g-fit.co.il

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 67:b9:05:75:58:6d:b2:31:09:5a:2b:4f:b5:b5:55:a5 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=g-fit.co.il

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:b9:05:75:58:6d:b2:31:09:5a:2b:4f:b5:b5:55:a5
Serial Number (int): 137871169193785605712064556962715882917
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 9a:55:84:d4:5e:29:87:c3:d1:e6:11:07:43:d2:ad:29:e2:a5:85:6d
Fingerprint (sha256): 50:a2:c3:0d:af:37:db:76:93:34:9c:4b:b9:87:e3:22:3c:b0:f5:c5:bf:05:59:d9:86:5f:9d:42:80:e7:06:77

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/p7WA65YEfNc
CRL Distribution Point: http://crls.pki.goog/gts1d4/FAATSdS0y1Y.crl

Check the revocation status for certificate g-fit.co.il

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for g-fit.co.il

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

g-fit.co.il
nexdup.io
pgbinc.net
nvefb.com.br
glasaj.supertalent.hr
www.stock.keabot.fr
firebaseapac.wexerverification.online
radiotem.pe
alpha.patientsend.com
chat-event-app-stg.42chat.com
www.hotelsaikripaimperial.com
clearintent.org
explore.photos
www.c2s.prasoon.me
getdoozy.tech
cisum-music.com
encuesta.k-9apps.com
undial.service.deloitte.ai
food-diversion.woolworths.com.au
business.cashaam.com
www.cienciasemfim.com.br
www.nicotine.rocks
am.tixbc.com
www.chriswycoff.com
educatortoolbox.com
www.lightpc.in
www.schmick.app
www.evorlor.com
r.athelas.com
auth.www.tooshare.com
cdn.static.tools
staging.public.uveye.app
gomoku.moonshine.tw
shipper.flixlog.com
www.deathmatchcafe.com
ory.dafbyte.com
signin.highmark.com
app.onfatt.mt
recommendations.ezcast.com
qc.vandra.hu
backstage.rocksteadymusicschool.com
mnc-training.com
keinex.com
fontflipper.com
engineers4u.com
ispekt.com
portfolio.mouad.co
esclicker.com
naokihasegawa.com
demo.outfox.ai
www.beccarsi.com
www.cloud-loadtest-system.com
dev.labelmates.it
editor.michaelpdidier.com
pairmx.com
oftr.ondagoapp.com
dyn-prc-g.dev-ltl-xpo.com
www.esclicker.com
smoothkeyscroll.com
firria.eu
about.angelroot.com
rc.smartercontact.com
delete.mondaa.com.au
app.aseanrx.com
auth.icancode.au
www.aylton.dev
staging.pakhms.com
cashcounter.vallhund.dev
www.calvaryhillcrest.com
try.drascoedu.com
admin.baudok.com
app-link.xplant.co.kr
salesloopx.com
teledrome.sdfdev.com
edu.rnd.works
theltwm.com
thelifetimetreasure.com
app-link.helloaini.com
www.communitylp.com
links.salonbookly.com
domhygiene.com
www.gulmisalerdogan.com
www.fagbrev.io
www.dilaraceylan.com
www.drift10.com
www.justrun.in
www.otftracker.com
qa-static.referendum2021.campaigns.fire-emblem-heroes.com
www.dosukoi-ikuji.com
beta.exchangecollective.com
my.everymobile.jp
looker.vn
miranda.works
tixr.us
soundfile.gema.de
www.gudangpermata.id
uslandwedding.se
dimri.rezidnet.com
imobiliariavenetto.com.br
phx.ninja

Other certificates including the domain name g-fit.co.il

(limited to 100 certificates)
g-fit.co.il
g-fit.co.il
www.pyorilla.com
admin.mercadomaritimo.com.br
g-fit.co.il
g-fit.co.il
catsoft.works
g-fit.co.il
builtbyjj.com
www.g-fit.co.il
g-fit.co.il
www.g-fit.co.il
g-fit.co.il
languacize.com
gojurne.com
www.abakion.cloudprocezz.com
www.gorout.com
g-fit.co.il
g-fit.co.il
gikguide.in
lp.mintice.net
www.g-fit.co.il
www.carevolunteers.org
g-fit.co.il
g-fit.co.il
www.g-fit.co.il
g-fit.co.il
g-fit.co.il
www.carevolunteers.org

Certificate

The complete raw certificate details for g-fit.co.il in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINPTCCDCWgAwIBAgIQZ7kFdVhtsjEJWitPtbVVpTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzExMjcxOTMwNTBaFw0yNDAyMjUy
MDI3NDdaMBYxFDASBgNVBAMTC2ctZml0LmNvLmlsMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2iQ8Ij3zzELdn6D6ExCQIkUHGC
v6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvXDt1Kxj1ANOKFWDkWWviC9zWd
hdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5OHXNynFGBtfv0aHfPm371Y/eU
raUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5APQ/Fzwnwjvpt4aPJHVPaCF9A
GkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyIDa8C5x+cwh8P2ohtDc5YvLg4J
hnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVUVQIDAQABo4IKVTCCClEwDgYD
VR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFCFFwjusTCzra0+158niw2rRvbPCMB8GA1UdIwQYMBaAFCXiGA6y
V5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYpaHR0
cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvcDdXQTY1WUVmTmMwMQYIKwYBBQUH
MAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5kZXIwggf4BgNV
HREEggfvMIIH64ILZy1maXQuY28uaWyCCW5leGR1cC5pb4IKcGdiaW5jLm5ldIIM
bnZlZmIuY29tLmJyghVnbGFzYWouc3VwZXJ0YWxlbnQuaHKCE3d3dy5zdG9jay5r
ZWFib3QuZnKCJWZpcmViYXNlYXBhYy53ZXhlcnZlcmlmaWNhdGlvbi5vbmxpbmWC
C3JhZGlvdGVtLnBlghVhbHBoYS5wYXRpZW50c2VuZC5jb22CHWNoYXQtZXZlbnQt
YXBwLXN0Zy40MmNoYXQuY29tgh13d3cuaG90ZWxzYWlrcmlwYWltcGVyaWFsLmNv
bYIPY2xlYXJpbnRlbnQub3Jngg5leHBsb3JlLnBob3Rvc4ISd3d3LmMycy5wcmFz
b29uLm1lgg1nZXRkb296eS50ZWNogg9jaXN1bS1tdXNpYy5jb22CFGVuY3Vlc3Rh
LmstOWFwcHMuY29tghp1bmRpYWwuc2VydmljZS5kZWxvaXR0ZS5haYIgZm9vZC1k
aXZlcnNpb24ud29vbHdvcnRocy5jb20uYXWCFGJ1c2luZXNzLmNhc2hhYW0uY29t
ghh3d3cuY2llbmNpYXNlbWZpbS5jb20uYnKCEnd3dy5uaWNvdGluZS5yb2Nrc4IM
YW0udGl4YmMuY29tghN3d3cuY2hyaXN3eWNvZmYuY29tghNlZHVjYXRvcnRvb2xi
b3guY29tgg53d3cubGlnaHRwYy5pboIPd3d3LnNjaG1pY2suYXBwgg93d3cuZXZv
cmxvci5jb22CDXIuYXRoZWxhcy5jb22CFWF1dGgud3d3LnRvb3NoYXJlLmNvbYIQ
Y2RuLnN0YXRpYy50b29sc4IYc3RhZ2luZy5wdWJsaWMudXZleWUuYXBwghNnb21v
a3UubW9vbnNoaW5lLnR3ghNzaGlwcGVyLmZsaXhsb2cuY29tghZ3d3cuZGVhdGht
YXRjaGNhZmUuY29tgg9vcnkuZGFmYnl0ZS5jb22CE3NpZ25pbi5oaWdobWFyay5j
b22CDWFwcC5vbmZhdHQubXSCGnJlY29tbWVuZGF0aW9ucy5lemNhc3QuY29tggxx
Yy52YW5kcmEuaHWCI2JhY2tzdGFnZS5yb2Nrc3RlYWR5bXVzaWNzY2hvb2wuY29t
ghBtbmMtdHJhaW5pbmcuY29tggprZWluZXguY29tgg9mb250ZmxpcHBlci5jb22C
D2VuZ2luZWVyczR1LmNvbYIKaXNwZWt0LmNvbYIScG9ydGZvbGlvLm1vdWFkLmNv
gg1lc2NsaWNrZXIuY29tghFuYW9raWhhc2VnYXdhLmNvbYIOZGVtby5vdXRmb3gu
YWmCEHd3dy5iZWNjYXJzaS5jb22CHXd3dy5jbG91ZC1sb2FkdGVzdC1zeXN0ZW0u
Y29tghFkZXYubGFiZWxtYXRlcy5pdIIZZWRpdG9yLm1pY2hhZWxwZGlkaWVyLmNv
bYIKcGFpcm14LmNvbYISb2Z0ci5vbmRhZ29hcHAuY29tghlkeW4tcHJjLWcuZGV2
LWx0bC14cG8uY29tghF3d3cuZXNjbGlja2VyLmNvbYITc21vb3Roa2V5c2Nyb2xs
LmNvbYIJZmlycmlhLmV1ghNhYm91dC5hbmdlbHJvb3QuY29tghVyYy5zbWFydGVy
Y29udGFjdC5jb22CFGRlbGV0ZS5tb25kYWEuY29tLmF1gg9hcHAuYXNlYW5yeC5j
b22CEGF1dGguaWNhbmNvZGUuYXWCDnd3dy5heWx0b24uZGV2ghJzdGFnaW5nLnBh
a2htcy5jb22CGGNhc2hjb3VudGVyLnZhbGxodW5kLmRldoIYd3d3LmNhbHZhcnlo
aWxsY3Jlc3QuY29tghF0cnkuZHJhc2NvZWR1LmNvbYIQYWRtaW4uYmF1ZG9rLmNv
bYIVYXBwLWxpbmsueHBsYW50LmNvLmtygg5zYWxlc2xvb3B4LmNvbYIUdGVsZWRy
b21lLnNkZmRldi5jb22CDWVkdS5ybmQud29ya3OCC3RoZWx0d20uY29tghd0aGVs
aWZldGltZXRyZWFzdXJlLmNvbYIWYXBwLWxpbmsuaGVsbG9haW5pLmNvbYITd3d3
LmNvbW11bml0eWxwLmNvbYIVbGlua3Muc2Fsb25ib29rbHkuY29tgg5kb21oeWdp
ZW5lLmNvbYIXd3d3Lmd1bG1pc2FsZXJkb2dhbi5jb22CDnd3dy5mYWdicmV2Lmlv
ghR3d3cuZGlsYXJhY2V5bGFuLmNvbYIPd3d3LmRyaWZ0MTAuY29tgg53d3cuanVz
dHJ1bi5pboISd3d3Lm90ZnRyYWNrZXIuY29tgjlxYS1zdGF0aWMucmVmZXJlbmR1
bTIwMjEuY2FtcGFpZ25zLmZpcmUtZW1ibGVtLWhlcm9lcy5jb22CFXd3dy5kb3N1
a29pLWlrdWppLmNvbYIbYmV0YS5leGNoYW5nZWNvbGxlY3RpdmUuY29tghFteS5l
dmVyeW1vYmlsZS5qcIIJbG9va2VyLnZugg1taXJhbmRhLndvcmtzggd0aXhyLnVz
ghFzb3VuZGZpbGUuZ2VtYS5kZYIUd3d3Lmd1ZGFuZ3Blcm1hdGEuaWSCEHVzbGFu
ZHdlZGRpbmcuc2WCEmRpbXJpLnJlemlkbmV0LmNvbYIZaW1vYmlsaWFyaWF2ZW5l
dHRvLmNvbS5icoIJcGh4Lm5pbmphMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisG
AQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cv
Z3RzMWQ0L0ZBQVRTZFMweTFZLmNybDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2
AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjBJ6R5MAAAQDAEcw
RQIhAPGChLcv7RJXZVn9tk/dSlGRAgfm/ZcRFX6n592wYi5lAiAcQg8INjSSvws5
qorrF7EZnoTDgJVxC3v98dtHd+MhAAB1AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUI
Fy+jqh0HE9MMAAABjBJ6R8QAAAQDAEYwRAIgJapPrxZT+chh5Ss/EHuvNFvUs/Ts
uHtaEXxhNFfTfF4CIG3Wt9wn3DM7EJGvWZYkNYx7rn9J7DtWbik2WOPFdpG/MA0G
CSqGSIb3DQEBCwUAA4IBAQB+quGZUfvOigHyE3zWr3IqjVFpbCbWh+aS6/sAM0pi
wT9staEeM3vVtLJMlXa2F3Oui7X7NM9ZtCLTRBGSdbqc1rNP850MsgJNIOjRIigh
Eju9Q9XjqGtj/prxJLJ/8f2Mu5b83fxg30wgdxOhl4y0bS2Rr3ZT5vjCgGLBl8AI
Rb21IGxwCdW4EAanSKbubUg75qd1nNGbp5twO9NHM2uzICZwvLH0jRxSZxXW1jiM
bGu0aRnOeqARPReuCUAkESiyYOk+ccwxUT5MsUhoVTrUjzw+wzw16ZL8WAvDyfDb
gBDOonijxjx/YTsfdM+38+LJ/vXBjRMQtIfUjf7APDG7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137871169193785605712064556962715882917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 19:30:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 20:27:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'g-fit.co.il'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/p7WA65YEfNc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2031 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g-fit.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexdup.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgbinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvefb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasaj.supertalent.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stock.keabot.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebaseapac.wexerverification.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiotem.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.patientsend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat-event-app-stg.42chat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelsaikripaimperial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearintent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.photos'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c2s.prasoon.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getdoozy.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisum-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encuesta.k-9apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undial.service.deloitte.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food-diversion.woolworths.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.cashaam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cienciasemfim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicotine.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.tixbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chriswycoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educatortoolbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightpc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schmick.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evorlor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.athelas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.www.tooshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.static.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.public.uveye.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gomoku.moonshine.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipper.flixlog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deathmatchcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ory.dafbyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.highmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.onfatt.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recommendations.ezcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc.vandra.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.rocksteadymusicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnc-training.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontflipper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineers4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispekt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.mouad.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esclicker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naokihasegawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.outfox.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beccarsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud-loadtest-system.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.labelmates.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editor.michaelpdidier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pairmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oftr.ondagoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyn-prc-g.dev-ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esclicker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smoothkeyscroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firria.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.angelroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.smartercontact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delete.mondaa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aseanrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.icancode.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aylton.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pakhms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashcounter.vallhund.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calvaryhillcrest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.drascoedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.baudok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-link.xplant.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesloopx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teledrome.sdfdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.rnd.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theltwm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelifetimetreasure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-link.helloaini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitylp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.salonbookly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domhygiene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gulmisalerdogan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fagbrev.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dilaraceylan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drift10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justrun.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otftracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-static.referendum2021.campaigns.fire-emblem-heroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dosukoi-ikuji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.exchangecollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.everymobile.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'looker.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miranda.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tixr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundfile.gema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gudangpermata.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uslandwedding.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimri.rezidnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imobiliariavenetto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phx.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/FAATSdS0y1Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c127a47930000040300473045022100f18284b72fed12576559fdb64fdd4a51910207e6fd9711157ea7e7ddb0622e6502201c420f08363492bf0b39aa8aeb17b1199e84c38095710b7bfdf1db4777e321000075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018c127a47c40000040300463044022025aa4faf1653f9c861e52b3f107baf345bd4b3f4ecb87b5a117c613457d37c5e02206dd6b7dc27dc333b1091af599624358c7bae7f49ec3b566e293658e3c57691bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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