loja.zambezi.co.mz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 69:ee:9e:d3:56:0d:ea:02:12:0f:ad:14:da:92:c4:c3 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=loja.zambezi.co.mz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 69:ee:9e:d3:56:0d:ea:02:12:0f:ad:14:da:92:c4:c3
Serial Number (int): 140807927574239655056434810215680099523
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): ce:9c:ed:ce:eb:10:72:43:cb:94:07:b4:0a:e8:9f:3c:ae:13:57:d9
Fingerprint (sha256): 67:67:28:cf:af:62:28:ed:4a:5c:fc:f4:ab:99:77:03:7c:ae:3e:aa:c4:94:8a:1f:7e:e8:d8:49:03:6a:0b:30

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/5RJO_iKlJP0
CRL Distribution Point: http://crls.pki.goog/gts1d4/KLT9VNR8wwI.crl

Check the revocation status for certificate loja.zambezi.co.mz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loja.zambezi.co.mz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loja.zambezi.co.mz
axty.nexty.hu
www.osm-edu.hydrocode.de
dev.impact.fairchain.org
www.eksponansi.id
nexusdocs.staging.rancher.cloud-h.net
ticket.mfs.dk.attraction1.ameroservices.dk
www.outcomely.com
portal.billseye.com
www.edenstem.com
asesoriafinancieramyn.com
acerpa.eu
www.brainbusters.co.nz
www.mod60.com
www.jh-offen.de
tandooriflames.com
www.melissamolina.dev
www.pingr.tools
account.partners.cookies.co
api.hawkshillsoftware.com
www.support.wearenolte.com
www.kudla.dev
aprar.eu
onboarding.murmuras.com
dev.locumotion.co.za
saragray.io
link.avengo.io
faculdadepecege.linka.la
analisis.apalache.mx
amgi-king.dodo4114.xyz
tacoselchaparrito.corntech.com.mx
app-dev.wordrails.com
vivienda-360.com
ey.al
www.xgri.net
fms.helitaxii.com
travelult.com
www.blazemarketplace.com
meladog.it
dashboard.brendity.com
mint.cryptonimals.com
www.rohinigosain.com
www.digibrass.com
myreturns.dpd.co.uk
www.midve.st
www.cklawassociates.com
www.tandooriflames.com
auth.timet.io
www.sikandersaleem.com
beta.mycheftool.com
test-carrier.bringly.nl
rpieducation.com
peakconcepts.de
www.laseralliance.be
www.kimsbrownies.com
nfts.testnets.harti.io
app.hermanpro.com
app.u-hoa.com
anton-ideal.xyz
builder.modpools.com
www.thebestcompanyever.dev
www.pensionspenguin.com
papampei.valentin.consulting
www.beyondboundari.es
www.teuimovel.app.br
dsc.aptechuganda.ac.ug
portal.tradiesondemand.com.au
go.pa.ridegoshare.com
www.padel-ranking.com
www.verdgood.com.br
robertoavila.com.br
profile.myrealfood.app
www.vnyreddy.com
www.meetyounow.de
www.svey.com.sg
www.jmus.se
lena.topolko.com
fjelltopper.no
mail.waiting.kr
www.maplelife.co.th
link.semtoken.com
lucasgourmeteventos.com.br
ebook-1.jdns.com.br
www.controlpanel.grupobarco.mx
kh.ttex.com.vn
booklibrary.cgeorgiev.com
www.vokernos.cf
app.displayit.se
jeremysresu.me
studentsocialmobilityawards.org.uk
spendit.io
ingenioti.pe
dermacareclinic.co.in
student-dev.examind.io
hugot-dev6.pbcd.net
idk.uno
yata.se
mfersgif.xyz
dev.premium.aidemy.net
poptoken.xyz

Other certificates including the domain name zambezi.co.mz

(limited to 100 certificates)
staging.dashboard.bookr.ro
dashboard.cardconnect.ai
www.codeanddesignllc.com
www.nox.com.ua
tomssecurity.com
stov.io
ref.veil.mobi
loja.zambezi.co.mz
app.topicdna.com
www.i9chocolates.com
write-more.com
www.droppn.io
brillaenlavia.com
admin.beequick.app
www.system-phase.com

Certificate

The complete raw certificate details for loja.zambezi.co.mz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140807927574239655056434810215680099523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 22:55:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 23:53:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loja.zambezi.co.mz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/5RJO_iKlJP0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2092 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loja.zambezi.co.mz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axty.nexty.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osm-edu.hydrocode.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.impact.fairchain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eksponansi.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexusdocs.staging.rancher.cloud-h.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.mfs.dk.attraction1.ameroservices.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outcomely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.billseye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenstem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesoriafinancieramyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acerpa.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainbusters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mod60.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jh-offen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandooriflames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melissamolina.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pingr.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.partners.cookies.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hawkshillsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.support.wearenolte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kudla.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.murmuras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.locumotion.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saragray.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.avengo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculdadepecege.linka.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analisis.apalache.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amgi-king.dodo4114.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacoselchaparrito.corntech.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev.wordrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivienda-360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xgri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.helitaxii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blazemarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meladog.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.brendity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mint.cryptonimals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rohinigosain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digibrass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myreturns.dpd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midve.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cklawassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tandooriflames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.timet.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sikandersaleem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.mycheftool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-carrier.bringly.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpieducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peakconcepts.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laseralliance.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimsbrownies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfts.testnets.harti.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.hermanpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.u-hoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anton-ideal.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'builder.modpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebestcompanyever.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pensionspenguin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papampei.valentin.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondboundari.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teuimovel.app.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsc.aptechuganda.ac.ug'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.tradiesondemand.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.pa.ridegoshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.padel-ranking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verdgood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertoavila.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.myrealfood.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vnyreddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetyounow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svey.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmus.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lena.topolko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fjelltopper.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.waiting.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maplelife.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.semtoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucasgourmeteventos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebook-1.jdns.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.controlpanel.grupobarco.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kh.ttex.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booklibrary.cgeorgiev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vokernos.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.displayit.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeremysresu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentsocialmobilityawards.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spendit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingenioti.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermacareclinic.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student-dev.examind.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugot-dev6.pbcd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idk.uno'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yata.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfersgif.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.premium.aidemy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poptoken.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/KLT9VNR8wwI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018abf51c76200000403004730450220498837a660c191dca87cb72dca482909771e297c64795591927e6e5330754ffb022100a07fd4f97b63d0f857ead903fc0aa3af9ae4a95ccb6494dcbedd726fd73b098b0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018abf51c7a10000040300483046022100d92363cb7529afd34058a0e13cff1889edd051681706141d8e7e92977265fb590221009f0171154c6cdaf87898fa784fdec4bfd8d3d173368b992b8e8e2286db5c33ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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