app.aspen.bridgewaterlabs.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 50:c7:5b:f2:73:1b:51:41:10:a5:d0:d5:53:55:8c:8d was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.aspen.bridgewaterlabs.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 50:c7:5b:f2:73:1b:51:41:10:a5:d0:d5:53:55:8c:8d
Serial Number (int): 107373371645754762122867760043304258701
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 01:0a:f8:36:89:98:10:46:eb:51:d7:3b:b5:07:27:d6:93:08:c1:a2
Fingerprint (sha256): 68:cd:25:c6:57:b3:3a:d5:ce:c2:32:34:46:cf:d4:40:d1:f6:ac:72:d1:53:c0:1b:c1:b9:ad:7b:a5:98:d5:6a

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/EHhw48GmK10
CRL Distribution Point: http://crls.pki.goog/gts1d4/8Qk46-KwOAo.crl

Check the revocation status for certificate app.aspen.bridgewaterlabs.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.aspen.bridgewaterlabs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.aspen.bridgewaterlabs.com
deals.cloudbrains.ch
tatetsu.ntetz.com
member.ixda.org.tw
admin.uat.konnek.app
dev.linkbuzz.com
captive2-0.vagalumewifi.com.br
colibyte.de
maanutech.com
leesturgeonday.com
portal.3volcanes.cl
zktix.com
panel.foodcourtamerica.com
www.beffjezos.org
books.training.mindyourpass.io
instrumenti.galis.rs
tic-tac-toe.llewnroc.com
rosversity.com
devfest2019.gdgcraiova.com
opendesigntools.com
www.bhaktikalpvriksh.in
soulfreela.dev
zksms.com
go.nakatai.xyz
dice.mindoasis.online
api.cliqs.io
pic-nlo.mentor.neccton.com
veselinbratanov.com
apps.harkawal.com
www.parabeac.com
personalni-standard.cz
homepay.com.br
www.truestyle.cam
pay.fetchpet.dev
shoppayment.jopit.com.ar
bryant.everbloom.app
links.yamarii.com
admin.nalandabazar.com
www.neonimble.ai
admin.dev.sync.dena.com
matthewaquilina.net
www.zwei-toene-ein-klang.de
hyeji.dev
bookavet.com.au
www.freeupsctyari.com
go.castalianspring.de
demo.app.rendin.co
www.digitalpants.dev
luxmienterprises.info
idrivemx.com.mx
link.staging.goodlifecoupons.com
links.lendpinoy.ph
primeveiculosuberlandia.com.br
www.mothercareservice.com
www.juglenaut.com
harmonie-dev.flitter.fr
www.rudat-it-services.de
eyecam.ph
www.dougandliz.us
www.danielecaviglia.it
offmessage.org
fatture.mr-apps.com
dynamic-link.lean-body.jp
hub.go2nft.io
customer-uat.clearquote.io
www.apoio.tech
webapp.appointik.in
www.rafaeluzcategui.com
pdm.upids.io
interque.fitcoder.in
qr.setagayapay.moneyeasy.jp
store.naavo.in
go.ptaps11.org
app.myg.in
thiagoshoes.nl
wish.praveshkumar.in
dev.recopo.info
www.freethoughts.space
www.saumyacreations.com
sahna.io
www.junkang.dev
www.talentrator.com
forms.webmarketsonline.com
go.magic.ly
app.7ader.net
share-boutique.pltmarketplace.com
analytics.tecky.io
www.arvruniverse.com
yomcoma.com
reconi.pensioenstartpunt.nl
www.onewaybooking.in
fuchel.dev
www.syntagi.in
indios.loyal.biz
zrapata.com
admin.upmerch.com
skordefesten-admin.wntr.app
laboratoriomicrocirugia.com.ar
app.shortwave-staging.com
jaku.au

Other certificates including the domain name bridgewaterlabs.com

(limited to 100 certificates)
ora.bridgewaterlabs.com
bridgewaterlabs.com
bridgewaterlabs.com
suicide-prevention.bridgewaterlabs.com
projects.bridgewaterlabs.com
showroom.next-audit.de
icwhatuc.bridgewaterlabs.com
projects.bridgewaterlabs.com
link.squadle.com
bcreservations.bridgewaterlabs.com
projects.bridgewaterlabs.com
icwhatuc-master-staging.bridgewaterlabs.com
bridgewaterlabs.com
icwhatuc.bridgewaterlabs.com
projects.bridgewaterlabs.com
alyf.in
frontend-aspen.bridgewaterlabs.com
icwhatuc.bridgewaterlabs.com
bcreservations.bridgewaterlabs.com
gosalads.bridgewaterlabs.com
gosalads.bridgewaterlabs.com
next-api-beatjump.opalastudios.com
www.appeletrico.com.br
shareapp.lycheeapp.org
icwhatuc.bridgewaterlabs.com
aspen-staging.bridgewaterlabs.com
noscwuc.bridgewaterlabs.com
bridgewaterlabs.com
aspen.bridgewaterlabs.com
www.tirupathur-droptaxi.in
bridgewaterlabs.com
app.aspen.bridgewaterlabs.com
projects.bridgewaterlabs.com
www.tirupathur-droptaxi.in
bcreservations.bridgewaterlabs.com
bridgewaterlabs.com
bridgewaterlabs.com
bridgewaterlabs.com
projects.bridgewaterlabs.com
suicide-prevention.bridgewaterlabs.com
suicide-prevention.bridgewaterlabs.com
zacharyinserra.com
bridgewaterlabs.com
bridgewaterlabs.com
bridgewaterlabs.com
www.loclab.jp
projects.bridgewaterlabs.com
www.sikandersaleem.com
icwhatuc.bridgewaterlabs.com
projects.bridgewaterlabs.com
platform.playframe.io
actual.monster
icwhatuc.bridgewaterlabs.com
bridgewaterlabs.com
wifessharing.com
aspen.bridgewaterlabs.com
icwhatuc.bridgewaterlabs.com
aspen.bridgewaterlabs.com
luxmienterprises.info
bcreservations.bridgewaterlabs.com
suicide-prevention.bridgewaterlabs.com
bcreservations.bridgewaterlabs.com
bridgewaterlabs.com
gosalads.bridgewaterlabs.com
frontend-aspen.bridgewaterlabs.com
bridgewaterlabs.com
gosalads.bridgewaterlabs.com
gosalads.bridgewaterlabs.com
bridgewaterlabs.com
projects.bridgewaterlabs.com
bridgewaterlabs.com
sni.cloudflaressl.com
bridgewaterlabs.com
projects.bridgewaterlabs.com
befrolic.com
bridgewaterlabs.com
gosalads.bridgewaterlabs.com
dsiag.ch
icwhatuc.bridgewaterlabs.com
bcreservations.bridgewaterlabs.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for app.aspen.bridgewaterlabs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107373371645754762122867760043304258701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 13:21:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 14:17:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.aspen.bridgewaterlabs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/EHhw48GmK10'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2087 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aspen.bridgewaterlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deals.cloudbrains.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatetsu.ntetz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'member.ixda.org.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.uat.konnek.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.linkbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captive2-0.vagalumewifi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colibyte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maanutech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leesturgeonday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.3volcanes.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zktix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.foodcourtamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beffjezos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.training.mindyourpass.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instrumenti.galis.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tic-tac-toe.llewnroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfest2019.gdgcraiova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendesigntools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhaktikalpvriksh.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulfreela.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zksms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.nakatai.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dice.mindoasis.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cliqs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pic-nlo.mentor.neccton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veselinbratanov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.harkawal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parabeac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalni-standard.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homepay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truestyle.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.fetchpet.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppayment.jopit.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryant.everbloom.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.yamarii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nalandabazar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neonimble.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dev.sync.dena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewaquilina.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zwei-toene-ein-klang.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyeji.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookavet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeupsctyari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.castalianspring.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.app.rendin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalpants.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxmienterprises.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrivemx.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.staging.goodlifecoupons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.lendpinoy.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeveiculosuberlandia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mothercareservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juglenaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonie-dev.flitter.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudat-it-services.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyecam.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dougandliz.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danielecaviglia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offmessage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatture.mr-apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic-link.lean-body.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.go2nft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-uat.clearquote.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apoio.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.appointik.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rafaeluzcategui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdm.upids.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interque.fitcoder.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.setagayapay.moneyeasy.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.naavo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ptaps11.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.myg.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thiagoshoes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wish.praveshkumar.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.recopo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freethoughts.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saumyacreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahna.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.junkang.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talentrator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.webmarketsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.magic.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.7ader.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share-boutique.pltmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.tecky.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arvruniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yomcoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconi.pensioenstartpunt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onewaybooking.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuchel.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syntagi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indios.loyal.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zrapata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.upmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skordefesten-admin.wntr.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laboratoriomicrocirugia.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.shortwave-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaku.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/8Qk46-KwOAo.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e8fbc4a620000040300473045022100ed752b20b1bce7e9b1cfabb7cfdf834c1d1582027c44d552691910154de342eb022066489464d6461fb5de1272f8950c0d451d7de962ae5184228e1880bea2eeba3900750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e8fbc498300000403004630440220493c0b148765f7fdce28c06e5b7e301f04f95ed0abf8f74dff1beb318684322e022019eeb410b8b7df129c198a11b5f274483a3da21015e5c62b284908847bb6a54d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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