www.lakva-promotions.mn

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 5e:2b:2f:27:07:55:3e:86:10:05:29:a9:6f:b7:03:b5 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.lakva-promotions.mn

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:2b:2f:27:07:55:3e:86:10:05:29:a9:6f:b7:03:b5
Serial Number (int): 125171656734118248348960444120730895285
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): d7:d7:c6:3f:b3:fd:d9:39:cf:84:3b:25:0e:23:2f:30:db:71:bc:cc
Fingerprint (sha256): 40:82:82:5f:ef:3f:bf:ea:94:3b:33:a9:10:b4:c3:eb:26:c2:11:fb:6b:1b:bc:05:5d:02:f5:84:54:68:fb:81

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/ViX7FLXNH8w
CRL Distribution Point: http://crls.pki.goog/gts1d4/aoaJRseYpkw.crl

Check the revocation status for certificate www.lakva-promotions.mn

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lakva-promotions.mn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lakva-promotions.mn
messages.sharratts-london.co.uk
bikeconnectstores.com
www.kyudo-analysis.com
nemotech.vn
www.adrian-c-louis.com
go.qeepsake.biz
benthebarnekov.dk
www.triangula.no
saaejaguaribe.itransparencia.com.br
portal.sharratts-london.co.uk
www.prais.app
staging.hey.kitchen
wingmanai.me
www.yourquizmaster.tech
www.thesimplemaths.de
streifenshirt.petit-bateau.de
share.draw-your-game.com
www.registrefirmu.lv
ruadireitaazores.pt
reserveren.restaurant
turiyarenovaveis.com.br
crabbles.ste.vc
www.newcairohouse.com
weasley.cz
chat.f10.com.br
parobot.fr
login.flp-lager.de
dev.2u.fan
blog.matematykagryzie.pl
basis.flynth-adviseurs.nl
movedays.nerva.eco
luminet-app.speakylink.ca
famlight.flynth-adviseurs.nl
levimed.se
link.monytccc.eu.org
neoma.cloud
www.barlokmetal.com
www.kajaaniairport.fi
diagnoscheckarna.se
app.matableauresto.com
polyprint.kiev.ua
www.i-told-you-so.dk
stage-app.coinone.co.kr
www.or-heimann.co.il
app.canoeinfo.com
www.mariafernandatembra.com.br
apphm.kardbank.com.br
www.offenerechnungen.ch
www.bouckova.cz
cyberpunkgrid.com
www.paolavidente.com
www.snaheth.com
bauunternehmen-wardenburg.de
www.nftgiftys.com
app-redirect-test.poolcalculator.com
www.katrinaslivkoff.com
www.meikansas.com
dashboardevaluations.com
netmedia.oonlive.com
dynamiclive.smarpees.com
report.tzumi.bycopilot.com
url.purnartha.com
richmondspiderscamps.com
www.universalio.com
android.vidyakul.com
iyadmarzouka.com
regleware.com
www.klimentowicz.com
www.unitedstatesmaptutor.com
dash.newzip.com
stoneagearchives.com
www.ivanscherbina.com
app.commission-app.com
www.menagechef.com
productivity.samweaver.com
learnmore.biorestorative.com
latest.sqribbled.com
www.sidcagremio.com
www.mancadeiros.com
www.eckedugeorgia.com
www.vtmaplecreemee.com
www.sbolel.com
www.inlinewriter.com
auto.usrobotech.com
www.jayaprakashkumar.com
www.loveisvenus.com
get.canuapp.com
app.triadsmash.com
app.nyby.com
www.supersmallerp.com
share.rsa-sachsen.de
gabrielsanabria.com
www.wheesy.de
contact-lenses.wespiapps.com
wherewhatsapp.gemini-apps.com
indofasttrasindo.qucodes.com
republicasunicamp.com.br
legacypets.app
zigzagtailor.in

Other certificates including the domain name lakva-promotions.mn

(limited to 100 certificates)
playground.mapsense.in
docs.dlex.io
www.lakva-promotions.mn
frontend-course.novare.se
simonlary.dev
eupayments.world
merchant.bodanda.com
wingmanai.me
gi-t.com
playground.mapsense.in
coinfight.io
garagecoders.dev
link.notiva.dk
studio.snipclip.app
www.chefsplayground.org
gi-t.com
simonlary.dev

Certificate

The complete raw certificate details for www.lakva-promotions.mn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125171656734118248348960444120730895285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 02:28:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 03:26:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lakva-promotions.mn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/ViX7FLXNH8w'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakva-promotions.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messages.sharratts-london.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikeconnectstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyudo-analysis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nemotech.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adrian-c-louis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.qeepsake.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benthebarnekov.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triangula.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saaejaguaribe.itransparencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.sharratts-london.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prais.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.hey.kitchen'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingmanai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourquizmaster.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesimplemaths.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streifenshirt.petit-bateau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.draw-your-game.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registrefirmu.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruadireitaazores.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserveren.restaurant'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turiyarenovaveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crabbles.ste.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcairohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weasley.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.f10.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parobot.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.flp-lager.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.2u.fan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.matematykagryzie.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basis.flynth-adviseurs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movedays.nerva.eco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminet-app.speakylink.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'famlight.flynth-adviseurs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levimed.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.monytccc.eu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoma.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barlokmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kajaaniairport.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnoscheckarna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.matableauresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyprint.kiev.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-told-you-so.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-app.coinone.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.or-heimann.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.canoeinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariafernandatembra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apphm.kardbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offenerechnungen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouckova.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberpunkgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paolavidente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snaheth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bauunternehmen-wardenburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nftgiftys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-redirect-test.poolcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katrinaslivkoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meikansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboardevaluations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netmedia.oonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamiclive.smarpees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'report.tzumi.bycopilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url.purnartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondspiderscamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android.vidyakul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iyadmarzouka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regleware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klimentowicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedstatesmaptutor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash.newzip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneagearchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivanscherbina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.commission-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menagechef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productivity.samweaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnmore.biorestorative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latest.sqribbled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sidcagremio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mancadeiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eckedugeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vtmaplecreemee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbolel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inlinewriter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.usrobotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jayaprakashkumar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loveisvenus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.canuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.triadsmash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nyby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersmallerp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.rsa-sachsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabrielsanabria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheesy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact-lenses.wespiapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wherewhatsapp.gemini-apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indofasttrasindo.qucodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicasunicamp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacypets.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zigzagtailor.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/aoaJRseYpkw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018abaeee7d40000040300473045022033e71ab2e80c5f536452d9da818d144e9841db227633930b9a2031ddbd6ee0cf022100d780debd0f96fb0673a6d76853672a645abfff08709d39e71055bf776383ecf20075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018abaeee7e2000004030046304402201712c281329db9a82d4fedb007a0655f11832e352ea9601ef9d9bc1ff41d706e02200702aac0e68da742bc72ac87280d25dba8c828ee7b2494e06c984c3f5f391119
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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