curaleafstores.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number c3:78:74:42:19:52:e4:bf:12:64:29:f7:c2:d5:12:63 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=curaleafstores.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): c3:78:74:42:19:52:e4:bf:12:64:29:f7:c2:d5:12:63
Serial Number (int): 259824892797492861453834964371758191203
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 8b:f0:4f:0b:5c:61:42:1c:4c:1c:71:01:76:c6:df:a8:86:8e:3d:4a
Fingerprint (sha256): 40:7f:f1:a3:48:f9:c7:ab:46:b9:42:a7:95:60:48:51:26:7a:65:ac:55:53:56:f7:42:ce:39:ec:74:33:9a:01

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/fp4SM2La8_8
CRL Distribution Point: http://crls.pki.goog/gts1d4/YQsaXJN7pnA.crl

Check the revocation status for certificate curaleafstores.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curaleafstores.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

curaleafstores.com
gogil.aimcomely.com
kaylock.aimcomely.com
bnbniagara.com
app.thekenrad.de
www.helpmedoc.kr
dev-201.com
muce.aimcomely.com
talkhelp.com.br
www.toutpresdesoi.fr
www.icashcard.us
symbola.aimcomely.com
www.belloarteflores.com
entho.aimcomely.com
irsu.aimcomely.com
fambola.aimcomely.com
www.confiorobot.com
floatcatawba.com
app.defidrive.xyz
olfe.aimcomely.com
www.synamic.au
sintry.aimcomely.com
hungkikim.com
homerinvestment.com
craftpositions.com
granf1.com
hungrimonster.com
blakepastrana.com
denken.aimcomely.com
rewards.aroradental.com
www.rgb.au
dinastiavallenata.com
crunchyroll-staging-api.closedcaptionconverter.com
itipton.com
www.dvjohnston.com
www.bythewake.com
finance.prealyse.com
swartex.aimcomely.com
www.fakeserver.in
fretu.aimcomely.com
jpvirtualmall.com
www.degenhotline.com
app.clipule.com
www.confiobot.com
www.homerinvestment.com
multiplicative.com
srarti.aimcomely.com
www.whoanalytics.co
www.geekmespeak.com
www.hicrow.com
dl.stg.gwp-tha.com
meow-translator.com
dev-hero.rhodium.ooo
lilmayoerc.com
meddoes.com
hey-lima.com
dl.dev.gwp-tha.com
potocu.com
www.ecodentalhk.com
link.insiderx.com
rundownstudios.com
malonex.aimcomely.com
qriio.com
geekmespeak.com
illuminatiworldelites.com
alshakib.dev
novolugar.com.br
fvenergiasolar.com.br
www.martamangano.com
www.kamilahconnection.com
seucorpoexplica.com
cdp.beenokle.com
www.ohmaqui.com
www.padelincenter.com
www.samviddhi.com
robaldovino.com
www.bombaytone.com
thundertrailer.com
analytics.ridedott.com
hi-tek-electrical.com
ezykov.com
www.hotbread-lab.com
www.nissansherbrooke.com
notepad.bytenbit.com
malerinstitut.planplatte.de
forager.dk
www.santhoshramaiah.com
app.trainfect.com
www.divinepaul.com
docai.dijiti.com
lifegame.e-onlineservice.com
scorebord.projects.sobrinostudios.com
www.meetnow.in
results.teamracing.com.au
tkjn.net
www.halifaxweb.dev
www.drywallarts.com
bap.mx
mentor.codingninjas.in
dashboard.testingservicesuk.com

Other certificates including the domain name curaleafstores.com

(limited to 100 certificates)
dinastiavallenata.com
curaleafstores.com
presentation.morelli.dev
intentionalwalk.azumio.com
sunside.games
admin.stemsnu.org
admin1237.estore.business
presentation.morelli.dev
zenmerge.gaminatechnology.com
www.andoautopartes.com.ar
admin1237.estore.business
www.goldenlaundry.app

Certificate

The complete raw certificate details for curaleafstores.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 259824892797492861453834964371758191203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 06:24:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 07:21:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curaleafstores.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/fp4SM2La8_8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2032 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curaleafstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogil.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaylock.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnbniagara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thekenrad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpmedoc.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-201.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muce.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkhelp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toutpresdesoi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icashcard.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symbola.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belloarteflores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entho.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irsu.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fambola.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.confiorobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floatcatawba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.defidrive.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olfe.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synamic.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sintry.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungkikim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homerinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftpositions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granf1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungrimonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blakepastrana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denken.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.aroradental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rgb.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinastiavallenata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crunchyroll-staging-api.closedcaptionconverter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itipton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dvjohnston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bythewake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.prealyse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swartex.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fakeserver.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fretu.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpvirtualmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.degenhotline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.clipule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.confiobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homerinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiplicative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srarti.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whoanalytics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geekmespeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hicrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.stg.gwp-tha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meow-translator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-hero.rhodium.ooo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilmayoerc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meddoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hey-lima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.dev.gwp-tha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potocu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecodentalhk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.insiderx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rundownstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malonex.aimcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qriio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geekmespeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illuminatiworldelites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alshakib.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novolugar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fvenergiasolar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martamangano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamilahconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seucorpoexplica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdp.beenokle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohmaqui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.padelincenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samviddhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robaldovino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bombaytone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thundertrailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.ridedott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi-tek-electrical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezykov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotbread-lab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nissansherbrooke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notepad.bytenbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malerinstitut.planplatte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forager.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santhoshramaiah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.trainfect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinepaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docai.dijiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifegame.e-onlineservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorebord.projects.sobrinostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetnow.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.teamracing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkjn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halifaxweb.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drywallarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bap.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentor.codingninjas.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.testingservicesuk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/YQsaXJN7pnA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e5fe55e19000004030046304402201f8fd12f5defbeb57e9e532965ea457430af1805a0a1df0be19c0e69267db3b602200c22208062601b4d39d4fc02ae6ab0e823419f1ec37cd048da339d8e8a0e2ee400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e5fe55e23000004030046304402203c81f7b7092a6a2035d010028218954a6098b9fc3260ecd257f57a805e739e4802200ecc5befbb26fd13f3d5d92528842c3ef3a17e8e77e3aff360d1ba1c88b5739f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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