www.shiacommunity.org

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number f8:e1:9d:b4:04:4a:f7:05:12:0e:b4:cf:59:39:1c:5e was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.shiacommunity.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f8:e1:9d:b4:04:4a:f7:05:12:0e:b4:cf:59:39:1c:5e
Serial Number (int): 330820008348535065644393867329710660702
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 16:d8:9f:e6:64:ab:46:d3:ab:35:d3:51:b2:76:af:bb:09:98:31:c5
Fingerprint (sha256): 47:4b:de:cd:7c:95:76:08:53:ff:a2:ea:17:bb:97:53:db:aa:0e:99:47:1f:03:12:9f:b0:46:17:3b:7b:07:42

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/BHFbM7TrzbQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/4tH3zExNRPQ.crl

Check the revocation status for certificate www.shiacommunity.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.shiacommunity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.shiacommunity.org
johndolce.com
usctriathlon.org
dannyandabby.com
admin.usctriathlon.org
y.mysoft.solutions
docs.parkzenapp.com
daiglegroup.com
sintoniapet.com.br
perlahaz.hu
app.masteryprep.com
www.quisii.com
www.pompes-funebres-compare.com
www.necker-bauder.de
prizes.clawee.com
www.lawsblog.me
www.pslove.dev
www.notetaker.info
smiletteinnovations.com
www.kitagawa.dev
applinks.sprive.com
links-crm.trybench.com
bikefix.co.uk
www.lovgc.com
www.advancedfantasyroleplaying.com
morenoise.it
www.pinkshirtlabs.com
russellsny.com
login.eazypayment.in
app.qlivelearn.in
maintallokal.de
www.zeusvault.com
www.ues-directionaldrilling.com
cryptokeyword.info
skk-rooms.com
castify.jp
app.stactix.com
insyt.de
ost-backpack.backpackfordrive.dev
uossyu.com
etodo.pkges.com
www.speakeasy.fan
www.syenrotta.com
tannkoo.com
ashley-sectional-config.3dcloud.io
shop2.training.mindyourpass.io
ashley-sectional-config-cert.3dcloud.io
warrantycar.profender4x4.com
fsp.paynowafrica.com
shop6.training.mindyourpass.io
underdogzdao.com
www.tenis-jarocin.com.pl
dome.round-zero.com
lipsync.rvaxa.com
incrediscope.visionect.com
z-rho.in
www.sesattest.com
admin.tomoru.ru
ppmechanical.yourjha.com
www.tomexarhakis.com
migration.raksystems.se
bespokesystems.net
superbowl.spark64.com
alcdj.fr
vtc14.simpliroute.com
matthewlong.io
sitemap.spried.com
www.sonbei.jp
adminx.development.spur.io
www.ronyitzhaki.com
fdata.finance
www.divitipi.lv
www.mallmarketing.online
link.vatrin.app
www.botio.io
www.giftofmusic.app
addismind.com
theexpeditionscompany.com
gomydefi.fr
nursebrain.app
www.addismind.com
tgo.mabow.com.tw
www.naughtykids.co.in
www.painttheworld.app
shipper.exofreight.com
www.aidans-blog.com
jobs.date-fns.org
www.sbfsee.de
www.gael1130.com
goldenkeyministorage.com
convert.curaytor.com
cryptoniar.com
karaoke.garrettmanley.com
optionenhandeln.ch
platform.on2off.it
admin.reseauaccesfamille.org
yokohama.linx.live
bounous.com
residenciasegura.com
www.softuniverse.au

Other certificates including the domain name shiacommunity.org

(limited to 100 certificates)
adminx.development.spur.io
people.roamandwander.com
school-dev.handtoy.com
www.sindistrict.net
unitv.ar
vivobrazil.platformkids.com
picturestartprops.com
preview.bloksapps.com
www.shiacommunity.org
www.marinel.org
vivobrazil.platformkids.com
people.roamandwander.com
app.dvinum.es
settlementmoney.sagolink.com
anriar.com
repim.repirmaosmetralha.com.br
indiquea.me
www.blockyboard.com
app.dvinum.es
outofpovertythrueducation.org
www.passed.pw

Certificate

The complete raw certificate details for www.shiacommunity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330820008348535065644393867329710660702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 17:25:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 18:22:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shiacommunity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/BHFbM7TrzbQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2061 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shiacommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johndolce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usctriathlon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dannyandabby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.usctriathlon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y.mysoft.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.parkzenapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiglegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sintoniapet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perlahaz.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.masteryprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quisii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pompes-funebres-compare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.necker-bauder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prizes.clawee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawsblog.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pslove.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notetaker.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiletteinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitagawa.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applinks.sprive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links-crm.trybench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikefix.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovgc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advancedfantasyroleplaying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morenoise.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinkshirtlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russellsny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.eazypayment.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.qlivelearn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintallokal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeusvault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ues-directionaldrilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptokeyword.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skk-rooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castify.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stactix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insyt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ost-backpack.backpackfordrive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uossyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etodo.pkges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speakeasy.fan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syenrotta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tannkoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashley-sectional-config.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop2.training.mindyourpass.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashley-sectional-config-cert.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrantycar.profender4x4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsp.paynowafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop6.training.mindyourpass.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underdogzdao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenis-jarocin.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dome.round-zero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipsync.rvaxa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incrediscope.visionect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z-rho.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sesattest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tomoru.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmechanical.yourjha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomexarhakis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migration.raksystems.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bespokesystems.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superbowl.spark64.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcdj.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtc14.simpliroute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewlong.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitemap.spried.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonbei.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminx.development.spur.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ronyitzhaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdata.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divitipi.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mallmarketing.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.vatrin.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.botio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giftofmusic.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addismind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theexpeditionscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gomydefi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursebrain.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.addismind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgo.mabow.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naughtykids.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.painttheworld.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipper.exofreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aidans-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.date-fns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbfsee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gael1130.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenkeyministorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convert.curaytor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoniar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karaoke.garrettmanley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optionenhandeln.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.on2off.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.reseauaccesfamille.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yokohama.linx.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bounous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residenciasegura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softuniverse.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/4tH3zExNRPQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dfb436e0000000403004730450221008d3a77d7f0b412c081f79ba51eb5dc386563839bfc330f6ce03a9c3e10f5c89a02206a1d9cc07e272ec6e02aa51c6070375f1e28d52d1e80c4a7e3902e76c03b4ad70076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dfb436e130000040300473045022100c60dfaaca27980b78e7f2823ebb1687a63e52190336a41c515d06420ce1cb70302202a7ebc70c8b4cc269ebc42638cdc6fa16d3eb47da9413d069969995cc46a6992
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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