spacetimecrystal.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 45:bb:bc:f6:57:a5:25:ad:12:46:05:71:a1:77:07:12 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spacetimecrystal.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:bb:bc:f6:57:a5:25:ad:12:46:05:71:a1:77:07:12
Serial Number (int): 92691523831963519554821411716120119058
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 5f:60:43:1f:4f:30:6c:31:66:56:49:89:a2:a4:95:e7:03:8a:32:80
Fingerprint (sha256): 53:e4:02:14:72:4a:2f:af:87:51:d0:c8:73:1e:c1:09:f1:74:78:5c:ce:e8:d6:04:ee:95:1c:de:55:b6:bd:d6

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/laJLWbbf4lQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/mcuCYyjJWwg.crl

Check the revocation status for certificate spacetimecrystal.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spacetimecrystal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spacetimecrystal.com
www.ddld.mx
link.thestories.jp
www.entur.org
staging.mymonii.com
ginaridwan.centurycard.live
turnbullclient.com
www.matthewgoodwintherapy.com
senu.app
miplan.moons.pe
github-trendy.code2d.org
dfm.onedrone.com
enrolment.m.monash
links.matakul.jp
www.quix.in
url.rgit.uk
coolbabyadmin.estore.business
zipboard.com
boxtrain.turnosweb.app
adityatrivedi.com
charliestedman.dev
caracal.turnosweb.app
bull.turnosweb.app
chugmustard.com
htht.jp
www.mauzy.dev
chrisport.com
www.nesteggapp.com
cms.mustard.appetiserdev.tech
www.kinebalanced.be
www.abouthaemophilia.com
beta.bitmates.io
ourmemo.tk
thinkup.jfilip.ca
deciomai.com
www.juan.lu
panchoskitchen.asap2go.com
www.universeplaces.com
intelligere.co
sklep.chef-inspiruje.pl
hasl.tech
www.swarajcoin.com
www.tallerlaroca.com
www.codeandpaste.com
fireauth.becon.my
transport-demo.phanmemdathangoee.com
ezbingocaller.com
stage.mymoneytimeline.com
dev.dalalio.com
www.drasameamarques.com
app.share-sheep.com
www.truly-wonderful-minds.com
portugal.jual.club
staging.lindeboom.io
www.drpadmajaclinic.com
shujaaz.enezatelecom.com
jphcoaching.com
kismetapp.co
app.plantationbaptist.org
staging.donotdrawapenis.com
bottleneckexplode.com
southkorea.jual.club
tour.isabellafeng.art
dev.evryw.in
www.joelradams.com
www.myreportgenie.com
www.openconjecture.com
app.bine.world
secure.jobswizz.com
wallyapp.abubunamay.com
buy.dteam.cloud
restoplus.com
live.churchrooms.com
getsetio.com
harpyraiders.com
greenlandfoundation.com
www.rezi.reziworx.com
englishenlinea.com
www.draanateniente.com
newagelidia.com
www.lmserp.com
www.statuspropertyservices.co.za
next.interreader.com
taransit.com
slash-berlin.de
www.zytuny.com
www.artisoul.live
ediliziafrancescomuto.it
biz.iworkie.com
greentecengineering.com
noegocrypto.com
www.namakishqka.com
intuisions.com
app-staging.adadrive.fi
www.eiebox.dev
www.sihilel.com
www.vetta.finance
www.lfconnect.net
app-stg.foreground.live
mminfraprojects.com

Other certificates including the domain name spacetimecrystal.com

(limited to 100 certificates)
www.konabysushicorner.de
www.edlb.dev
sushidog.5loyalty.com
www.spacetimecrystal.com
cixcamey.com
intuisions.com
trackit.qualitysanity.com
spacetimecrystal.com
natura-dashboard-legacy.squidit.com.br
earrn.app
ntnuicalisthenics.no
test.szabra.com
test.szabra.com
beachroadarmysupply.com
www.hpnwbbb.org
c2patool.pixelstream.com
c2patool.pixelstream.com
newagelidia.com

Certificate

The complete raw certificate details for spacetimecrystal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92691523831963519554821411716120119058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 00:06:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 01:04:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spacetimecrystal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/laJLWbbf4lQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2044 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacetimecrystal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddld.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.thestories.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.entur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mymonii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginaridwan.centurycard.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnbullclient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matthewgoodwintherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miplan.moons.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'github-trendy.code2d.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfm.onedrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrolment.m.monash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.matakul.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quix.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url.rgit.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolbabyadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxtrain.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adityatrivedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charliestedman.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caracal.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bull.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chugmustard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htht.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mauzy.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nesteggapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.mustard.appetiserdev.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinebalanced.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abouthaemophilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.bitmates.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourmemo.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkup.jfilip.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deciomai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juan.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panchoskitchen.asap2go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universeplaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligere.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sklep.chef-inspiruje.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasl.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swarajcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tallerlaroca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeandpaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireauth.becon.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transport-demo.phanmemdathangoee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezbingocaller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mymoneytimeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dalalio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drasameamarques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.share-sheep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truly-wonderful-minds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugal.jual.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lindeboom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drpadmajaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shujaaz.enezatelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jphcoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kismetapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.plantationbaptist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.donotdrawapenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottleneckexplode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southkorea.jual.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tour.isabellafeng.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.evryw.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joelradams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myreportgenie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openconjecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bine.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.jobswizz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallyapp.abubunamay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.dteam.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restoplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.churchrooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsetio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpyraiders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlandfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rezi.reziworx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.draanateniente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newagelidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmserp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statuspropertyservices.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.interreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slash-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zytuny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artisoul.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ediliziafrancescomuto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz.iworkie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greentecengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noegocrypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namakishqka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuisions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-staging.adadrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eiebox.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sihilel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetta.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lfconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-stg.foreground.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mminfraprojects.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/mcuCYyjJWwg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b171f1c1e0000040300473045022025af13b45db16102bbf9441a0f77153084d2b24983bdd6a8ff1e33439a1a55d0022100a66a990bceb1f99fc63535a7d6a86b3a51f967473df576b314c564990ab3896200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b171f1c5b0000040300483046022100ffdbe8ea60bf4fd224f5758053d637fe4525f8aef493abe2fee4d79191996840022100f4968b32c4952c4ecb4e7caa4b9ca92d340b8f6c8cf1f0e237bd598237f25f44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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