www.betterstart.co.za

Issued by WR3

About this certificate

This digital certificate with serial number fb:91:20:2e:02:ae:68:99:0a:5d:24:d9:64:59:f8:21 was issued on by Google Trust Services.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.betterstart.co.za

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): fb:91:20:2e:02:ae:68:99:0a:5d:24:d9:64:59:f8:21
Serial Number (int): 334389762668934043676074080677001820193
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: c7:81:f5:fd:8e:88:d9:00:3c:4d:63:a2:50:31:24:a0:ce:23:fe:23

Fingerprint (sha1): a5:52:75:b9:07:da:4f:df:c6:7c:81:45:56:c6:82:9c:de:45:06:a9
Fingerprint (sha256): 43:3f:17:61:f7:8a:0b:1b:a0:aa:56:88:b4:1e:c4:4f:b2:49:0f:31:83:f3:20:18:15:8e:96:9d:13:18:81:ac

Issuing Certificate URL: http://i.pki.goog/wr3.crt

Revocation information

OCSP Server: http://o.pki.goog/s/wr3/-5E
CRL Distribution Point: http://c.pki.goog/wr3/ONPJg2Q_E8w.crl

Check the revocation status for certificate www.betterstart.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.betterstart.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.betterstart.co.za
www.campo-golf.eu
www.riyominternational.com
agendaodonto.com
nancywu.works
www.wabi-sabi.digital
interviewtopper.com
docs.oxushr.xyz
mustevent.dev
agndevelopment.com
icmoon.xyz
www.jmjsistemas.com.br
snapbang360.co.za
web.dazzid.mx
michael-nadine.co.za
imagewear-dev.choozr.ai
lumbunglabs.com
softech.dev.puppycloud.com
milindkumarv.com
www.agndevelopment.com
coach.advisee.co
tachi.ai
zzjinvestment.co
neutronapp.com
www.sevendazebeerleague.com
gis.abinbevefes.app
www.offten.xyz
kwinformatics.com
jetpackclassic.halfbrickplus.com
games.janu.sh
admin.corporateimmigrationuk.com
faur.growceanu.com
apks-admin.rcloud.dev
presale-dev.fishingtown.io
makarajothi.com
wolzcodelife.com
app.dsolar-energy.com
dl.oneastro.co
locator.patientaccess.org
www.totalx.in
meticuly.tenxor.sh
www.peconn.com
s4shibi.com
slack.releaseshub.dipien.com
kickboxinginstitute.impactwrap.com
todolist.klamanjit.dev
www.hml.vojo.com.br
janus-admin-prod.kiswe.com
vertu.partnerhub.co.za
smoulasoutez.cz
uat3-account.canstar.com.au
www.linuxtraining.ie
nineyards.deskbooking.app
lyricize.me
tifo.253below.com
www.tinekekeramiek.nl
school.byteit.pro
untifo.253below.com
rishivr.me
www.adventer.com
www.trustcz.io
firehosereel.in
mendo.clau.io
www.pearltaxi.lk
danceline-friedberg.de
www.forge1.ai
app.onarvel.ee
signin.hravylety.cz
no-http3.horo.jp
nihola.reepco.dk
field-course.forestdesigner.com
www.indesigntraining.ie
staging.admin.maybankmarathon2024.com
weather.tognacci.net
edgetek.co.uk
www.365fithub.co.uk
www.stefanhasenberg.de
cplink.cryptopayment.link
dev.portal.adgile.media
www.birincimakina.com.tr
releaseshub.dipien.com
www.hackyourlearning.ca
seaspiremaritime.com
www.univa.ltd
console.stalliontech.io
stream.techrow.org
fixit.zwenex.com
manuscript.live
theophrastus.org
www.karefabrication.co.za
bullrun2024.space
deemceelive.com
admin.cheersbeaslayers.in
www.simpl.fyi
timers.franciscoruiz.space
sokool.today
www.mtgbooth.com
www.vgtonline.com
cbkpay.it
proveedores.fleetpro.mx

Other certificates including the domain name betterstart.co.za

(limited to 100 certificates)
www.cineflow.ai
forms.westenddance.com.au
www.superb-partners.com
areapaciente.clinicabaviera.com
app.mindtomove.it
themusicassessment.com
dvisionphoto.com
scan.watdrinkje.be
www.betterstart.co.za
staging.entur.no
www.betterstart.co.za
www.vincentbourdeau.com
themusicassessment.com
betterstart.co.za
playrr.neea.dev
midtownstudio.co.kr
gestaopolitica.nerit.app
www.maazsaleem.com
fashion-how.org
www.smccomex.com
fashion-how.org
aristonhotels.it
orionandpartners.com
iex.gatheround.com
www.ampedtrading.com
www.manage.lasso.finance
dev.spelezoli.lv
links.go.coldsnow.net
message-winery.grapeweb.com.au

Certificate

The complete raw certificate details for www.betterstart.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334389762668934043676074080677001820193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 12:54:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-29 13:51:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.betterstart.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c781f5fd8e88d9003c4d63a2503124a0ce23fe23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr3/-5E'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2095 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterstart.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campo-golf.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riyominternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agendaodonto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nancywu.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wabi-sabi.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interviewtopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.oxushr.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustevent.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agndevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icmoon.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmjsistemas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapbang360.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.dazzid.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michael-nadine.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagewear-dev.choozr.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumbunglabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softech.dev.puppycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milindkumarv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agndevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach.advisee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tachi.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzjinvestment.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutronapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sevendazebeerleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.abinbevefes.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offten.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwinformatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetpackclassic.halfbrickplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.janu.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.corporateimmigrationuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faur.growceanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apks-admin.rcloud.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presale-dev.fishingtown.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makarajothi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolzcodelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dsolar-energy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.oneastro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locator.patientaccess.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalx.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meticuly.tenxor.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peconn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4shibi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slack.releaseshub.dipien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickboxinginstitute.impactwrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todolist.klamanjit.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hml.vojo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janus-admin-prod.kiswe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertu.partnerhub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smoulasoutez.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat3-account.canstar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linuxtraining.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nineyards.deskbooking.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyricize.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tifo.253below.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tinekekeramiek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.byteit.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untifo.253below.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rishivr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trustcz.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firehosereel.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendo.clau.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearltaxi.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danceline-friedberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forge1.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.onarvel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.hravylety.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'no-http3.horo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nihola.reepco.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'field-course.forestdesigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indesigntraining.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.admin.maybankmarathon2024.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.tognacci.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgetek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.365fithub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefanhasenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cplink.cryptopayment.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portal.adgile.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birincimakina.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releaseshub.dipien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hackyourlearning.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaspiremaritime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univa.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.stalliontech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.techrow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixit.zwenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuscript.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theophrastus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karefabrication.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullrun2024.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deemceelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cheersbeaslayers.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpl.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timers.franciscoruiz.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokool.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgbooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vgtonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbkpay.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proveedores.fleetpro.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr3/ONPJg2Q_E8w.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fceeeab040000040300483046022100c4405bf9f4226ee75fa57381d68ead7823593171e79d9d4b4d208b5124074147022100b3a404fc24dda2e64557595f226b001355b747266123041430c19afc8b3a26860075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fceeeab38000004030046304402203f1d389f31d794d82dc3f186d9b63d1b98ed990b8cf4432310172e89725d68a702203b19fcdbf36b0a582ae948a8aac2a6accf2daa246612728f8231cd848e29f38b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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