.com
a6.zooz.cf
luppetcafe.jp
pyromantica.com
www.mgustav.ca
www.spyonline.io
intergalacticspacebar.com
indmrt.com
www.ventasquito.com
tyrata.io
www.gavinmcdonald.eu
www.chebstore21.ru
mindtechnic.com
img.bhyn.dev
lbbw-live.de
i2.digitalservices.theskyfallen.com
sistema.processosdigital.com.br
admin.vidocto.com
www.vinhcuong.info
mishan.es
funny-ecards-service.html5.emallstudio.com
www.gartower-weineck.de
p.qu3bola.com
appdev.stactix.com
diverdown.co.jp
www.agrimk.com
accept-staging.overhq.com
brandeisquantclub.org
sinanbolel.com
www.mail.io
www.comunidad365.es
www.nancyandrichie.nyc
prayog.app
link.effy.live
dev.takle.app
www.vypiszregistrudluzniku.cz
bbcmg.vida.vdmsapp.com
links.poddog.jp
www.charitableactstheater.org
www.needham.io
www.votepizza.wine
myriade.io
starter.quester.app
www.plusminds.one
perceptrons.org
verify.vtrakit.com
www.resumende.com
edinburghproperties.org
muziekstudio.123zing.nl
dcslab.co.kr
eu.server.mobilo.dev
diseasefinder.org
www.thecallsports.com
auth.saltireawards.scot
divijg.com
www.lbbw-live.de
commaid.org
monstr-soft.com
videotron.be
creekcoding.com
www.riverfloating.at
casval.trade
booqswapp.com
www.energysource.com.br
familytoolsapp.com
convocatorias.premiosindiacatalina.com
www.latamcapitaladvisors.com
cardenasdefensalegal.com.co
partner.cleared4.org

Other certificates including the domain name rekafoodfinder.com

(limited to 100 certificates)
www.nonunonu.com
gift.angage360.com
marketinghacker.net
laxxco.com
www.ragstorichies.io
care.brucira.com
cisum-music.com
tasks.raghumolabanti.com
www.rekafoodfinder.com
rn-md-favorite-places-terms-and-conditions.mohammed-najib.me
dev.api.kohepets.com.sg
certifiedy.makeup
autopartsdemo.estore.business
sms.cmplte.com
jetblaze.com.br
marlonfal.com
go.mysense.io
www.developerdadchris.com
furmidge.dev
spoutstudio.io
tng.presen.ca
sanepil.com
certifiedy.makeup
www.rockpaperscissorsgame.io
mobileapp-lab.setoko-test.com
balitournyoman.com
esterify.org
pandemy.info
www.nobul.com
panel.biaction.com.br
www.agastiayurveda.org
institutovirgolim.com.br
mississauga.profit.orderprinting.com
staging.herface.uk
www.mncas.in
www.nightechnologies.com
cmx-dev.prodeo-live.com
jetblaze.com.br
www.fitlink.io
www.ragstorichies.io
www.greygarcomic.com
astartpiece.jp
versatilitywholesale.com

Certificate

The complete raw certificate details for www.rekafoodfinder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINOTCCDCGgAwIBAgIRALTsN4kFbttWEEy/hj88WMMwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMxMjA3MTU1NTU0WhcNMjQwMzA2
MTY1MzQ1WjAhMR8wHQYDVQQDExZ3d3cucmVrYWZvb2RmaW5kZXIuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisweg4/A08u
xrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrWrb62Cf/H
Bei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89llhMA9p+/U
iat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk//tVMMjO
Thi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82jXqtE4UC
UJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+gQIDAQAB
o4IKRTCCCkEwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFAap3NkUPVD1G5jttt0R570Wtwz8MB8GA1Ud
IwQYMBaAFCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1Bggr
BgEFBQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvV1JvTjVRRHAw
ZjgwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFk
NC5kZXIwggfnBgNVHREEggfeMIIH2oIWd3d3LnJla2Fmb29kZmluZGVyLmNvbYIR
c3RvcmUuZ3JvY2l0by5jb22CEHd3dy5hZXRoZXJkYW8uaW+CC2tldGVyLmNsb3Vk
ghN3d3cudmlydG91c3RhY2suY29tghRsaW5rcy5jYXJlcG9ydGFsLm9yZ4IPd3d3
LmtldGVyLmNsb3Vkgg9iYXJuZXR0ZWNwYS5jb22CJGVuZmFzaXMucHJvZmVzaW9u
YWxlcy5wZWRpZG9zLm9ubGluZYIWc2dtZW50b3Jlcy5saWlkdXRwbC5lY4IaeGxy
OC5zd2ltbWluZ3dhaWthdG8uY28ubnqCD3d3dy5teXRhcGF1LmNvbYINYmVuLXdv
bGZlLmNvbYIPc3BsaXQuZ3V6Z3V6LmZygg5hc2lhc3Rhci5jby5rcoIRd3d3Lm9u
ZXVwa2luZy5jb22CEXRvb2xzLnNpbWNlcHQuY29tghFsb25nb25jYXBpdGFsLmNv
bYIPYW5kcmVpc2FyYnUuZGV2ghJhcHAucmVjYXJndWl0YS5jb22CEXd3dy5nZXRi
b3V0aXEuY29tgh9kZXYuemFwcGJvYXJkLnF1aWNrY29tbWVyY2Uub3JnghZwcmVw
cm9kLmJyaWVmY2FzZS5uZXdzghBteWRpZ2lmdXR1cmUuY29tggljaG9yZHMuY3qC
H2FwcC5lbmdhZ2Uud2RzcmEudm95YWdlcm5ldHoudXOCDWtpZGNvZGUuY28uaWyC
FnJlZmVyZXIucGxheW1pc3Rlci5jb22CC2ExOC56b296LmNmggthMTcuem9vei5j
ZoIQZGllZ29mcmFiYXNhLmRldoITcnVzc2VsbGF0ZXJyZWxsLmNvbYIKYTYuem9v
ei5jZoINbHVwcGV0Y2FmZS5qcIIPcHlyb21hbnRpY2EuY29tgg53d3cubWd1c3Rh
di5jYYIQd3d3LnNweW9ubGluZS5pb4IZaW50ZXJnYWxhY3RpY3NwYWNlYmFyLmNv
bYIKaW5kbXJ0LmNvbYITd3d3LnZlbnRhc3F1aXRvLmNvbYIJdHlyYXRhLmlvghR3
d3cuZ2F2aW5tY2RvbmFsZC5ldYISd3d3LmNoZWJzdG9yZTIxLnJ1gg9taW5kdGVj
aG5pYy5jb22CDGltZy5iaHluLmRldoIMbGJidy1saXZlLmRlgiNpMi5kaWdpdGFs
c2VydmljZXMudGhlc2t5ZmFsbGVuLmNvbYIfc2lzdGVtYS5wcm9jZXNzb3NkaWdp
dGFsLmNvbS5icoIRYWRtaW4udmlkb2N0by5jb22CEnd3dy52aW5oY3VvbmcuaW5m
b4IJbWlzaGFuLmVzgipmdW5ueS1lY2FyZHMtc2VydmljZS5odG1sNS5lbWFsbHN0
dWRpby5jb22CF3d3dy5nYXJ0b3dlci13ZWluZWNrLmRlgg1wLnF1M2JvbGEuY29t
ghJhcHBkZXYuc3RhY3RpeC5jb22CD2RpdmVyZG93bi5jby5qcIIOd3d3LmFncmlt
ay5jb22CGWFjY2VwdC1zdGFnaW5nLm92ZXJocS5jb22CFWJyYW5kZWlzcXVhbnRj
bHViLm9yZ4IOc2luYW5ib2xlbC5jb22CC3d3dy5tYWlsLmlvghN3d3cuY29tdW5p
ZGFkMzY1LmVzghZ3d3cubmFuY3lhbmRyaWNoaWUubnljggpwcmF5b2cuYXBwgg5s
aW5rLmVmZnkubGl2ZYINZGV2LnRha2xlLmFwcIIdd3d3LnZ5cGlzenJlZ2lzdHJ1
ZGx1em5pa3UuY3qCFmJiY21nLnZpZGEudmRtc2FwcC5jb22CD2xpbmtzLnBvZGRv
Zy5qcIIdd3d3LmNoYXJpdGFibGVhY3RzdGhlYXRlci5vcmeCDnd3dy5uZWVkaGFt
LmlvghJ3d3cudm90ZXBpenphLndpbmWCCm15cmlhZGUuaW+CE3N0YXJ0ZXIucXVl
c3Rlci5hcHCCEXd3dy5wbHVzbWluZHMub25lgg9wZXJjZXB0cm9ucy5vcmeCEnZl
cmlmeS52dHJha2l0LmNvbYIRd3d3LnJlc3VtZW5kZS5jb22CF2VkaW5idXJnaHBy
b3BlcnRpZXMub3JnghdtdXppZWtzdHVkaW8uMTIzemluZy5ubIIMZGNzbGFiLmNv
LmtyghRldS5zZXJ2ZXIubW9iaWxvLmRldoIRZGlzZWFzZWZpbmRlci5vcmeCFXd3
dy50aGVjYWxsc3BvcnRzLmNvbYIXYXV0aC5zYWx0aXJlYXdhcmRzLnNjb3SCCmRp
dmlqZy5jb22CEHd3dy5sYmJ3LWxpdmUuZGWCC2NvbW1haWQub3Jngg9tb25zdHIt
c29mdC5jb22CDHZpZGVvdHJvbi5iZYIPY3JlZWtjb2RpbmcuY29tghR3d3cucml2
ZXJmbG9hdGluZy5hdIIMY2FzdmFsLnRyYWRlgg1ib29xc3dhcHAuY29tghd3d3cu
ZW5lcmd5c291cmNlLmNvbS5icoISZmFtaWx5dG9vbHNhcHAuY29tgiZjb252b2Nh
dG9yaWFzLnByZW1pb3NpbmRpYWNhdGFsaW5hLmNvbYIcd3d3LmxhdGFtY2FwaXRh
bGFkdmlzb3JzLmNvbYIbY2FyZGVuYXNkZWZlbnNhbGVnYWwuY29tLmNvghRwYXJ0
bmVyLmNsZWFyZWQ0Lm9yZzAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5
AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFk
NC84MFFDaHRSb0VpNC5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgAp0Dob
tnSqcRzTA1tlV8FPiqeLT+g4lEnspFP5RL0kaAAAAYxFNRl7AAAEAwBHMEUCIH4P
vEKlA0IVsWQeSiOJf4uQmJVeysHx3Z1sZ7fDdEOxAiEA6T0yS+Lbevs5wN5myTTo
apb4UzpI/HaZQ9GrmqmhgYwAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG
cR+1mwAAAYxFNRinAAAEAwBHMEUCID/mzMh0OH1+BLu3w6KQ95rkLa+sdjswVtCz
7xVadYKJAiEAk3yfmyktTYfNG2c7icbMODfRh0lbJunpKPkjAaIbCcowDQYJKoZI
hvcNAQELBQADggEBADIoYrc7a7d/yZ9BBe7rM6DEO67A/BCuwBSO65VBxVtaBtcz
RGfM7pKgVnclHCYwQyi1aVuFq9Ac/Tp7c8ZaYWSRbthcdEm9MThnelaMTF5gWCp3
6NN7PUOP378VpCbsI9SOvbQzuJx9oW6TINIQcRkiY4ABHmeUdKp16TQJC6leqaDu
irNdtchGjIZTx0NgPNfYDw1XOf9CCtUziRGCx09hp2BDTL+iMdNbmD8+8D0xQ98m
FrdzwAPql6HbjUAaOtfYIIcebZPTgHe1JSHu3nixu7L6Oquelwy77xXK2c1xy3GT
v+zu3Z5NnEAlpwtN03/g1nC6lIruuKP+IaRNvKM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 240487547688366984414224632928809015491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 15:55:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 16:53:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rekafoodfinder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/WRoN5QDp0f8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2014 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rekafoodfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.grocito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aetherdao.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keter.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virtoustack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.careportal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keter.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnettecpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfasis.profesionales.pedidos.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgmentores.liidutpl.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlr8.swimmingwaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mytapau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ben-wolfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'split.guzguz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiastar.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneupking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.simcept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longoncapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andreisarbu.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.recarguita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getboutiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.zappboard.quickcommerce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.briefcase.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydigifuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chords.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.engage.wdsra.voyagernetz.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidcode.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referer.playmister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a18.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a17.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegofrabasa.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russellaterrell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a6.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luppetcafe.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyromantica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgustav.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spyonline.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intergalacticspacebar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indmrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ventasquito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyrata.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gavinmcdonald.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chebstore21.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindtechnic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.bhyn.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbbw-live.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i2.digitalservices.theskyfallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistema.processosdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vidocto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhcuong.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishan.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funny-ecards-service.html5.emallstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gartower-weineck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.qu3bola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdev.stactix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diverdown.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrimk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accept-staging.overhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandeisquantclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinanbolel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comunidad365.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nancyandrichie.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prayog.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.effy.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.takle.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vypiszregistrudluzniku.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbcmg.vida.vdmsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.poddog.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charitableactstheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.needham.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.votepizza.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myriade.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starter.quester.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plusminds.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perceptrons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.vtrakit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resumende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edinburghproperties.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muziekstudio.123zing.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcslab.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.server.mobilo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diseasefinder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecallsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.saltireawards.scot'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divijg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbbw-live.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commaid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monstr-soft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videotron.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creekcoding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverfloating.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casval.trade'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booqswapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energysource.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familytoolsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convocatorias.premiosindiacatalina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamcapitaladvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardenasdefensalegal.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.cleared4.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/80QChtRoEi4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c4535197b000004030047304502207e0fbc42a5034215b1641e4a23897f8b9098955ecac1f1dd9d6c67b7c37443b1022100e93d324be2db7afb39c0de66c934e86a96f8533a48fc769943d1ab9aa9a1818c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c453518a7000004030047304502203fe6ccc874387d7e04bbb7c3a290f79ae42dafac763b3056d0b3ef155a758289022100937c9f9b292d4d87cd1b673b89c6cc3837d187495b26e9e928f92301a21b09ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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