www.gezapft.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number b6:e5:20:da:a7:49:9e:13:10:d8:de:cb:6b:be:8f:99 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.gezapft.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b6:e5:20:da:a7:49:9e:13:10:d8:de:cb:6b:be:8f:99
Serial Number (int): 243109197574078904069108420611097399193
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 73:f8:2b:c0:ea:08:79:88:49:4c:82:b2:d9:33:7e:4d:36:14:9c:8c
Fingerprint (sha256): 53:be:fc:76:d0:f0:01:fc:58:c6:9d:21:1d:72:71:a4:e7:8b:3e:c6:69:51:bc:fb:3e:c1:94:7d:f2:d1:6e:ae

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/TDlvp3z_Bvo
CRL Distribution Point: http://crls.pki.goog/gts1d4/ewZ9LLNCqI4.crl

Check the revocation status for certificate www.gezapft.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gezapft.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gezapft.com
pawiki.net
www.boardgamefriendsapp.com
pranjalpchaudhari.com
leadership42.com
ticket.nopr.me
www.anse.ro
smtechmartllc.com
www.bizmetrics.io
urpro.jp
book.nopr.me
lockboxsoftware.com
www.coins4u.site
mjn2max.com
ethanflows.com
thefruitbox.net
www.wimpsody.com
mylesgrim.com
www.erotica.boats
romeservice.it
pic-geogaming.mentor.neccton.com
lilhauz.com
app.didrow.com
leoexpertpackers.in
www.lockboxsoftware.com
kenzoq.tech
www.slevin.im
www.pixelated.party
www.animado.io
mgfloor.pl
mushin.existence-klcorp.com
luna3d.xyz
dclonline.co.uk
contactos.delagros.com
foodtrucktracker.org
cp-daiken.dqdai-souls.com
criar.art
bluespherestudios.com
fable.lol
srignanitsolutions.co.uk
silvanadrian.ch
things.nord.dev
controlchopp.com.br
www.auth.app.bainbridgehealth.com
villagestoreadmin.estore.business
www.veluwe.co.uk
web-staging.deskbird.app
share.mijnmarkt.app
nerdlabs.live
www.faizanahmad.ca
www.ryanleung.me
www.paseo.org.za
www.projectmeet.app
gaia-dev.sellconnect.io
codethatdown.com
cluskii.com
www.movitsport.com
ali-hnos.com.ar
grofiestaadmin.estore.business
www.adelles-smile.org
www.cog7thdaycmc.org
onboarding.wokiapp.com
dippingcode.com.br
www.mindle.us
app.sptiming.ch
chefmate.ca
www.dmacellmining.com
app.rubiks.ovh
create.getraddle.com
www.blockxlabs.com
mistify.neptunecloud.com
www.neom-app.com
nso.revolus.com.br
nik-link.ehubstar.com
checkout.acenup.com
flemingbuildingservices.com
pilot1.numerous.cloud
www.looch.dev
digiadaptation.com
www.portalibg.com.br
www.zenshinsystems.com
www.apligroup.com
www.mistergreen.nl
tirupatibalajidarshanonlinebooking.com
webmingal.com
moltoallegro.net
zaroslabs.com
www.pragyatt.net
graduacion.isuminternacional.com
link-dev.trytrue.com
salesocean.io
stroe.dev
bl.io
propaccel.com
blog.ashutec.com
neat.firecms.co
www.uhaipamoja.org
youcup.io
ferienspiele-rothenbergen.de
app.lareco-bornem.be

Other certificates including the domain name gezapft.com

(limited to 100 certificates)
www.caravan-petersen.de
fulltimecinepros.com
www.pos.healthcare
kuwais.sa
jawns.app
www.gezapft.com
m.pickswise.com
ramaprasyanto.my.id
nerdlabs.live
teguhsam.com
www.cinsena.com
www.pixelated.party
woodate.app

Certificate

The complete raw certificate details for www.gezapft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM/zCCC+egAwIBAgIRALblINqnSZ4TENjey2u+j5kwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwMTIxMDEwMDU2WhcNMjQwNDIw
MDE1ODQ5WjAaMRgwFgYDVQQDEw93d3cuZ2V6YXBmdC5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQCq2zTJ4uANYulcbyxEHaJDwiPfPMQt2foPoTEJ
AiRQcYK/oe7CX1Dw8gheyJnJq36JJC9CEFn3BIdhi5gVa9cO3UrGPUA04oVYORZa
+IL3NZ2F1oo92VjO0Il5w36cCusY+fokeimM8aumgLI2rk4dc3KcUYG1+/Rod8+b
fvVj95StpQ50QEMyVfe2g5zKEguVmeNCHoaV0RX02wZ3PkA9D8XPCfCO+m3ho8kd
U9oIX0AaQDSXhg76qrvsny2+r538Ncux0PO7/MeHJmsXIgNrwLnH5zCHw/aiG0Nz
li8uDgmGcbKkiNj+/Ezjpk6WGrUF0QiQXj0tBslZYPleVVRVAgMBAAGjggoSMIIK
DjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUIUXCO6xMLOtrT7XnyeLDatG9s8IwHwYDVR0jBBgwFoAU
JeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzAB
hilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC9URGx2cDN6X0J2bzAxBggr
BgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjCC
B7YGA1UdEQSCB60wggepgg93d3cuZ2V6YXBmdC5jb22CCnBhd2lraS5uZXSCG3d3
dy5ib2FyZGdhbWVmcmllbmRzYXBwLmNvbYIVcHJhbmphbHBjaGF1ZGhhcmkuY29t
ghBsZWFkZXJzaGlwNDIuY29tgg50aWNrZXQubm9wci5tZYILd3d3LmFuc2Uucm+C
EXNtdGVjaG1hcnRsbGMuY29tghF3d3cuYml6bWV0cmljcy5pb4IIdXJwcm8uanCC
DGJvb2subm9wci5tZYITbG9ja2JveHNvZnR3YXJlLmNvbYIQd3d3LmNvaW5zNHUu
c2l0ZYILbWpuMm1heC5jb22CDmV0aGFuZmxvd3MuY29tgg90aGVmcnVpdGJveC5u
ZXSCEHd3dy53aW1wc29keS5jb22CDW15bGVzZ3JpbS5jb22CEXd3dy5lcm90aWNh
LmJvYXRzgg5yb21lc2VydmljZS5pdIIgcGljLWdlb2dhbWluZy5tZW50b3IubmVj
Y3Rvbi5jb22CC2xpbGhhdXouY29tgg5hcHAuZGlkcm93LmNvbYITbGVvZXhwZXJ0
cGFja2Vycy5pboIXd3d3LmxvY2tib3hzb2Z0d2FyZS5jb22CC2tlbnpvcS50ZWNo
gg13d3cuc2xldmluLmltghN3d3cucGl4ZWxhdGVkLnBhcnR5gg53d3cuYW5pbWFk
by5pb4IKbWdmbG9vci5wbIIbbXVzaGluLmV4aXN0ZW5jZS1rbGNvcnAuY29tggps
dW5hM2QueHl6gg9kY2xvbmxpbmUuY28udWuCFmNvbnRhY3Rvcy5kZWxhZ3Jvcy5j
b22CFGZvb2R0cnVja3RyYWNrZXIub3JnghljcC1kYWlrZW4uZHFkYWktc291bHMu
Y29tggljcmlhci5hcnSCFWJsdWVzcGhlcmVzdHVkaW9zLmNvbYIJZmFibGUubG9s
ghhzcmlnbmFuaXRzb2x1dGlvbnMuY28udWuCD3NpbHZhbmFkcmlhbi5jaIIPdGhp
bmdzLm5vcmQuZGV2ghNjb250cm9sY2hvcHAuY29tLmJygiF3d3cuYXV0aC5hcHAu
YmFpbmJyaWRnZWhlYWx0aC5jb22CIXZpbGxhZ2VzdG9yZWFkbWluLmVzdG9yZS5i
dXNpbmVzc4IQd3d3LnZlbHV3ZS5jby51a4IYd2ViLXN0YWdpbmcuZGVza2JpcmQu
YXBwghNzaGFyZS5taWpubWFya3QuYXBwgg1uZXJkbGFicy5saXZlghJ3d3cuZmFp
emFuYWhtYWQuY2GCEHd3dy5yeWFubGV1bmcubWWCEHd3dy5wYXNlby5vcmcuemGC
E3d3dy5wcm9qZWN0bWVldC5hcHCCF2dhaWEtZGV2LnNlbGxjb25uZWN0LmlvghBj
b2RldGhhdGRvd24uY29tggtjbHVza2lpLmNvbYISd3d3Lm1vdml0c3BvcnQuY29t
gg9hbGktaG5vcy5jb20uYXKCHmdyb2ZpZXN0YWFkbWluLmVzdG9yZS5idXNpbmVz
c4IVd3d3LmFkZWxsZXMtc21pbGUub3JnghR3d3cuY29nN3RoZGF5Y21jLm9yZ4IW
b25ib2FyZGluZy53b2tpYXBwLmNvbYISZGlwcGluZ2NvZGUuY29tLmJygg13d3cu
bWluZGxlLnVzgg9hcHAuc3B0aW1pbmcuY2iCC2NoZWZtYXRlLmNhghV3d3cuZG1h
Y2VsbG1pbmluZy5jb22CDmFwcC5ydWJpa3Mub3ZoghRjcmVhdGUuZ2V0cmFkZGxl
LmNvbYISd3d3LmJsb2NreGxhYnMuY29tghhtaXN0aWZ5Lm5lcHR1bmVjbG91ZC5j
b22CEHd3dy5uZW9tLWFwcC5jb22CEm5zby5yZXZvbHVzLmNvbS5icoIVbmlrLWxp
bmsuZWh1YnN0YXIuY29tghNjaGVja291dC5hY2VudXAuY29tghtmbGVtaW5nYnVp
bGRpbmdzZXJ2aWNlcy5jb22CFXBpbG90MS5udW1lcm91cy5jbG91ZIINd3d3Lmxv
b2NoLmRldoISZGlnaWFkYXB0YXRpb24uY29tghR3d3cucG9ydGFsaWJnLmNvbS5i
coIWd3d3LnplbnNoaW5zeXN0ZW1zLmNvbYIRd3d3LmFwbGlncm91cC5jb22CEnd3
dy5taXN0ZXJncmVlbi5ubIImdGlydXBhdGliYWxhamlkYXJzaGFub25saW5lYm9v
a2luZy5jb22CDXdlYm1pbmdhbC5jb22CEG1vbHRvYWxsZWdyby5uZXSCDXphcm9z
bGFicy5jb22CEHd3dy5wcmFneWF0dC5uZXSCIGdyYWR1YWNpb24uaXN1bWludGVy
bmFjaW9uYWwuY29tghRsaW5rLWRldi50cnl0cnVlLmNvbYINc2FsZXNvY2Vhbi5p
b4IJc3Ryb2UuZGV2ggVibC5pb4INcHJvcGFjY2VsLmNvbYIQYmxvZy5hc2h1dGVj
LmNvbYIPbmVhdC5maXJlY21zLmNvghJ3d3cudWhhaXBhbW9qYS5vcmeCCXlvdWN1
cC5pb4IcZmVyaWVuc3BpZWxlLXJvdGhlbmJlcmdlbi5kZYIUYXBwLmxhcmVjby1i
b3JuZW0uYmUwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNV
HR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxZDQvZXdaOUxM
TkNxSTQuY3JsMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUASLDja9qmRzQP5WoC
+p0w6xxSActW3SyB2bu/qznYhHMAAAGNKb/pgAAABAMARjBEAiA2EH0DlRXTpuRD
qB55KGSkB2afs1f6beCltbmqL56OxwIgezDdRFZ2CQZHW9fCwbtM3EZXGTqgIfjU
S3PXexb0I/UAdQB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY0p
v+mKAAAEAwBGMEQCIGTwkWFdhpOLcLnD1rPwIhG5S5K0EOTvlkZKVm4YDbGHAiBs
VLoDKbyxyR5gbyu5A047KHssk2/mvnmyWXWx2azeLDANBgkqhkiG9w0BAQsFAAOC
AQEAocX2zFqy9Ul3fu3zH4msA3AneUX55nlX39EKBO3qHZGXjKoNpuvVJzDzshI9
0xzYEKFkgk6ig0jiQJ69gDa0HZG/e3l3hxll9aO0HmCqC+Z8wlvYlX5QzInKtVrq
RQxx3dV/qB6tnX8m0UhexHat8C5L8aJyDiu20QqXsP9lAaUxTTcg3kpbUAZup1Hd
hHDlob060FGMEaaYMbvx0yyuesQGCYBs7Hvwz9kyaRoEXRZeAz0VMlhCZNZH9zn7
0wCqYgCMIz3+8b4AdREI5pims4InvlnM37aMcrWdiPP7IN68nhkP9acR1gjjrJ8G
7kU4stTDJ8uZAgLFiRYQfqH+tA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 243109197574078904069108420611097399193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 01:00:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 01:58:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gezapft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/TDlvp3z_Bvo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1965 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gezapft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawiki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boardgamefriendsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pranjalpchaudhari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadership42.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.nopr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anse.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtechmartllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bizmetrics.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urpro.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.nopr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockboxsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coins4u.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjn2max.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethanflows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefruitbox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wimpsody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylesgrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erotica.boats'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romeservice.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pic-geogaming.mentor.neccton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilhauz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.didrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leoexpertpackers.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockboxsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenzoq.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slevin.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pixelated.party'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animado.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgfloor.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mushin.existence-klcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luna3d.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dclonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactos.delagros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodtrucktracker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp-daiken.dqdai-souls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criar.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluespherestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fable.lol'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srignanitsolutions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvanadrian.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'things.nord.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlchopp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auth.app.bainbridgehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villagestoreadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veluwe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-staging.deskbird.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.mijnmarkt.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerdlabs.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faizanahmad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryanleung.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paseo.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectmeet.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaia-dev.sellconnect.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codethatdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluskii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movitsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ali-hnos.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grofiestaadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adelles-smile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cog7thdaycmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.wokiapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dippingcode.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sptiming.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefmate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmacellmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rubiks.ovh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'create.getraddle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockxlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistify.neptunecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neom-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nso.revolus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nik-link.ehubstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.acenup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flemingbuildingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot1.numerous.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.looch.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiadaptation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portalibg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zenshinsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apligroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mistergreen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tirupatibalajidarshanonlinebooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmingal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moltoallegro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaroslabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pragyatt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduacion.isuminternacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-dev.trytrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesocean.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stroe.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propaccel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ashutec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neat.firecms.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhaipamoja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youcup.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienspiele-rothenbergen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lareco-bornem.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/ewZ9LLNCqI4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d29bfe9800000040300463044022036107d039515d3a6e443a81e792864a407669fb357fa6de0a5b5b9aa2f9e8ec702207b30dd4456760906475bd7c2c1bb4cdc4657193aa021f8d44b73d77b16f423f500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d29bfe98a0000040300463044022064f091615d86938b70b9c3d6b3f02211b94b92b410e4ef96464a566e180db18702206c54ba0329bcb1c91e606f2bb9034e3b287b2c936fe6be79b25975b1d9acde2c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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