www.shop-eka.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number f9:37:da:fa:5e:31:a0:7f:10:86:6c:4e:8d:d0:78:b9 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.shop-eka.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f9:37:da:fa:5e:31:a0:7f:10:86:6c:4e:8d:d0:78:b9
Serial Number (int): 331267788679149278713786022224846682297
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b4:8f:8d:a7:5a:60:91:e7:1a:44:e9:16:ad:67:28:d7:c9:c7:1e:07
Fingerprint (sha256): 5e:16:01:63:ae:22:da:5a:43:37:bf:21:90:a7:3f:3e:fe:88:db:e9:f7:60:ec:0a:07:96:77:65:e7:9f:12:11

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/qc3NpmZfIGM
CRL Distribution Point: http://crls.pki.goog/gts1d4/mocb8gX3uX0.crl

Check the revocation status for certificate www.shop-eka.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.shop-eka.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.shop-eka.com
hellman3mile.run
www.wikiveg.com.br
auth.digiocm.com
links.tazweedapp.com
cms.mycure.md
oneexam-dev.oneclass.com.tw
link.santacleo.com
stag.doctor.umasalud.com.mx
code-challenge.rocks
force-us-app.moj.io
www.marstech.solutions
dentist1.one
administracion.watson.app
dev.the3dapp.com
www.bestimate.app
satva.shyamalbuilders.com
docs.api.dev.theout.com
www.agcharalampos.gr
video-tv-cast.com
adilazone.com
portal.klikarts.com
www.ronyahmmod.com
happybirthdaymerijaan.com
www.fikr-e-naab.com
ingoludwigfrenzel.cloud0.digital
ytp.aspevo.com
portal.nebula.org
open.slowly.app
bolcc.nucor.report
stats.m-link.no
ben-mayer.com
appdev.flexitfire.no
auth.firepanel.io
239tree.com
www.pimm.co
app.peakflo.co
carpediemcalendar.jamesfromldn.com
app.escapectrl.com
app.anabolicaliens.com
appointment.garethpaul.com
customerauth.fastsigns.com
docs.crazygames.com
thrive.jeff.fitness
nexmm.com
checkout-goerli.zksync.io
swaps.meteopress.cz
atlaseducationalsoftware.com
web.camiel.app
preview.slyck.app
hookupmax.com
loanshark.greisssolutions.com
www.perlmanmarket.com
www.erikmejia.com
tabletopalley.com
report.funeasylearn.com
fyrtheapp.com
www.learnwithmerlin.com
auth.homehub.site
staging.intela.no
www.viscalc.app
mattbrennan.dev
abohettaautoservicemaghagha.com
www.heimishagent.com
devfest.gdgjalandhar.com
wedding.ygyoon.com
www.isyouropinionworthmoney.com
hackerrank-survey-vis.qingqi.dev
www.huesnap.com
santel.for.dinii.jp
referbox.in
blog.jamibot.com
adminfedex.versionx.in
www.changedao.org
myaddressbook.dpd.co.uk
luma.propertylaunch.ca
compath.seita-consulting.com
pass.cgepass.com
canature.portal.plenadata.com
www.cryptofund.mx
chat.rodrigolop.es
www.educamppro.com
admin.cloudcastnetwork.com
admin.earthone.dev
www.decoreba.app
statzeum.app
nocturnal.tournament.gg
overmap.adammarcstevenson.com
www.inddex.fr
disney.presscoins.com
aire-barcelona-mwc.lobelia.earth
11521705.peerly.app
www.threeleaps.net
gainz.kanelloc.com
apps.davincitech.co
killer-pass.com
intohyvinvointi.fi
supportyourlocaleinzelhandel.de
bisabel.me
marathon1-admin.m1studio.co

Other certificates including the domain name shop-eka.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.shop-eka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331267788679149278713786022224846682297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 20:52:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 21:49:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shop-eka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/qc3NpmZfIGM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop-eka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellman3mile.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wikiveg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.digiocm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.tazweedapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.mycure.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneexam-dev.oneclass.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.santacleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.doctor.umasalud.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code-challenge.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'force-us-app.moj.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marstech.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentist1.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administracion.watson.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.the3dapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestimate.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satva.shyamalbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.api.dev.theout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agcharalampos.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-tv-cast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adilazone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.klikarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ronyahmmod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happybirthdaymerijaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fikr-e-naab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingoludwigfrenzel.cloud0.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytp.aspevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.nebula.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.slowly.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolcc.nucor.report'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.m-link.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ben-mayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdev.flexitfire.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.firepanel.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '239tree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pimm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.peakflo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpediemcalendar.jamesfromldn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.escapectrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.anabolicaliens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appointment.garethpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerauth.fastsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.crazygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrive.jeff.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexmm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout-goerli.zksync.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swaps.meteopress.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlaseducationalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.camiel.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.slyck.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hookupmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loanshark.greisssolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perlmanmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erikmejia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletopalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'report.funeasylearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyrtheapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnwithmerlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.homehub.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.intela.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viscalc.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattbrennan.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abohettaautoservicemaghagha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heimishagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfest.gdgjalandhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedding.ygyoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isyouropinionworthmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackerrank-survey-vis.qingqi.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santel.for.dinii.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referbox.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.jamibot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfedex.versionx.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.changedao.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaddressbook.dpd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luma.propertylaunch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compath.seita-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass.cgepass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canature.portal.plenadata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptofund.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.rodrigolop.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educamppro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cloudcastnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.earthone.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decoreba.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statzeum.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nocturnal.tournament.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overmap.adammarcstevenson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inddex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disney.presscoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aire-barcelona-mwc.lobelia.earth'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11521705.peerly.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threeleaps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainz.kanelloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.davincitech.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'killer-pass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intohyvinvointi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportyourlocaleinzelhandel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bisabel.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathon1-admin.m1studio.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/mocb8gX3uX0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9ad46fb20000040300483046022100c5d8ab15aa12bf4c0596e5efbd6ee90fe5b33ee700823b9a07db6545e7f5ace7022100e19b31a2975d5e7fd0ab1d4c3efd813f27bb9bb384b32c724a16ba08bb0f1d07007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a9ad46f7a0000040300473045022100b74a8fa1bf37143ab88c596ec588923cfbc1fe6c128d24413f46fadfec3ef45d0220555bf8d0b7a0deb74a77bd4b338710824b5e115cbd5b06064847000ac94d2385
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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