app.pflemi.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 0e:27:fe:40:8c:e9:53:20:09:c3:4d:cf:c3:47:41:81 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.pflemi.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:27:fe:40:8c:e9:53:20:09:c3:4d:cf:c3:47:41:81
Serial Number (int): 18816848364723382573747175069367878017
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): cd:1d:cc:b2:d8:33:e1:6f:48:04:7e:e8:72:75:89:00:8b:42:e5:43
Fingerprint (sha256): 5b:48:6b:81:fb:dc:5c:95:bc:7e:29:5a:8d:ab:6a:5d:c3:f5:bc:83:5c:3a:83:d4:d4:84:4a:15:80:a4:c5:1c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/85RrigEhdQg
CRL Distribution Point: http://crls.pki.goog/gts1d4/lID7udI9D1Y.crl

Check the revocation status for certificate app.pflemi.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.pflemi.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.pflemi.de
www.mix-up.app
creekcountycasa.org
beta.nutriciaacademia.no
www.planet-tongue.net
www.southmumbaiunited.com
company.develop.eu.wowworks.org
enver.trevvelroute.nl
www.coachee.app
certiallc.com
estebandevia3d.com
sketchthat.com.au
web.cloudtcm.com
houseoftofusoup.com
www.laketemperature.com
miracl.cloud
aircloudproapps.aircloud.app
www.oneminutecase.com
vetlogic.com.au
www.kanpaigame.app
lnk.borrowsmart.app
admin11.estore.business
hasegawa.hrtech.com.br
api.puckdrop.app
www.snbiotech.in
coderre.ch
www.dont-scan.me
pitchafriend.seattlesocial.club
links.tunachat.net
addme.healthyheroapp.com
charitytoken.bio
el3alamia.website
mobile-apps.claas.com
www.barnettecpa.com
rapid.eddress.co
joe.alexbos.co
skir.ca
www.ukey.co
binarybrust.com
allenklare.com
unlock.cards
www.autopalapp.com
www.bikanky.com
staging-app.gofloat.io
list.stockcontrol.cloud
dev.agente.poderegularizar.com.br
collection.ruach.cc
staging.connect.appabrik.com
og.1stmain.co
www.accelefreight.com
badge.happyteam.bg
www.binarybrust.com
droptaxioneway.com
dealerslash.com
fitnesslab.jp
www.sazo.kr
malissamaiwed.com.ua
yaam.cafe
www1p1.bet365racing.com
janverberkmoes.com
alt.pantes.no
crennect.com
friendsofauburn.com
docdreamuk.com
line-eyes.com
firebase.elektrimvietnam.com
loveoke.com
app.flowcharts.ai
www.gptech-ai.com
futgod.com
lyricaldays.com
qr.nordheim.digital
www.jasira.com
kirstenschowalter.com
list-ripper.com
invatu.com
rapidsignupfl.com
royalleaps.com
practice.urdulearner.com
oriolcastellvi.cat
levelupdimona.com
leftbitshift.com
johnprussell.dev
jasonrahm.com
metalinqsa.com
admin.mmtutors.com
sgerard.dev
www.bclcopticals.com
quailspringsdds.com
tijuano.dev
potomacdining.com
www.polexitpartia.pl
www.rodrigorosario.es
app.youfreakingnoob.com
www.gcommunication.mn
wings2rent.com
www.juradelight.com
www.chengchiu.com
planningwithpoker.in
javachronicle.in

Other certificates including the domain name pflemi.de

(limited to 100 certificates)
ifsc.developerguru.tech
pflemi.de
demo.spectralsignal.io
www.chezzy.ca
app.pflemi.de
pflemi.de
friendog.app
haleyjackman.com
auth.vigilantesdosono.com
demo.spectralsignal.io
crennect.com

Certificate

The complete raw certificate details for app.pflemi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18816848364723382573747175069367878017
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 09:18:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 10:16:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.pflemi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/85RrigEhdQg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1964 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pflemi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mix-up.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creekcountycasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.nutriciaacademia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planet-tongue.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southmumbaiunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'company.develop.eu.wowworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enver.trevvelroute.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coachee.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certiallc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estebandevia3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sketchthat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.cloudtcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseoftofusoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laketemperature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miracl.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircloudproapps.aircloud.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneminutecase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetlogic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanpaigame.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnk.borrowsmart.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin11.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasegawa.hrtech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.puckdrop.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snbiotech.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coderre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dont-scan.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitchafriend.seattlesocial.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.tunachat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addme.healthyheroapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charitytoken.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el3alamia.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-apps.claas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barnettecpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapid.eddress.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joe.alexbos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skir.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukey.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binarybrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenklare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlock.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autopalapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikanky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-app.gofloat.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'list.stockcontrol.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.agente.poderegularizar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collection.ruach.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.connect.appabrik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'og.1stmain.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accelefreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badge.happyteam.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.binarybrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'droptaxioneway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerslash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnesslab.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sazo.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malissamaiwed.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaam.cafe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1p1.bet365racing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janverberkmoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.pantes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crennect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsofauburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docdreamuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'line-eyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.elektrimvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.flowcharts.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gptech-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futgod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyricaldays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.nordheim.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirstenschowalter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'list-ripper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invatu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidsignupfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalleaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.urdulearner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oriolcastellvi.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levelupdimona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftbitshift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnprussell.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasonrahm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metalinqsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mmtutors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgerard.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bclcopticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quailspringsdds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tijuano.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potomacdining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polexitpartia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rodrigorosario.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.youfreakingnoob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcommunication.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wings2rent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juradelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chengchiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planningwithpoker.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javachronicle.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/lID7udI9D1Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dea1289eb000004030046304402203681b74ce8cb25fab0ee94c44e39f5e996364ddcf15681b5996cb356ff9b50f002201c3ff51844cafc09ec1b780d9802caf56a79f79d7acf0cd03ea5534071e0ce3c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dea128a080000040300473045022100cb428d111f79e61d4a816612b2a49691ee3a31a83ee31e9ca92e5a50133b2e360220382a5d267a850a613ae8bdb009b12c17a0101f49a92dc18a52c1c2f16d1d9ca2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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