test-portal.oni.co.nz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number aa:52:e7:e1:09:a0:78:e2:12:69:d8:0f:9b:03:26:c8 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=test-portal.oni.co.nz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): aa:52:e7:e1:09:a0:78:e2:12:69:d8:0f:9b:03:26:c8
Serial Number (int): 226399230691769927578329971738124953288
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 44:4a:bf:4e:c6:2a:6d:13:01:5a:e2:15:be:b2:5d:23:d0:64:2f:9b
Fingerprint (sha256): 65:41:e0:ec:62:77:fe:3c:a0:53:40:f8:1a:e6:c6:71:2f:8e:56:07:76:ac:fb:a8:c4:3e:03:fb:db:6d:e9:95

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/vTN5A2tA6mA
CRL Distribution Point: http://crls.pki.goog/gts1d4/DEA1UR2bb1o.crl

Check the revocation status for certificate test-portal.oni.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-portal.oni.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-portal.oni.co.nz
www.use-it.co.za
daitsholdings.com
my-metrics.azul915.com
immediate.cz
stories-staging.overhq.com
mz.km.ua
www.khlr.mx
www.gabrielsanabria.com
share.drop-ship.io
www.sellit.me
www.framco.fi
www.florian-lehuede.com
www.yosemal.com
mijn.admo-administratie.nl
api-staging.walkie-talkie.io
www.mm-system.it
dev.casperdesign.no
app.iotize.com
www.aquaopt.com
dashboard.stayhotel.com.br
bp.kudosone.com
www.sbuh.se
admin.coachingenglish.edu.vn
web.rewrite.today
www.craigfeldman.com
branch.bgood.co.kr
site.space.com.vc
hermawan.eyro.co.id
www.restoplus.com.au
monkeyrun.fun
confeitaria.lupi.delivery
www.jotajot.com
jusapi.com
azuraswimming.com
www.carolineollivier.fr
www.yolobert.com
carolineollivier.fr
www.hughedwards.dev
la-via-delle-scienze.euber.dev
wesuckatcoding.com
www.treasureinthebible.com
devreport.wellnest.tech
dreadzone.zone
kalehv.me
privacy.alfred.cz
haffer.co
www.leandro-soldaduras.com.ar
www.pandageeks.co
thelittleskool-house.com.sg
mxvalidator.tux-sudo.com
www.nrsk.co.jp
www.emglobalcom.com
hebot.xbot.com.vn
www.etablissementbilli.fr
www.leafytech.ca
thevisitation.org.uk
login.q.croquet.io
checkout-staging.storykids.com
requests.truesome.app
www.dxmx.net
creativelasersystems.in
buchi.la
www.theloophobart.com.au
www.vancegallagher.com
querencia.gerenciazap.smartmidiasdigitais.com.br
cisibero.mx
mvp.balcao.xyz
udocs.com
aparnavijayakumar.me
mcpe.world
quizplanet.game
mattschlosser.me
lilleman.trewhitt.se
www.testigos.co
battle-energy.com
us.biobarica.com
www.kalehv.me
restaurantedobabs.com
dev.bevwerk.com
lostshack.com
metromanexpanse.com
www.megatown.one
artemisatravels.com
aboutvq.com
share.moodwork.co
blog.skont.pl
www.artemisatravels.com
haydenwies.com
dev.bunkbread.com
www.emerics.com
www.elementalsymmetry.com
www.metroartweho.com
nailtracking.a1coders.it
www.homeattlas.com
www.naveenkrishna.com
parcelplus.app
fusen.app
faxer.app
marketst.app

Other certificates including the domain name oni.co.nz

(limited to 100 certificates)
oni.co.nz
www.message.watch
www.oni.co.nz
creativelasersystems.in
speakuprzn.ru
www.oni.co.nz
www.oni.co.nz
oni.co.nz
oni.co.nz
oni.co.nz
console.work.cdlbox.app
www.flatz.app
www.oni.co.nz
www.oni.co.nz
www.oni.co.nz
oni.co.nz
www.oni.co.nz
www.oni.co.nz
hubertspringer.pl
www.oni.co.nz
oni.co.nz
www.oni.co.nz
test-portal.oni.co.nz
oni.co.nz
www.oni.co.nz
forojuanfe.appsiste.co
oni.co.nz
brain.bimedoc.com
oni.co.nz
www.oni.co.nz
www.oni.co.nz
aquariusbeauty.co.uk
oni.co.nz
oni.co.nz
www.oni.co.nz
oni.co.nz
creativelasersystems.in
oni.co.nz
oni.co.nz
oni.co.nz
fcbeauty.s-match.jp
oni.co.nz
www.oni.co.nz
www.ooowl.jp
hubertspringer.pl
oni.co.nz
oni.co.nz
wallet.verified.network
oni.co.nz
www.oni.co.nz
oni.co.nz
www.oni.co.nz
www.oni.co.nz
www.oni.co.nz
aquariusbeauty.co.uk
oni.co.nz
oni.co.nz
www.oni.co.nz
jasig.org
www.oni.co.nz
oni.co.nz
www.oni.co.nz
oni.co.nz
www.oni.co.nz
site.featsapp.com
oni.co.nz
app.feriadeteatro.com
www.oni.co.nz
speakuprzn.ru

Certificate

The complete raw certificate details for test-portal.oni.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 226399230691769927578329971738124953288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 01:00:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 01:57:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-portal.oni.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/vTN5A2tA6mA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-portal.oni.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.use-it.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daitsholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-metrics.azul915.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immediate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stories-staging.overhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mz.km.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khlr.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabrielsanabria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.drop-ship.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sellit.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.framco.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.florian-lehuede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yosemal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.admo-administratie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.walkie-talkie.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mm-system.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.casperdesign.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.iotize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquaopt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.stayhotel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bp.kudosone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbuh.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coachingenglish.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.rewrite.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craigfeldman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branch.bgood.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.space.com.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermawan.eyro.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restoplus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monkeyrun.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confeitaria.lupi.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jotajot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jusapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azuraswimming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carolineollivier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yolobert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolineollivier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hughedwards.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-via-delle-scienze.euber.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesuckatcoding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treasureinthebible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devreport.wellnest.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreadzone.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalehv.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.alfred.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haffer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leandro-soldaduras.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pandageeks.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelittleskool-house.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxvalidator.tux-sudo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nrsk.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emglobalcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hebot.xbot.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etablissementbilli.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leafytech.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevisitation.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.q.croquet.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout-staging.storykids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requests.truesome.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxmx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativelasersystems.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchi.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theloophobart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancegallagher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querencia.gerenciazap.smartmidiasdigitais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisibero.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvp.balcao.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aparnavijayakumar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcpe.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizplanet.game'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattschlosser.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilleman.trewhitt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testigos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'battle-energy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.biobarica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalehv.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantedobabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bevwerk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostshack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metromanexpanse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megatown.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artemisatravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutvq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.moodwork.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.skont.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artemisatravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haydenwies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bunkbread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emerics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elementalsymmetry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metroartweho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nailtracking.a1coders.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeattlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naveenkrishna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parcelplus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusen.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faxer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketst.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/DEA1UR2bb1o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aca10abd70000040300473045022100ca49d0e60882c368d2862088b6cd7192062e9719f7c2d3cc7ce6a21d8c3de0ed02200aff8ed515c8dfdae4de25e24082985b48f997d0e783b4aaee337725fef1d9ae007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aca10abab000004030047304502200a3edb7030e1c6f708ce9f47e4f318dd48fea4b501e048ec1c71f4d3b5de00d8022100fad139be7d3b4596eb315a3863eff1462a4cbfb007044d138a627c8b8fddc5b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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