kikbak-app.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 63:74:b8:ed:19:1e:04:7a:10:1d:52:4f:20:67:58:90 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kikbak-app.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 63:74:b8:ed:19:1e:04:7a:10:1d:52:4f:20:67:58:90
Serial Number (int): 132199628766511713371644401349334358160
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b4:8b:4b:85:63:cf:a2:5e:00:db:81:f3:4a:19:97:a4:56:1b:76:9a
Fingerprint (sha256): 45:2d:15:7a:b5:2a:58:8f:68:5a:e3:d3:80:dd:8f:ed:d6:be:16:d4:6e:af:db:4c:d8:ea:af:6e:2a:78:b0:92

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/LsByewEU668
CRL Distribution Point: http://crls.pki.goog/gts1d4/YBDzSmQRhTQ.crl

Check the revocation status for certificate kikbak-app.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kikbak-app.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kikbak-app.com
www.elainaplusian.com
businesspartner.berformance.com
dl.afriksmeals.com
devcastellanos.com
links.cuty.pro
beta.event.thndr.games
www.sensorfusion.tech
www.numidiaargo.com
www.egamebook.com
moodpalace.net
staging-garage.yedem.io
www.appvantage.io
www.ajmarci.com
www.march2020.date
ulidgenerator.net
pages.ighost.jp
oisara.ai
www.starcitizen.gift
sri-cabs.in
marche-design.com
www.frogo-ad.com
btt.hazeapps.com
www.vicenteparmigiani.live
dwarfcorp.org
forum.brx.mx
topvideo.itadaki.monster
soshome-cameroun.net
avney-pere.co.il
sqordinals.xyz
michlovareality.cz
www.nurturemycareer.com
nhk-pre.1a.live
auth.m1a.dev
wallet.lode.one
www.sparkleap.io
www.frenzy.works
evolue.drtis.com.br
www.ranjurave.com
adn.energia.app.br
dosage.malrix.net
assessment.isaidthisyouheardthat.com
notepad.dheerajgadwala.tech
gaapinstitute.org.in
apps.pdamkotasmg.co.id
antoniomartinez.tech
chat.raunak.me
widget.stg.cuddle.me
the.last.kitchen
www.speakingathome.pt
app.quantos.online
www.yosyrick.tech
www.tripgaia.com
lieferschein-pratteln.galvaswiss.ch
leaf.snapmentor.no
carrickemmets.ie
butterhandlung.de
www.valari.xyz
www.lynndesignstudio.in
volksbolsa.com.br
azevedotour.tripsz.com.br
www.atomix.co.in
www.xplore-app.com
provident.preventoverdoseri.org
auth.livegame.show
liberty.farrindustries.com
www.mlsclasses.com
last.kitchen
www.rotinadecasa.com.br
fortuna.ubobu.cz
aceitesnaturalesdelsur.com
booking.prexsell.com
docs.motes.dk
cbapps.co.za
functions-test.lovef.se
church.pro910.com
bmk-service.ru
keepelectronics.com
www.krayceegraphy.com
pl-stage.onlyonebank.io
test.admission.kiwiticket.co.nz
snavi-stg.monoful.jp
offers.alphatour.by
frangoosapopemba.com.br
www.durgaasthanmalchak.in
lab.virtuallabs.ufv.br
www.miki-imai.com
www.arbetsmarknadsdag.se
serhii-liliia.invito.link
tallerdechapa.fanductsl.com
www.agro3g.com.br
portfolio.purplediary.kr
www.petincode.com.br
www.mrincorporadora.com.br
www.jdns.com.br
dev.feasibility.skywire.co.za
helpdesk.beta.thsystems.net.in
cliente.vaivex.com.br
datx.bharat.id
www.thermoworks.co.kr

Other certificates including the domain name kikbak-app.com

(limited to 100 certificates)
abhishekshyp.com
samrv14.jaredsolomon.net
www.yaytext.com
www.declutterit.net
kikbak-app.com
buildtalk.com.au
www.jfl-bizpartners-conference.com
rimaimobiliaria.com.br
online.cherukattkavu.org
www.biryanijunctionpa.com
account.compcodes.com
firstareaph.com
shared.mhy.es
www.retidos.com.br
mta-sts.onyx-informatics.de
lucasahlgren.com
www.dannyglavan.com.au
www.jfl-bizpartners-conference.com
barronsoftware.com
www.orangegsm.hu
shopflix.demo.pbj.live
aceitesnaturalesdelsur.com

Certificate

The complete raw certificate details for kikbak-app.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132199628766511713371644401349334358160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 00:50:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 01:48:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kikbak-app.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/LsByewEU668'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikbak-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elainaplusian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesspartner.berformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.afriksmeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devcastellanos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.cuty.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.event.thndr.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sensorfusion.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.numidiaargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egamebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodpalace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-garage.yedem.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appvantage.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajmarci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.march2020.date'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulidgenerator.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.ighost.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oisara.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starcitizen.gift'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sri-cabs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marche-design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frogo-ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btt.hazeapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vicenteparmigiani.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwarfcorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.brx.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topvideo.itadaki.monster'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soshome-cameroun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avney-pere.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqordinals.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michlovareality.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nurturemycareer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhk-pre.1a.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.m1a.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallet.lode.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sparkleap.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frenzy.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evolue.drtis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranjurave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adn.energia.app.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dosage.malrix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assessment.isaidthisyouheardthat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notepad.dheerajgadwala.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaapinstitute.org.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.pdamkotasmg.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antoniomartinez.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.raunak.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.stg.cuddle.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the.last.kitchen'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speakingathome.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.quantos.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yosyrick.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tripgaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lieferschein-pratteln.galvaswiss.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaf.snapmentor.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrickemmets.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butterhandlung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valari.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynndesignstudio.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volksbolsa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azevedotour.tripsz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atomix.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xplore-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provident.preventoverdoseri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.livegame.show'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty.farrindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlsclasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'last.kitchen'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotinadecasa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortuna.ubobu.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceitesnaturalesdelsur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.prexsell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.motes.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbapps.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'functions-test.lovef.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.pro910.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmk-service.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepelectronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krayceegraphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-stage.onlyonebank.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.admission.kiwiticket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snavi-stg.monoful.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.alphatour.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frangoosapopemba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durgaasthanmalchak.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.virtuallabs.ufv.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miki-imai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arbetsmarknadsdag.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serhii-liliia.invito.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallerdechapa.fanductsl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agro3g.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.purplediary.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petincode.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrincorporadora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jdns.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.feasibility.skywire.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.beta.thsystems.net.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliente.vaivex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datx.bharat.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermoworks.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/YBDzSmQRhTQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e546762a70000040300463044022041f433afb77acee5b25c739d908e1c35d42055df2fae8a1b95e8da4e71b7272a02202f07f724327fc14003003cadd9cc3dd8a4de747249d387cb7d663d185bfdf90d007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e546762b7000004030046304402204329b0786fe008d9f09a022c7561803cdde7f2adc1529dca4f387f44d088cc8e0220721e3c809a8f7fad538b12bf6fe29dc6df2f1bd56d28c494d2a66969885e3845
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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