app.kit.fit

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number d4:80:ab:fe:b5:b8:cb:96:0a:f7:68:41:57:69:25:a3 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.kit.fit

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d4:80:ab:fe:b5:b8:cb:96:0a:f7:68:41:57:69:25:a3
Serial Number (int): 282464437576530316587513641740924429731
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): ad:17:4c:ca:15:fa:f8:31:e1:41:9c:4b:3b:0d:ca:8c:6e:24:cc:89
Fingerprint (sha256): 4c:3f:35:8f:b0:86:4f:91:9a:39:a4:22:d2:34:87:dc:f9:0a:22:b8:54:bd:6e:a5:28:03:37:39:c7:47:86:19

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/hGq6MK6liDU
CRL Distribution Point: http://crls.pki.goog/gts1d4/kLgSsJpJ8-Q.crl

Check the revocation status for certificate app.kit.fit

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.kit.fit

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.kit.fit
mikaelmork.se
dash.ambulance.dma.works
identity-staging.recruiting-solutions.org
t2.gtconsol.com
privacy.alfred.cz
www.legal.pimex.co
dpass.kadokawa.poc.sivira.co
www.pranjumishra.com
www.sable-emouvant.tech
dyndns.divbyzero.gr
lydia-relaxation.fr
sample-h.b.hotekan.com
pipeline-staging.mediumra.re
sample-h.s.hotekan.com
hi.odetv.vn
www.macaw.vn
nailtracking.a1coders.it
panel.ayo.com.mx
app.speeltuin.watdrinkje.be
thegoattalent.com
lifeup.click
blog.skont.pl
www.lotou.kr
auth.selfie-circle.com
nieuwsbriefversturen.nl
zanettiimoveis.com.br
admin.posbel.be
test.thoughtafter.com
playtest.joj.sk
subroad.net
www.appamare.com
recipes.generated.online
kennys.tech
skystars.tw
shop.bzn-musical.de
www.timebox-app.com
student.jec-jabalpur.org
boldsecurity.it
dev.moln.com
www.klevers.in.ua
www.mauriciofernandez.es
nobullproject.co.nz
www.geosmash.tk
upraise.notaproblemforlong.com
www.tienyuan.com.tw
www.invity.id
www.tierjay.com
app.nettworthgame.com
staging.crm.warrix.co.th
www.pikr.tech
www.recipes.generated.online
popquiz.merck.insand.co.kr
link.air4u.co.kr
www.joaopauloficial.com.br
ballparkvisits.com
hyundaileads.com.br
jinro.app
livability.app
wematter.cheerity.com
handai-help.ggtk.app
www.nekerafa.dev
stattracker.com
talktowoman.org
beta.naturell.pl
smart.homehome.app
michelleyuen.design
globalworlditconsultingservices.com
wichitacountynativesun.enotice.io
www.prayupon.com
vnasc.dev
barrysmaleltd.com
www.block32.com
www.globalworlditconsultingservices.com
next.univelop.de
blue-impact.com
lnk.fyyne.com
app.cadienttexting.com
bobcoin.cash
admin-staging.rida.ai
www.sharizard.com
tramitesmonica.com.ar
landing-page.edlin.app
www.frischlymade.tech
www.crucial-cargo.com
amano.app
memo.mercil.app
edge.voxjar.com
pro.bimedoc.com
www.go.wavecxm.com
wingspangoals.com
veganalso.com
www.americanyo.com
americanyo.com
webcreatorlive.com
www.flutterkolkata.dev
brianmullinsfullstackdeveloper.com
krdc-app.com
mediagrace.co.za
www.alexgarella.com

Other certificates including the domain name kit.fit

(limited to 100 certificates)
stg.shibuya-wanokuni.com
atheneasolutions.com
www.kit.fit
kit.fit
link.debug.race2020.teamraise.app
yospdesv.com
momosin.com
www.kit.fit
fillipcap.com
www.kit.fit
melatiku.rsmelati.co.id
www.kit.fit
uat.app.kit.fit
stg.shibuya-wanokuni.com
www.kit.fit
www.mercilith.com
xooom.app
web.kumu.tv
kit.fit
www.tinia.org
vibox.com.co
wa-helper.wayha.la
link.debug.race2020.teamraise.app
kit.fit
www.kit.fit
www.kit.fit
regaloregalo.es
kit.fit
kafraapp.com
myplanetweb.com
app.mynorbu.com
maplelife.co.th
www.dnlogis.vn
nicolaischmid.de
amaedu.app
nymclucknow.studio
eventy.co
www.kit.fit
itaxcode.com
www.kit.fit
app.kit.fit
www.sandbox1.retailmetry.app
www.admin.notshair.com
kit.fit
user.creditech.app
www.kit.fit
www.kit.fit
alexabree.com
www.connectmd.co
kit.fit
dhwani.app
kit.fit
null.page
app.approvecha.cl
www.kit.fit
www.pesodecuba.com
www.kit.fit
vania-retail.talentlytica.com
www.linguaxes.com
mukulsingh.dev
www.kit.fit
www.kit.fit
www.nitro.lol
lardosvelhinhosfoz.com.br
kit.fit
www.spendlyte.com
croper.com
kit.fit
auctioneer.owenwood.com.au
www.kit.fit
www.fitnesslog.it
summer.kingsgift.xyz
divino.caazam.com
www.kit.fit
yngping.mindong.asia
test-clima.farmacare.dev
www.kit.fit
tomasi.net
dev.app.kit.fit
shop.kit.fit
enlytica.com
app.hamibook.com.tw
kit.fit
joerivanvelzen.nl
www.mdln.finance
longhorn.icu
www.zocolate.com
demo.app.kit.fit
www.kit.fit
shop.kit.fit
the-great-escape.billynate.com
kit.fit
vibox.com.co
form.randomkube.com
newmusicontario.ca
kit.fit
gamer.ai
enlytica.com
kit.fit
de.mariniere.nouvoduo.fr

Certificate

The complete raw certificate details for app.kit.fit in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282464437576530316587513641740924429731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 01:25:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 02:24:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.kit.fit'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/hGq6MK6liDU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2073 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kit.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikaelmork.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash.ambulance.dma.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-staging.recruiting-solutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't2.gtconsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.alfred.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legal.pimex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpass.kadokawa.poc.sivira.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pranjumishra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sable-emouvant.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyndns.divbyzero.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lydia-relaxation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sample-h.b.hotekan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipeline-staging.mediumra.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sample-h.s.hotekan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.odetv.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macaw.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nailtracking.a1coders.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.ayo.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.speeltuin.watdrinkje.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoattalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeup.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.skont.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotou.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.selfie-circle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nieuwsbriefversturen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zanettiimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.posbel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.thoughtafter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playtest.joj.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subroad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appamare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipes.generated.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennys.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skystars.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bzn-musical.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timebox-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.jec-jabalpur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boldsecurity.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.moln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klevers.in.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mauriciofernandez.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nobullproject.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geosmash.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upraise.notaproblemforlong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tienyuan.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invity.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tierjay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nettworthgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.crm.warrix.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pikr.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recipes.generated.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popquiz.merck.insand.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.air4u.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joaopauloficial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballparkvisits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyundaileads.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jinro.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livability.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wematter.cheerity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handai-help.ggtk.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nekerafa.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stattracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talktowoman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.naturell.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart.homehome.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelleyuen.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalworlditconsultingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wichitacountynativesun.enotice.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prayupon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnasc.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrysmaleltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.block32.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalworlditconsultingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.univelop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blue-impact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnk.fyyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cadienttexting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobcoin.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-staging.rida.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tramitesmonica.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing-page.edlin.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frischlymade.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crucial-cargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amano.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memo.mercil.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.voxjar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.bimedoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.go.wavecxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingspangoals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veganalso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcreatorlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flutterkolkata.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianmullinsfullstackdeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krdc-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediagrace.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexgarella.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/kLgSsJpJ8-Q.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018701fccc520000040300473045022100a89b739fa271a9c291afb7c4343b7f37d0f50344f2f8105c40b4cdf1886e1eff02204449788a9e2ace47dce93d721e039772f04dda895024d7f94382537d4f7bdca4007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018701fccc0a000004030048304602210096b49faf8d6353ace532cbd1eedb165a701d8bb6094dac9ea80687f2817c4bc7022100d9bc97b8c17b3eae197165220ffd8ae993d19fa780cafb4c80f4c44cdd0a099d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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