www.defiva.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number d9:b1:54:56:78:37:3b:03:09:05:b6:36:06:d3:9d:bb was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.defiva.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d9:b1:54:56:78:37:3b:03:09:05:b6:36:06:d3:9d:bb
Serial Number (int): 289363222202521062651677734991157239227
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b9:d9:07:88:75:1b:2e:4a:ce:73:f7:df:5e:cb:ac:23:f8:f1:a3:a0
Fingerprint (sha256): 5b:a7:d9:35:37:12:32:da:54:60:dc:66:a9:a7:3b:f4:36:0d:36:17:19:61:2e:81:ca:26:60:a7:18:54:69:7e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/NyL1_Qru1LU
CRL Distribution Point: http://crls.pki.goog/gts1d4/BDUW5cT_UVM.crl

Check the revocation status for certificate www.defiva.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.defiva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.defiva.com
orionyacht.support
c.facecard.co.il
qa.nowverifyit.com
www.kmtradings.com
www.pakhms.com
peu-de-liberte.com
try.lifenome.com
functions.morgen.so
smlamod.com
podcast.imgenie.ai
buddy-staging.work.life
www.stockone.com
admin.basil.menu
www.twogirlsonesofa.cz
developer.doc.foxar.fr
mplus.prg.rodeo
dentalhouseexeter.co.uk
next-step-with-crm.se
euromig.eu
hotelvivi.cv
rua.app
www.flitesharp.dev
www.digitalculture.app
vvfa.org
api.revo.app
sales.prod.rephrase.ai
provider.911response24.com
coagency.contents.sompo-de-noru.jp
payrollv2.texcloud.app
applink.brightmeup.ai
website1087.estore.business
minterns.org
unitv.ar
expert-staging.smartplant.app
aiyushjain.ca
queup.live
admin1087.estore.business
www.timecardme.com
www.lamouline-manager.com
press.zombiecleanupservice.com
www.pokegeo.com
www.ripplewinebar.menu
monla.beauty
play.woppal.com
signin.wecommend.app
vivahlavida.com
www.jdiasconsultoria.com.br
sandbox.ads.thndr.io
tvee.app
cybernetex.io
www.xman.io
mediaucracy.com
www.tsurukame.app
typeforce.app
auth.implicit.io
app.i-get.link
www.firesapps.com
projectionlab.com
app.tesot.io
api.easy-catalog.app
stage-onboarding.mingla.cloud
www.michaeljames.co.za
dev.app.plade.io
www.we-build.city
go.ghiveci.com
app.playsopo.com
www.projectionlab.com
telsi-admin.speakylink.com
www.tawandev.com
lp.roboticcrowd.com
demo-butler.soselab.tw
xlrtrexe.com
mehmood-saleem.com
digicomsoftwaresolutions.com
complaia.systems
robandarley.com
modern-eye-gallery.com
viajatrips.tripsz.com.br
www.e85boost.fr
horizon.effectivly.com
www.ytak.tech
yangonshelf.zwenex.com
plantimator.com.au
icej.dk
gymcenter.dk
proveyance.co.uk
preflight.editor.objects.mergeedu.com
livigno.snowitexperience.com
www.villabaline.com
notadining.com
www.klaytonerekson.dev
join.medsurvey.com
manemedi.co.za
allsteel-unit-config-cert.3dcloud.io
klaytonerekson.dev
sisand.consultafatura.com.br
www.rfrancois.dev
app.apptranslator.io
stage.seaprojects.theseabay.com

Other certificates including the domain name defiva.com

(limited to 100 certificates)
www.tasksboard.com
www.flukkord.com
auth.snowflake.cyberhaven.io
www.beats-radio.com
writenext.com
healthlinechiropractic.com.au
paylessiraq.com
www.defiva.com
myfuel.network
ambush.dreamwave.live
northlanenft.com
www.nucleodatascience.com.br
order.sushiya.in
stg03.wowdesk.jp
school.handtoy.com
mutungurugirls.com
www.badmintonpal.com
data.letsrebelle.com
www.nextapep.net
www.ente.com.mx
redirect.beebs.app
tradenowwithus.in
www.ai.vu
www.musiplan.com
transpotify.compubility.com
www.alwatyan.digital
ast.defiva.com

Certificate

The complete raw certificate details for www.defiva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289363222202521062651677734991157239227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 18:31:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 19:27:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.defiva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/NyL1_Qru1LU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2052 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orionyacht.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.facecard.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.nowverifyit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kmtradings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakhms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peu-de-liberte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lifenome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'functions.morgen.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smlamod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.imgenie.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddy-staging.work.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.basil.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twogirlsonesofa.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.doc.foxar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mplus.prg.rodeo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalhouseexeter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next-step-with-crm.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euromig.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelvivi.cv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rua.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flitesharp.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalculture.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.revo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.prod.rephrase.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provider.911response24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coagency.contents.sompo-de-noru.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payrollv2.texcloud.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink.brightmeup.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website1087.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minterns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitv.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expert-staging.smartplant.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiyushjain.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queup.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin1087.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timecardme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lamouline-manager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.zombiecleanupservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pokegeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ripplewinebar.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monla.beauty'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.woppal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.wecommend.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivahlavida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jdiasconsultoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.ads.thndr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvee.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybernetex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xman.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaucracy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsurukame.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typeforce.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.implicit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.i-get.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firesapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectionlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tesot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.easy-catalog.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-onboarding.mingla.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaeljames.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.app.plade.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.we-build.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ghiveci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.playsopo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectionlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telsi-admin.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tawandev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.roboticcrowd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-butler.soselab.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlrtrexe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehmood-saleem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digicomsoftwaresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complaia.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robandarley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modern-eye-gallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viajatrips.tripsz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e85boost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizon.effectivly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ytak.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yangonshelf.zwenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantimator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icej.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gymcenter.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proveyance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preflight.editor.objects.mergeedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livigno.snowitexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villabaline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notadining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klaytonerekson.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.medsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manemedi.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsteel-unit-config-cert.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klaytonerekson.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sisand.consultafatura.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rfrancois.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.apptranslator.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.seaprojects.theseabay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/BDUW5cT_UVM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae26c82da00000403004730450220412ebfff421682eec872c66cbcd5e29cd98aa460b9644064c252f867f3f9e4230221008ec131da585967ae5a1f537648542beab98646629ab8981444d7af6e6ce35b040076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae26c83120000040300473045022100d8fd777749bb4ae51e638f0d9b86d5db9e4bb942f1bff66c8c1ebfbd3bd86cba02201f1271b9e31f554d1c4f4c36653f0a8e90bdad58adf59c9d5f3a480ebf7f8f57
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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