lightningco.in

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 75:f5:5d:d8:6d:65:8b:7a:12:8e:cf:84:40:11:82:bf was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lightningco.in

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:f5:5d:d8:6d:65:8b:7a:12:8e:cf:84:40:11:82:bf
Serial Number (int): 156793691648409058824270565170511708863
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 59:63:4c:f0:5b:04:27:88:0b:a8:76:c8:2d:44:a0:f0:74:26:9c:0e
Fingerprint (sha256): 42:a3:19:a9:ef:0f:b3:c4:3a:54:78:2c:44:39:6b:9e:2c:5c:77:ad:5a:30:49:4b:57:e8:da:bd:13:f6:9c:53

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/VJQKYWUgx3A
CRL Distribution Point: http://crls.pki.goog/gts1d4/JcHbY472QxQ.crl

Check the revocation status for certificate lightningco.in

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lightningco.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lightningco.in
bluesky.veltium.com
console.arrive.school
portal.operative.com.br
manage.mitemma.de
a9fe4dc58ffcffc24e8c08be1e016c.yaytext.com
itakoto.net
sicher-testen.triply.at
www.qrstories.fr
xtyz.de
tylerdickens.com
merikeje3oriente.com.mx
accountadmin-dev.kaptyn.com
backcharges.5starbuild.net
dao.alohadefi.io
portal.wicstudios.org
nezaman.neohowma.com
www.wolvercoin.com
www.africanomad.co.za
menu.ocardapiofood.com.br
doctor.epihelper.com
io-music.io
app.markfitness.in
api.myfurn.se
www.souzoo.us
www.linkcode.com.mx
www.broad-gifu.com
share.plkey.app
gymclient.in
membros.ultimajogada.com
alexg.io
sumamissions.org
apoloagrotech.com.br
www.maluejose.com
www.repix.app
yapimi.neohowma.com
auth-redirect-dev.bubblegum.work
3gconsulting-expertise.com
tsab-app-config.bontouch.com
www.crunchforms.com
www.goma.one
visitor.strong.no
po-bitenc.si
www.astradanft.com
cha.cafe
www.shinhanmedi.com
www.canoncraft.com
link.pinreel.app
demo.app.trune.io
aprimin-suite.azuredtwtest.com
www.crispspicestudios.com
app.e-lettre.com
teams-integration.hrbot.com.br
mafj.designsbylagb.com
kdfcrealestate.com
appstorereview.app2.wakuas.com
www.dubbiiplus.com
fjordmanagement.3diq.com
wov.herstelverzoek.nl
soueinstein.orchestra4edu.com
www.kabanaimoveis.com.br
www.getfocusednow.com
layanan.kudukomunikasi.id
www.au-sphere.com
klefki.leelisa.com
skrylle.raketten.net
www.blocksatoracle.com
www.drenwal.com
player.disign.tv
neophi.com
playticipate.com
humbltokenengine.com
app-link.baeit.co.kr
www.rafaelasilvapsi.com.br
grelixit.com
hero.stevemaguire.dev
qa.flymii.org
junienyc.com
www.tierjay.com
links.nightly.investmighty.com
qr.tasrobot.com.au
knitr.io
www.project44.app
www.fyzsbiai.club
hcerp.hyperclouddigitalapps.com
www.linder.beer
www.satssanta.com
www.scmwisdome.com
app.emporix.io
en.beautizon.com.vn
www.cramer.ink
portablecoffee.com
www.groenvanggrill.dk
assets.urbansharing.design
sagaworkshop.net
suseva.com
tanakadev.com
tavla.entur.no
test.app.citycar.co.il
dreamstocks.in

Other certificates including the domain name lightningco.in

(limited to 100 certificates)
docs.bitsrc.io
lightningco.in
www.kingchiller.com
www.bettercoachs.com
alexg.io
www.maluejose.com
ibridgeminds.com

Certificate

The complete raw certificate details for lightningco.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINdzCCDF+gAwIBAgIQdfVd2G1li3oSjs+EQBGCvzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzA5MjUwMjA5MjZaFw0yMzEyMjQw
MzA2MDZaMBkxFzAVBgNVBAMTDmxpZ2h0bmluZ2NvLmluMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisweg4/A08uxrfHKNwGnA6/
z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrWrb62Cf/HBei6zD4wuJAC
FRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89llhMA9p+/Uiat7X3Y3nYhr
fxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk//tVMMjOThi69wah13bI
Fcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82jXqtE4UCUJ2VR4GwrRhc
poaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+gQIDAQABo4IKjDCCCogw
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFAap3NkUPVD1G5jttt0R570Wtwz8MB8GA1UdIwQYMBaAFCXi
GA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp
aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvVkpRS1lXVWd4M0EwMQYIKwYB
BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5kZXIwgggv
BgNVHREEgggmMIIIIoIObGlnaHRuaW5nY28uaW6CE2JsdWVza3kudmVsdGl1bS5j
b22CFWNvbnNvbGUuYXJyaXZlLnNjaG9vbIIXcG9ydGFsLm9wZXJhdGl2ZS5jb20u
YnKCEW1hbmFnZS5taXRlbW1hLmRlgiphOWZlNGRjNThmZmNmZmMyNGU4YzA4YmUx
ZTAxNmMueWF5dGV4dC5jb22CC2l0YWtvdG8ubmV0ghdzaWNoZXItdGVzdGVuLnRy
aXBseS5hdIIQd3d3LnFyc3Rvcmllcy5mcoIHeHR5ei5kZYIQdHlsZXJkaWNrZW5z
LmNvbYIXbWVyaWtlamUzb3JpZW50ZS5jb20ubXiCG2FjY291bnRhZG1pbi1kZXYu
a2FwdHluLmNvbYIaYmFja2NoYXJnZXMuNXN0YXJidWlsZC5uZXSCEGRhby5hbG9o
YWRlZmkuaW+CFXBvcnRhbC53aWNzdHVkaW9zLm9yZ4IUbmV6YW1hbi5uZW9ob3dt
YS5jb22CEnd3dy53b2x2ZXJjb2luLmNvbYIVd3d3LmFmcmljYW5vbWFkLmNvLnph
ghltZW51Lm9jYXJkYXBpb2Zvb2QuY29tLmJyghRkb2N0b3IuZXBpaGVscGVyLmNv
bYILaW8tbXVzaWMuaW+CEmFwcC5tYXJrZml0bmVzcy5pboINYXBpLm15ZnVybi5z
ZYINd3d3LnNvdXpvby51c4ITd3d3Lmxpbmtjb2RlLmNvbS5teIISd3d3LmJyb2Fk
LWdpZnUuY29tgg9zaGFyZS5wbGtleS5hcHCCDGd5bWNsaWVudC5pboIYbWVtYnJv
cy51bHRpbWFqb2dhZGEuY29tgghhbGV4Zy5pb4IQc3VtYW1pc3Npb25zLm9yZ4IU
YXBvbG9hZ3JvdGVjaC5jb20uYnKCEXd3dy5tYWx1ZWpvc2UuY29tgg13d3cucmVw
aXguYXBwghN5YXBpbWkubmVvaG93bWEuY29tgiBhdXRoLXJlZGlyZWN0LWRldi5i
dWJibGVndW0ud29ya4IaM2djb25zdWx0aW5nLWV4cGVydGlzZS5jb22CHHRzYWIt
YXBwLWNvbmZpZy5ib250b3VjaC5jb22CE3d3dy5jcnVuY2hmb3Jtcy5jb22CDHd3
dy5nb21hLm9uZYIRdmlzaXRvci5zdHJvbmcubm+CDHBvLWJpdGVuYy5zaYISd3d3
LmFzdHJhZGFuZnQuY29tgghjaGEuY2FmZYITd3d3LnNoaW5oYW5tZWRpLmNvbYIS
d3d3LmNhbm9uY3JhZnQuY29tghBsaW5rLnBpbnJlZWwuYXBwghFkZW1vLmFwcC50
cnVuZS5pb4IeYXByaW1pbi1zdWl0ZS5henVyZWR0d3Rlc3QuY29tghl3d3cuY3Jp
c3BzcGljZXN0dWRpb3MuY29tghBhcHAuZS1sZXR0cmUuY29tgh50ZWFtcy1pbnRl
Z3JhdGlvbi5ocmJvdC5jb20uYnKCFm1hZmouZGVzaWduc2J5bGFnYi5jb22CEmtk
ZmNyZWFsZXN0YXRlLmNvbYIeYXBwc3RvcmVyZXZpZXcuYXBwMi53YWt1YXMuY29t
ghJ3d3cuZHViYmlpcGx1cy5jb22CGGZqb3JkbWFuYWdlbWVudC4zZGlxLmNvbYIV
d292LmhlcnN0ZWx2ZXJ6b2VrLm5sgh1zb3VlaW5zdGVpbi5vcmNoZXN0cmE0ZWR1
LmNvbYIYd3d3LmthYmFuYWltb3ZlaXMuY29tLmJyghV3d3cuZ2V0Zm9jdXNlZG5v
dy5jb22CGWxheWFuYW4ua3VkdWtvbXVuaWthc2kuaWSCEXd3dy5hdS1zcGhlcmUu
Y29tghJrbGVma2kubGVlbGlzYS5jb22CFHNrcnlsbGUucmFrZXR0ZW4ubmV0ghZ3
d3cuYmxvY2tzYXRvcmFjbGUuY29tgg93d3cuZHJlbndhbC5jb22CEHBsYXllci5k
aXNpZ24udHaCCm5lb3BoaS5jb22CEHBsYXl0aWNpcGF0ZS5jb22CFGh1bWJsdG9r
ZW5lbmdpbmUuY29tghRhcHAtbGluay5iYWVpdC5jby5rcoIad3d3LnJhZmFlbGFz
aWx2YXBzaS5jb20uYnKCDGdyZWxpeGl0LmNvbYIVaGVyby5zdGV2ZW1hZ3VpcmUu
ZGV2gg1xYS5mbHltaWkub3JnggxqdW5pZW55Yy5jb22CD3d3dy50aWVyamF5LmNv
bYIebGlua3MubmlnaHRseS5pbnZlc3RtaWdodHkuY29tghJxci50YXNyb2JvdC5j
b20uYXWCCGtuaXRyLmlvghF3d3cucHJvamVjdDQ0LmFwcIIRd3d3LmZ5enNiaWFp
LmNsdWKCH2hjZXJwLmh5cGVyY2xvdWRkaWdpdGFsYXBwcy5jb22CD3d3dy5saW5k
ZXIuYmVlcoIRd3d3LnNhdHNzYW50YS5jb22CEnd3dy5zY213aXNkb21lLmNvbYIO
YXBwLmVtcG9yaXguaW+CE2VuLmJlYXV0aXpvbi5jb20udm6CDnd3dy5jcmFtZXIu
aW5rghJwb3J0YWJsZWNvZmZlZS5jb22CFXd3dy5ncm9lbnZhbmdncmlsbC5ka4Ia
YXNzZXRzLnVyYmFuc2hhcmluZy5kZXNpZ26CEHNhZ2F3b3Jrc2hvcC5uZXSCCnN1
c2V2YS5jb22CDXRhbmFrYWRldi5jb22CDnRhdmxhLmVudHVyLm5vghZ0ZXN0LmFw
cC5jaXR5Y2FyLmNvLmlsgg5kcmVhbXN0b2Nrcy5pbjAhBgNVHSAEGjAYMAgGBmeB
DAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxz
LnBraS5nb29nL2d0czFkNC9KY0hiWTQ3MlF4US5jcmwwggEDBgorBgEEAdZ5AgQC
BIH0BIHxAO8AdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYrK
UC/+AAAEAwBHMEUCIQDhZv+Ro2oOhe5zXoVT/8vmOXPDp7p0o3peBYKT3lyAfAIg
Va3fpL4an8wgWB4x0Plyt56eRgeRB4f9ZI7SQOG3nngAdQB6MoxU2LcttiDqOOBS
HumEFnAyE4VNO9IrwTpXo1LrUgAAAYrKUDAbAAAEAwBGMEQCIHbtEZWLW55zPsCy
thoWZhCqS83ig9t7q4LKJ9aluvOLAiAmxdVfjBZExrVo+sU1DuYgre3QnafwYmCu
J/WH+sURWjANBgkqhkiG9w0BAQsFAAOCAQEAmxQQR7u1lMJV41X2K1NkmHGhYYTl
zxMaJvjcraSvyim1JGDlUJHG6twEHKpgp2lwTJWFdu4rXxpQUScVhxeKxWTCMdbY
fikXbNZqQEnOZM7IRwNOjfRUdDDdpKx5rnqqKYRQBtORFgpWOjOxigkDC1/R+pyO
2dzM3dr/PreytS1M1JTu7SkYexQBfZsVb+PqaFL/t8GTv73UGwyVgS15GD0Bu+EU
Dx8tLRiOt8TFABEOlzvKh3BFLkQDGzmZcBWgwrrgr/kSLPLNN93t8oKgpU3ymL9w
+MTdjOcK9ui8I+Nq4As5ilBGcQpK2xTdWMaUjMgwlqiWfOFymAY9dtVUqw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156793691648409058824270565170511708863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 02:09:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 03:06:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lightningco.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/VJQKYWUgx3A'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2086 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightningco.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluesky.veltium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.arrive.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.operative.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.mitemma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a9fe4dc58ffcffc24e8c08be1e016c.yaytext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itakoto.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicher-testen.triply.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qrstories.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtyz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tylerdickens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merikeje3oriente.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountadmin-dev.kaptyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backcharges.5starbuild.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dao.alohadefi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.wicstudios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nezaman.neohowma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wolvercoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africanomad.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menu.ocardapiofood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctor.epihelper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'io-music.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.markfitness.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.myfurn.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.souzoo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linkcode.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broad-gifu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.plkey.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gymclient.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membros.ultimajogada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexg.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumamissions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apoloagrotech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maluejose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yapimi.neohowma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-redirect-dev.bubblegum.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3gconsulting-expertise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsab-app-config.bontouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crunchforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goma.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitor.strong.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'po-bitenc.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astradanft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cha.cafe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shinhanmedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoncraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.pinreel.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.app.trune.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprimin-suite.azuredtwtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crispspicestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.e-lettre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teams-integration.hrbot.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mafj.designsbylagb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdfcrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appstorereview.app2.wakuas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubbiiplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fjordmanagement.3diq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wov.herstelverzoek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soueinstein.orchestra4edu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kabanaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getfocusednow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layanan.kudukomunikasi.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.au-sphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klefki.leelisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skrylle.raketten.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blocksatoracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drenwal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.disign.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neophi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playticipate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humbltokenengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-link.baeit.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rafaelasilvapsi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grelixit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hero.stevemaguire.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.flymii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junienyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tierjay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.nightly.investmighty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.tasrobot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knitr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.project44.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fyzsbiai.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcerp.hyperclouddigitalapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linder.beer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satssanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scmwisdome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.emporix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.beautizon.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cramer.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portablecoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groenvanggrill.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.urbansharing.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagaworkshop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suseva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanakadev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tavla.entur.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.app.citycar.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamstocks.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/JcHbY472QxQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aca502ffe0000040300473045022100e166ff91a36a0e85ee735e8553ffcbe63973c3a7ba74a37a5e058293de5c807c022055addfa4be1a9fcc20581e31d0f972b79e9e4607910787fd648ed240e1b79e780075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aca50301b0000040300463044022076ed11958b5b9e733ec0b2b61a166610aa4bcde283db7bab82ca27d6a5baf38b022026c5d55f8c1644c6b568fac5350ee620adedd09da7f06260ae27f587fac5115a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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