cernym.cz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 73:b6:12:0b:bb:51:7e:b0:0a:01:a3:1a:a5:5a:1a:2b was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cernym.cz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:b6:12:0b:bb:51:7e:b0:0a:01:a3:1a:a5:5a:1a:2b
Serial Number (int): 153806583556373535492810854956722166315
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 05:fd:e5:50:aa:81:c3:6e:e4:e3:9c:be:e6:63:04:8e:f0:f8:b3:d6
Fingerprint (sha256): 59:9a:90:03:b1:47:c6:b5:98:ea:86:6f:e5:d7:f4:b7:c4:06:3a:e1:df:16:de:57:ad:37:f6:b2:69:4b:47:a2

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/4tSAYmbEMqQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/nGBRfdHhxuE.crl

Check the revocation status for certificate cernym.cz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cernym.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cernym.cz
www.valientesconjesus.com
www.ilmagodellapizza.it
workout.znoj.cz
jovem.webmarca.net
chargersmemorymatch.sqwadhq.com
labs.eipets.io
2019.devfesttoulouse.fr
hm.fewkes.net.pl
green-ticket.solution-now.ru
app.adstock.io
inspect.sredasolutions.com
app.onlinedoctor.co.jp
emolocolliniesqs.com
www.beta.salameg.org
imenyu.co.za
link.homehub.africa
www.cmm.academy
www.dr-nisenman.fr
www.alnassrnews.com
shadoweventsmanagement.in
mmtechconsultants.co.za
p.aqn.jp
aesteon.app
platform.testta-tools.nl
ne1.app
yourai.app
bildx.studio
staging.backoffice.uapplyabroad.com
www.lgertel.com
info.smart-again.de
auth.uat.phonebond.in
www.clickhere.zip
cinema.6echo.eu
upsc.tpnt.in
admin1031.estore.business
intunetech.easysignage.app
dl-stgtest.ringitgames.com
www.development.homegrowngardener.io
app.twigs.app
www.teleklinik.ch
www.bettermatch.ch
partners.ruedaz.com
litarix.io
www.solidcrafts.io
kkkrank.com
brennendirectory.com
homesteadr.co
compost-collective.com
app.metsisbilisim.com.tr
admin.stickeralbum.app
foodlens.com
oroboro.studio
ai-gallery.genielab.co
mayapur-info.com
app.lettr.eu
jangraciviltech.com
www.seekeats.com
naturivida.emaiswallet.com
deeplink02.iweventos.com.br
discord.gedo.zip
partner-deeplinks.samaritan.city
maxmind-geoip.codingkicks.com
www.paygram.io
www.teamdominion.jp
1776benjaminfranklinscholarship.org
braggclassactionsettlement.com
javascript-reference.org
l.8it.nyc
pa-sase.dev.appsvc.paloaltonetworks.com
nilly-r.com
www.alchera-dashboard.com
www.kiniscore.xyz
hikawacy.com
www.ctf.gg
pottytraining.me
www.gllogisticsco.com
doubleriver.com
face2faceweb.com
flightonly.com
cloud.legalsystems.cz
49ers.trading
crm-dev.octaos.com
dev-pro.milva.dk
schultek.de
concurso.projetou.com.br
www.greenpenstudios.com
litsheprojects.co.za
www.newdata.co.kr
staging.spatsu.com
lp-measure.remodela.jp
www.mk-homeautomation.com
www.achtelik.dev
prohlidka.praminek.cz
ridgeview-inn.com
www.photo.run
www.waivethewait.com
quizminelabs.com
readaloudforme.com
demo.livepack.co

Other certificates including the domain name cernym.cz

(limited to 100 certificates)
kainottrodt.de
mylovedoll.fr
cernym.cz
www.gosnowstorm.com
www.pranavv.site
colinster327.com
www.cernym.cz
cernym.cz
cernym.cz
www.cernym.cz
www.cernym.cz
institucional.nicbrain.com.br
cernym.cz
portal.goldnest.co
cernym.cz
hoteia.net
see.pete.run
cliente-teste.smartimob.io
staging.trackybara.com
cernym.cz
www.cernym.cz
cernym.cz
www.cernym.cz
www.cernym.cz
www.cernym.cz
www.cernym.cz
snarch.app
www.cernym.cz
www.cernym.cz
jeffmullerdesign.com
www.cernym.cz
jesses.cloud
cernym.cz
cernym.cz
cernym.cz
loyaliteit.eeetwell.be
mitrabiotechnologies.com
app.appspotshot.com
cernym.cz
www.cernym.cz
cernym.cz
cernym.cz
www.cernym.cz
www.cernym.cz
www.psychobats.com
cernym.cz
www.cernym.cz
cernym.cz
cernym.cz
cernym.cz
www.cernym.cz
cernym.cz

Certificate

The complete raw certificate details for cernym.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153806583556373535492810854956722166315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 12:00:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 12:58:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cernym.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/4tSAYmbEMqQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2098 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cernym.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valientesconjesus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilmagodellapizza.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workout.znoj.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jovem.webmarca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargersmemorymatch.sqwadhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.eipets.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019.devfesttoulouse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.fewkes.net.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-ticket.solution-now.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.adstock.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspect.sredasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.onlinedoctor.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emolocolliniesqs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta.salameg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imenyu.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.homehub.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmm.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dr-nisenman.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alnassrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shadoweventsmanagement.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmtechconsultants.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.aqn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesteon.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.testta-tools.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ne1.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourai.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bildx.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.backoffice.uapplyabroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgertel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.smart-again.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.uat.phonebond.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clickhere.zip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema.6echo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upsc.tpnt.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin1031.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intunetech.easysignage.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-stgtest.ringitgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.development.homegrowngardener.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.twigs.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teleklinik.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettermatch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.ruedaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litarix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solidcrafts.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkkrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brennendirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesteadr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compost-collective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.metsisbilisim.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stickeralbum.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodlens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oroboro.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai-gallery.genielab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayapur-info.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lettr.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jangraciviltech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seekeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturivida.emaiswallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplink02.iweventos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discord.gedo.zip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-deeplinks.samaritan.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxmind-geoip.codingkicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paygram.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamdominion.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1776benjaminfranklinscholarship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braggclassactionsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javascript-reference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.8it.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa-sase.dev.appsvc.paloaltonetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilly-r.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alchera-dashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiniscore.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hikawacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctf.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottytraining.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gllogisticsco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doubleriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'face2faceweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.legalsystems.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '49ers.trading'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm-dev.octaos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-pro.milva.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schultek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concurso.projetou.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenpenstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litsheprojects.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newdata.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.spatsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-measure.remodela.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mk-homeautomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.achtelik.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prohlidka.praminek.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgeview-inn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photo.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waivethewait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizminelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readaloudforme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.livepack.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/nGBRfdHhxuE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ac220c5b40000040300473045022100c44c7d6f6ac545c55122a90b4f865545d80291db4e0d4775812919a98099345e022051ba532bb89e6019b245045ad01bd9649226b1a5f935c539cdf6c5c6518f3e0b007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ac220c5a7000004030046304402203877a9a22b514c77f6826b3e1ac7973f6efe753f8cd8a2125e1bb178e166c195022022bede0595d16f769e279f24deffcb30e8c7bff8585700f9006e458cc0a58eb4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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