www.operandus.com.br

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 5a:da:a4:da:8d:a5:b5:4d:09:a1:5b:bd:16:6f:a8:8d was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.operandus.com.br

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:da:a4:da:8d:a5:b5:4d:09:a1:5b:bd:16:6f:a8:8d
Serial Number (int): 120765783966555163282410104637508003981
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 9a:b4:b0:66:da:8a:41:2d:9d:09:b8:07:82:c5:10:a8:c3:34:d7:c1
Fingerprint (sha256): 4a:51:e4:a9:f6:1e:d7:18:67:05:30:43:8c:9f:20:9e:f0:22:c3:d6:3d:0d:37:c7:4a:67:8a:50:69:43:80:aa

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/w4Y-7C2Kzok
CRL Distribution Point: http://crls.pki.goog/gts1d4/EUC0mQ4yMPc.crl

Check the revocation status for certificate www.operandus.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.operandus.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.operandus.com.br
stage-workspace.klr.com.ua
metuvestuves.lt
www.ricksperiments.com
www.oklahomajiujitsuacademy.com
ethanwakeford.dev
www.apertureinfo.in
www.catalyca.com
ospot.io
instituciones.eclinic.com.co
www.telewebsite.info
www.speechking.org
sbsrcnt.removis.jp
www.gassplit.ca
player.gethovr.com
www.wearelivingabroad.com
dragomanager.ca
user-web-m46wtujy8q.stg.indykite.me
www.travelopy.com
lagassa.com.ar
forexsignals.promoheap.com
hebrewclasses.promoheap.com
onlinemarketingclassroom.promoheap.com
rkdeveloper.in
staging.granica.io
mm12helpdesk.com.br
bega.impactapps.com.au
psychopyko.com
workingfamilies-testing.duome.co
be.radioplayer.app
ionic.aigens.com
www.patatinpatatero.app
www.chuchipirat.ch
orango.preview.shortwave-staging.com
teeny.work
www.train-cycle.com
www.weareflekora.com
links.tasteville.com.au
www.crcasas.com
connormcintyre.co.uk
admin.truliv.com.br
www.nocturnalsun.net
www.thevibebjj.com
jingjaisoft.com
www.acharyabharat.com
bushkova.ch
reg-app.minna-no-ginko.com
admin.napandup.com
support.eikontrack.com
worker.kianadev.com
alink.rcgoing.com
cephasresearch.com
dev.secretsanta.mattpeskett.com
admin.blaqhub.com
4bitesdesign.com
storybook-react.carto.com
ineos.admin.kudo.coach
www.heritagefishingcharters.com
silver.preview.shortwave-staging.com
icantafford.degenfatcats.com
www.52sierra.com
theindiansnft.com
app.melete.co
varaharmas.hu
www.shipzzer.com
www.uber-rent.cz
wsh.fiopl.com
www.nybbleds.com
platform.schema.alumio.com
apnascrapwala.com
admin.hyred.my
coffeecloserz.com
api.frutify.co
web-mobile.balin.app
web.lessonkeeper.app
api.superea.sv
logisticsmgmt.rcloud.dev
www.diagnostics.myprism.co.za
sandbox.kor-ui.com
office.shippio.io
mlm.aiglobalimpactfestival.org
termsofuse.scalenda.com
info.bupaacibadem.com.tr
practice.holo.health
shopifygls.robotshatemonkeys.com
ezschool.info
menu.brendi.com.br
d1-myaddressbook.dpdlocal.co.uk
app.123gartenplaner.de
dok.plus
homechef.staging.thechefkart.com
dev.myend.com
www.migrantimaginary.info
josttire.tcsappts.com
matiasklemola.com
mademedia.tech
fpvracing.ph
www.loganberry.co.uk
akut-med-group.de
brickbreak.antoniogalan.es

Other certificates including the domain name operandus.com.br

(limited to 100 certificates)
hammy.slowpoke.de
geminos.io
app.garantiaimoveis.com.br
promotor.com.br
devfest17.gdgahmedabad.com
portal.yamuntu.com
inspired.missiontopsyche.org
legacy.djcsystem.com
www.operandus.com.br
savanrpatel.com
hammy.slowpoke.de
hubertspringer.pl
upollo.ai
mobile.paytraq.com
www.operandus.com.br
hubertspringer.pl
sc.demo1.stx.world
www.toptwentylinks.com
sgsadmin.estore.business
sls-qa.mobilenxt.app

Certificate

The complete raw certificate details for www.operandus.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120765783966555163282410104637508003981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 03:40:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 04:37:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.operandus.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/w4Y-7C2Kzok'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2227 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operandus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-workspace.klr.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metuvestuves.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ricksperiments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahomajiujitsuacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethanwakeford.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apertureinfo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalyca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ospot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instituciones.eclinic.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telewebsite.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speechking.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsrcnt.removis.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gassplit.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.gethovr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearelivingabroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragomanager.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-web-m46wtujy8q.stg.indykite.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelopy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagassa.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexsignals.promoheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hebrewclasses.promoheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinemarketingclassroom.promoheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkdeveloper.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.granica.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm12helpdesk.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bega.impactapps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychopyko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingfamilies-testing.duome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.radioplayer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionic.aigens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patatinpatatero.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chuchipirat.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orango.preview.shortwave-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeny.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.train-cycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weareflekora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.tasteville.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crcasas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connormcintyre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.truliv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nocturnalsun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thevibebjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jingjaisoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acharyabharat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushkova.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reg-app.minna-no-ginko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.napandup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.eikontrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worker.kianadev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alink.rcgoing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cephasresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.secretsanta.mattpeskett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blaqhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4bitesdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook-react.carto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ineos.admin.kudo.coach'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heritagefishingcharters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silver.preview.shortwave-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icantafford.degenfatcats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.52sierra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theindiansnft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.melete.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varaharmas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipzzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uber-rent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsh.fiopl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nybbleds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.schema.alumio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnascrapwala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hyred.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeecloserz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.frutify.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-mobile.balin.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.lessonkeeper.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.superea.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logisticsmgmt.rcloud.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diagnostics.myprism.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.kor-ui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.shippio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlm.aiglobalimpactfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termsofuse.scalenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.bupaacibadem.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.holo.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopifygls.robotshatemonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezschool.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menu.brendi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd1-myaddressbook.dpdlocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.123gartenplaner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dok.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homechef.staging.thechefkart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.myend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.migrantimaginary.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josttire.tcsappts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matiasklemola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mademedia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpvracing.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loganberry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akut-med-group.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brickbreak.antoniogalan.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/EUC0mQ4yMPc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c09ee33390000040300473045022100e19b3c3b0d0644d4711354a1ff617ef465d802bdac81d97886769aa1e18bdc6b022069266b1206debd5eeb088bb2262855edd887b038c84c7f176987189b1ea5ed5300770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c09ee33570000040300483046022100b3719bac5e26f0d0033c2904a81963346646a109ab534e7b3e8ca05a56d681ed0221009eddadfb11d68dc4d964d4becbd2f4ec5e7e08d53592bf4e20276837dcd52a8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00960d0702dad64f42b6caa8f442392ad9ac3d6e851eff38f36a5feaa9c321f6e0ce821a937bcee9813a0e7885e52c9a2cd8da72a4c8c3b7539b19d2c47f1494d8c8049f6b9dc0e11e7edce44f819ed933ef05555b0f71700d099273b89a2e220f06a9af95a3939ef3d721b8645d865320565ac87b92d0ee60b9f1c23bec7c68f97a061d1d2380d86608fb2347b361711f290d47cf2de840b63a117478a6501ad9d1cd040039b9846f6579ac998202ee4a2d6f4e970c8d4cc617b6ad55bfce9c6e263e5b2eb13a8eac9f248e01978505b9230e773206edc30a42c10aaa0e33afa36fae9bfa5058ddebbcb7be6694f8f06cd0d4958af93b9a3806351755471fb8b3