poistu.raha.fi

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 73:e4:9f:a0:ed:db:ba:3b:0a:89:f4:34:dd:d7:6c:d5 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=poistu.raha.fi

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:e4:9f:a0:ed:db:ba:3b:0a:89:f4:34:dd:d7:6c:d5
Serial Number (int): 154048300852257830512571693375281392853
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 55:ab:ba:ed:fd:07:d2:a0:6f:cb:c4:48:62:78:0d:aa:63:02:4f:ba
Fingerprint (sha256): 59:ab:e9:fd:b4:fa:8c:18:3f:6f:bb:7f:5d:00:0a:f7:22:80:22:7c:b2:4e:5b:7b:44:39:26:86:8f:85:fc:51

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/cSyJNQcxQtM
CRL Distribution Point: http://crls.pki.goog/gts1d4/YGcn2VjHO-c.crl

Check the revocation status for certificate poistu.raha.fi

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for poistu.raha.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

poistu.raha.fi
totem.teste.tupinambaenergia.com.br
houseoffades.adaptivemedia.dev
contact-center.elli.eco
quintaeleden.com.mx
rfs.kriasoft.com
ahmadnasser.net
www.eco-drive.app
kegeltrainer.app
zintea.org
barakajuniorschool.co.ke
vis.telemetryinsights.co.uk
pehlivandev.nl
grupookami.com
www.programmergwin.com
besteachers.ynet.co.il
www.adamsolomon.co.uk
raion.amnotify.com
strollyn.com
ops.collla.com
www.sessionshealth.com
360.navindoors.com
thedatadoc.io
cdn.fiasp-udine.it
bobanetwork.io
balneariosalinas.com
www.array.ie
app-cdn.outgrow.co
app.buildstrongconnections.com
tribal.app
staging.airshipvinicia.com
www.qhseacademieandconsulting.com
www.selforder.live
www.midwayspeedpark.com
devcheckout.firstchoicepos.com
citysched.com
tv.xemsocolive.net
dev.pulscreen.com
www.erikgreen.me
we2tech.in
biglandprints.com
patient.app-dev.casadellasaluteweb.it
flowductive.com
seiko.optic-store.ro
terrydev.com
jaipurpinkpanthers.com
www.malouvanrooij.com
lawili.com
www.englishwithshamila.co.uk
mootfinder.com
eurovet.alemoreau.fr
www.ideaclip.com.au
www.oxycooling.com
www.terrydev.com
www.weatheredstrip.com
covid-app.peopledesigns.net
chirpsweet.com
console.mathematicalinc.com
www.mohyaghoub.com
www.katzen-finder.de
kirjs.com
otis.oson.co.uk
homol.backoffice-legacy.pay2b.net
stg.co-bee.com
www.gitgovernment.com
materials.chi46.com
michaelgoldberg.org
shareplace.cartermoore.ca
lynx234.com
www.mymanarah.com
www.capturemate.com
sfl.surprise.com
mattiabonzi.it
ludotecasescolares.cl
www.pradco.in
hyra-maskin.se
www.leapped.com
www.nutreactivo.com
baas.softwrap.com.br
base-qa.softwiztech.com
app.isheepdog.com
go.connorwhitman.com
stable.psalterapp.com
app.dev.lenarge.com.br
motherbears.com
portal.recompensa-oficial.cwltech.com.br
divestudentaid.com
hall-e.ph
mipymedigital.io
app.grupoalcazar.cl
reyna.getcl.chat
saya.wasdlabs.com
app.startuphive.jp
mobile.gim.com.bd
yundaorders.com
www.noelaubureau.fr
app.bitflyday.com
phlegmmies.com
www.polity.app
www.trainingtracker.app

Other certificates including the domain name raha.fi

(limited to 100 certificates)

Certificate

The complete raw certificate details for poistu.raha.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154048300852257830512571693375281392853
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 22:48:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 23:46:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'poistu.raha.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/cSyJNQcxQtM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2087 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poistu.raha.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totem.teste.tupinambaenergia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseoffades.adaptivemedia.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact-center.elli.eco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quintaeleden.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfs.kriasoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahmadnasser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eco-drive.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kegeltrainer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zintea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barakajuniorschool.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vis.telemetryinsights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pehlivandev.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupookami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.programmergwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besteachers.ynet.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adamsolomon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raion.amnotify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strollyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.collla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sessionshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360.navindoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedatadoc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.fiasp-udine.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobanetwork.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balneariosalinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.array.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-cdn.outgrow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.buildstrongconnections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.airshipvinicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qhseacademieandconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selforder.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midwayspeedpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devcheckout.firstchoicepos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citysched.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.xemsocolive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pulscreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erikgreen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'we2tech.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biglandprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patient.app-dev.casadellasaluteweb.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowductive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seiko.optic-store.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrydev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaipurpinkpanthers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malouvanrooij.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englishwithshamila.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mootfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurovet.alemoreau.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideaclip.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxycooling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrydev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weatheredstrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid-app.peopledesigns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chirpsweet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.mathematicalinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mohyaghoub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katzen-finder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otis.oson.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol.backoffice-legacy.pay2b.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.co-bee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gitgovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materials.chi46.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelgoldberg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareplace.cartermoore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynx234.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymanarah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capturemate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfl.surprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattiabonzi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ludotecasescolares.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pradco.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyra-maskin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leapped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutreactivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baas.softwrap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-qa.softwiztech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.isheepdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.connorwhitman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stable.psalterapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.lenarge.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motherbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.recompensa-oficial.cwltech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divestudentaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hall-e.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mipymedigital.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.grupoalcazar.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reyna.getcl.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saya.wasdlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.startuphive.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.gim.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yundaorders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noelaubureau.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bitflyday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phlegmmies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polity.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trainingtracker.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/YGcn2VjHO-c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018abf4b31fe000004030047304502202a01509998350ecf56113f4828e2b05c4c46a48d7ca4af0fd11b85aa7f2546b00221009e2ec2528d1f884920e10ecdb5fa66b468504456bd703d09ce2cb85c26cdbf410075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018abf4b31e600000403004630440220226907e073f096de88571faafa424e089538f10a9c7d3560a05988e8232783290220511ac3bf1a1635b34d1131be81e7bb4e31431218555e00620ef0227fbbd0e569
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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