duffis.us

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number c4:eb:32:5e:76:7d:62:62:0a:e3:83:cf:35:b5:af:63 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=duffis.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c4:eb:32:5e:76:7d:62:62:0a:e3:83:cf:35:b5:af:63
Serial Number (int): 261749898540197465993071184499214495587
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 88:2a:a1:c6:d9:8e:5d:a8:cf:d2:92:1a:f8:57:d8:4b:00:86:86:b2
Fingerprint (sha256): 5a:6a:45:76:a2:59:76:38:08:85:82:a4:37:4a:d3:8a:6c:43:be:5d:09:7b:6c:ce:f7:4c:cd:92:5b:72:1d:42

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/D0omf2ee8TA
CRL Distribution Point: http://crls.pki.goog/gts1d4/9teM_FP_KoE.crl

Check the revocation status for certificate duffis.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duffis.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

duffis.us
reference.email
qsgcyjntmq.device.sighub.io
logster.dk
www.settlementagreementsonly.co.uk
www.phoenifx.com
www.supersheetindia.com
gitbattle.sasank.me
www.almaeuan.com
www.borreliachecken.se
rcf.ecnet.tw
www.yellochat.ae
www.maakso.co.za
ms.ixy.sk
medicalrcsapp.co.za
www.testtolacsendig.hu
www.apptik.nl
paciente.deltabrasilfarma.com.br
www.bugsbytes.com
otodeger.mazzini.com.tr
www.hicell.kr
dev.admin.minsparta.ru
barracaeuropa.queliga.com
money.nanmon.dev
rhymes-with.com
staging.verify.app.pairtreefamily.com
smartconsumernow.com
yaytext.com
www.kevinaiach.com
0000000.list.polytechniccolleges.in
thesubtract.com.au
peekaphonegame.com
www.astralismc.com
app.higeaonline.com
admin.prodeo-live.com
devapplinks.reloyalty.com
gruposabadiniimoveis.com.br
www.ayamishunka.com
yt.aspevo.com
www.ostu.me
www.songsmith.ai
www.ambargupta.com
links.preprod.portal.kaitsolutions.com
www.alicebasilio.com
dao.poolparty.ar
www.planshopcook.com
koi.pedidomovil.es
www.chamaraabeysekara.com
payments.nestria.org
ekenedilichukwu.com
garanted.ru
www.ecsact.dev
www.jrlive.net
sahs12.com
wordconvert.net
illusionspotline.com
guisti.org
www.sunestrategies.com
tracerex.com
www.chihiro.pedidomovil.es
www.spidersolitaire.info
minamiku-shakyo.net
anniversary.lazy-y.com
www.onita.academy
stovle.hagayhaut.com
watchpad.robhold.com
streamable.houghtaling.dev
emojiparty.de
sidgo.dev
api.octopusbrowser.com
notes.painless.health
mobile.easybitesapp.com
www.liverank.genvision.it
www.jobs.ekkiden.com
app-test.fidelizai.com
www.otomailer.com
www.myvillita.com
app.clarksullivan.com
apply.itqan.qafcom.com
www.molarsuk.com
mywork.workerbase.com
events.1umatch.com
www.holmlab.app
partner.sarathi.io
dev.andthisapp.com
bnkpro.app
www.tubify.tv
www.divine.education
flowergroupmm.com
cc-holiday-wishlist.app
the-chusenkai.com
dillanjohnson.com
share.meetus.app
adventure-archive.bbuc.co
share.dev.meetus.app
v6.rxjs.dev
www.storeepi.com
thevnomad.com
www.porfi.dev
develop1.admin.seto-solan.ed.jp

Other certificates including the domain name duffis.us

(limited to 100 certificates)
m.holachef.com
ringwa.lt
sharendipity.com
sethloh.com
hemispherian.com
client.grafixshop.com
blankbingoboard.com
jigsawpuzzledeluxe.games235.com
staging.umbrella.blackarctic.studio
www.pingtower.de
exetertouch.com
www.fridge.cz
fitnesspoint.turnosweb.app
sbgdigitalhub.com
flysuperbbeauty.com
preparhub.ca
dawipo.com
duffis.us
integration.master.airspace-intelligence.com
stagingadmin.bitsian.io
maxgrant.com.au
www.liste.live
www.denzeegames.io
www.mofi.app
duffis.us
picolo.ai
akiram.capewort.com
bip.maksellent.com
www.h-o-r-s-e.online
blankbingoboard.com
www.darrylday.ca
sole360.com
static.lucale.cl
www.gdgkozhikode.org
artsn.space
www.meeples.app
javitti.com.br
cwbanner.com
www.gdeapp.com
www.ottawatech.io
api.octopusbrowser.com
promo.yeshearing.com
diagram61.com
www.preet.me
www.zhe.co.bw
uuid.asset-tracker.spartez.com
feedplanning.com
www.salvospelacruz.com.br
www.parallelparking.com.au
www.tewodros.me
drwr.io
www.toin.in
www.gamcheatsheet.com
www.duffis.us
sidgo.dev
price-list.eventyrgames.com
client.grafixshop.com
www.rhunt.co
entertainmentbomb.com
sharendipity.com
dynamiclink.staging.passbuy.com
promo.yeshearing.com

Certificate

The complete raw certificate details for duffis.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261749898540197465993071184499214495587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 05:05:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 06:03:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duffis.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/D0omf2ee8TA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2087 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duffis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reference.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsgcyjntmq.device.sighub.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logster.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.settlementagreementsonly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenifx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersheetindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitbattle.sasank.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.almaeuan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borreliachecken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcf.ecnet.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellochat.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maakso.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.ixy.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalrcsapp.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testtolacsendig.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apptik.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paciente.deltabrasilfarma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugsbytes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otodeger.mazzini.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hicell.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admin.minsparta.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barracaeuropa.queliga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'money.nanmon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhymes-with.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.verify.app.pairtreefamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartconsumernow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaytext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevinaiach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0000000.list.polytechniccolleges.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesubtract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peekaphonegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astralismc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.higeaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.prodeo-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devapplinks.reloyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruposabadiniimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ayamishunka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yt.aspevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ostu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.songsmith.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ambargupta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.preprod.portal.kaitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alicebasilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dao.poolparty.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planshopcook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koi.pedidomovil.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chamaraabeysekara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.nestria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekenedilichukwu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garanted.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecsact.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jrlive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahs12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordconvert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illusionspotline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guisti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunestrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracerex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chihiro.pedidomovil.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spidersolitaire.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minamiku-shakyo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversary.lazy-y.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onita.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stovle.hagayhaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchpad.robhold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamable.houghtaling.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emojiparty.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidgo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.octopusbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notes.painless.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.easybitesapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liverank.genvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobs.ekkiden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-test.fidelizai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otomailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvillita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.clarksullivan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.itqan.qafcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molarsuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywork.workerbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.1umatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holmlab.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.sarathi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.andthisapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnkpro.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tubify.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divine.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowergroupmm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc-holiday-wishlist.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-chusenkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dillanjohnson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.meetus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventure-archive.bbuc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.dev.meetus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v6.rxjs.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storeepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevnomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porfi.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop1.admin.seto-solan.ed.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/9teM_FP_KoE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018ac5cb0e70000004030047304502202c8d98e48bc2b6caed52a07fcf1b8ec1a4afef67e56650cfa069e37e7f69d5400221008eaf7d3e2c585fdbcf3485e28c8cd850eb938e49a90184e249b5fc359541eefc007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac5cb0e8d000004030046304402200cbe0d7be5000022f491e7a49a8c7af28a8aa1cec580fd0df71e5ac40e0b729b02202bb75c2fde0ee8e57b23c39679bdda7d58438809ff295718204692c4e46262b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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