www.bernaobienesraices.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 4e:5a:3d:29:54:6d:34:29:10:f9:42:2a:45:6b:2e:55 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bernaobienesraices.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:5a:3d:29:54:6d:34:29:10:f9:42:2a:45:6b:2e:55
Serial Number (int): 104148330889960818469726075608822918741
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 6f:3d:f1:8a:c2:73:13:c9:6f:5b:f5:d1:53:86:ff:07:95:7a:11:51
Fingerprint (sha256): 3f:1e:48:86:bc:5e:26:d0:4e:8d:61:89:94:5d:5b:c6:6c:ef:1d:98:41:28:38:b6:5d:dc:d7:56:8c:90:87:db

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Rgxt5DVSrDg
CRL Distribution Point: http://crls.pki.goog/gts1d4/ILeTvgh4sVk.crl

Check the revocation status for certificate www.bernaobienesraices.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bernaobienesraices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bernaobienesraices.com
app.innovarancagua.cl
www.loutarot.com
www.mbfsolutionsllc.com
migsuva.com
www.makebelieve.in
nftgame.wtf
advertisers.lunarcow.com
rjohnkraemer.com
issian-kyoto.safarigroup.info
popeyesailclub.com
xwardpay.io
www.verdebendita.no
12-days-of-ar.orangelv.com
dev.creativetherapy-log.com
claritas.conecta4edu.com
ipi.fullinpartners.com
offers.craftjerkyco.com
app.homebar.io
lukascuman.com
app1.risecard.eu
bilhandel.automake.eu
link.loybase.com
admin.bioviva-codekeeper.com
adventuresofthevalparaiso.com
unionepopolare.cloud
winot.fr
paisajesdelvino.eldiario.es
www.popeyesailclub.com
innovar.lextartecnologia.com.br
stage.superclass.co
www.glassclaims.net
www.rizwaniqbal.com
nicksmedira.com
gokyolabs.com
stagelayout.com
www.thebyteland.com
conjugation.ch4vi.com
australiandebtsolvers.ava-systems.com
www.smartneuralsolutions.com
moonsight.io
www.admin.mehalevto.org.il
beta.battlecollage.com
finchart.de
otakupass.com
www.versusversuum.com
www.a-abdessamad.com
www.voiceforlocals.co.uk
demo.midknight.co
app.tecnnic.com.br
microhappy.com
avvocatinelcloud.it
staging-hot.zenport.io
bluedotecommerce.org
www.improvix.com
deep-chest-develop.medcury.health
app.storism.io
ataralondon.com
discoverycancun.com.mx
www.trevorwestin.com
ha-shii.com
iijsvirtual.com
www.ezochain.org
www.innovelo.com
www.sharpears.de
www.shoppingdeals.in
formatchannel.com
www.smekalisty.com
anthony-lahire.fr
martlab.pk
krishanmistry.com
koyn.me
portal-staging.seeqnc.com
storyshare.me
www.okayrecharge.in
www.permitpending.com
leoramstories.com
agriwhiz.co.in
www.mobilegamingstars.com
natmegy.com
flightsinfo.mako.co.il
plataforma.natureschool.com.br
viddown.co.uk
smallgroupchat.com
www.murr.co
sutjob.com
app.winner-english.com
natehorstmann.com
miguelvesco.com
www.guildot.com
thedeeppacific.com
see-platform.com
www.phaserloading.com
r.wematica.com
mikeengforsenate2018.com
study2pass.com
panel.vivetmarket.com
smplint.com
uptimecatholic.com
weather.limesapps.ch

Other certificates including the domain name bernaobienesraices.com

(limited to 100 certificates)
codigopinamar.turnosweb.app
morganlewis.app
www.taskio.app
auth-dev.heartfulness.org
www.bernaobienesraices.com
hoggwarts.com
www.vinarc.co.kr
coinbooks.io
app.winner-english.com
rincondelahuasteca.com
mint.0xrichapewife.com
mywin.id

Certificate

The complete raw certificate details for www.bernaobienesraices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104148330889960818469726075608822918741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 21:58:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 22:55:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bernaobienesraices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Rgxt5DVSrDg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernaobienesraices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.innovarancagua.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loutarot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbfsolutionsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migsuva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makebelieve.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nftgame.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertisers.lunarcow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjohnkraemer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issian-kyoto.safarigroup.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popeyesailclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xwardpay.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verdebendita.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12-days-of-ar.orangelv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.creativetherapy-log.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claritas.conecta4edu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipi.fullinpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.craftjerkyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.homebar.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukascuman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app1.risecard.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilhandel.automake.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.loybase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bioviva-codekeeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventuresofthevalparaiso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unionepopolare.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winot.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paisajesdelvino.eldiario.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popeyesailclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovar.lextartecnologia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.superclass.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glassclaims.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rizwaniqbal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicksmedira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokyolabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagelayout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebyteland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conjugation.ch4vi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiandebtsolvers.ava-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartneuralsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonsight.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.mehalevto.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.battlecollage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finchart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakupass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.versusversuum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a-abdessamad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voiceforlocals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.midknight.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tecnnic.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microhappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avvocatinelcloud.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-hot.zenport.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluedotecommerce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.improvix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep-chest-develop.medcury.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.storism.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ataralondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverycancun.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trevorwestin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ha-shii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iijsvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezochain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharpears.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoppingdeals.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formatchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smekalisty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthony-lahire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martlab.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krishanmistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koyn.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-staging.seeqnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storyshare.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okayrecharge.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.permitpending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leoramstories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriwhiz.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobilegamingstars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natmegy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightsinfo.mako.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plataforma.natureschool.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viddown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallgroupchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.murr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sutjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.winner-english.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natehorstmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miguelvesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guildot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedeeppacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'see-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phaserloading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.wematica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeengforsenate2018.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'study2pass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.vivetmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smplint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptimecatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.limesapps.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/ILeTvgh4sVk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ab4d10f58000004030048304602210096a07959b58bc6f6d877802c3a9d1983811dae41b23a9c86d4be52c109b8ae320221009a4fbb16845bd6268c106e039bddbef61a3b332b009ded7c727d96129407de7b0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab4d10f5e0000040300483046022100a5e75129e424c8a0b93768bccad19a46a8341d229b3414e979cd90b5fa2e2bc7022100fbd315b55de484c4d136e1808779a6fb8a92e65450278cf7b11d417a09c74bd2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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