www.almaglobalstrategies.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 93:d0:5b:d6:8e:a1:dd:61:12:01:92:e6:92:ae:c6:c4 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.almaglobalstrategies.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 93:d0:5b:d6:8e:a1:dd:61:12:01:92:e6:92:ae:c6:c4
Serial Number (int): 196478375825201141703384129400086644420
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 53:26:21:9e:e5:23:2f:10:28:b8:c2:90:17:8a:59:6f:19:44:fd:d7
Fingerprint (sha256): 6a:40:81:0b:ac:e5:c0:7e:f2:58:d1:d6:19:ea:9f:33:ad:25:e4:7d:9a:d9:aa:c6:6d:b7:ae:70:30:d3:50:4f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/54_fGugwYBs
CRL Distribution Point: http://crls.pki.goog/gts1d4/mMqZoZmTwHM.crl

Check the revocation status for certificate www.almaglobalstrategies.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.almaglobalstrategies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.almaglobalstrategies.com
www.lazycaption.com
www.opiskelija-asunnotpori.fi
www.2flatdelivery.com
qr2.eu
simsed.com
craftboard.com
app.alarmemeteo.ch
assessment.nworx.app
app.mycohort.eu
humansofthediaspora.com
bradleyflood.com
alexyansons.com
www.georgiapientz.com.br
aqwatechnical.com
auth.planned.com
ekg.doktoroom.com
hopewellpediatrics.com
staging.dashocontent.com
gefinanzas.com
guatemallan.com
dradanielavillavicencio.com
29admin.farmerstud.io
shiftomo.letter.shiftinc.jp
backoffice-dev.thaiqrmenu.com
host1.sandbox.kit494way.dev
betops.dreamt20.in
www.kaaat.dev
actiontrails.net
www.esportindia.in
neoplumes.com
www.reo.business
www.siniscape.com
inarmex.com.mx
ingeniousdrive.com
beta.surveylex.com
www.sesotek.net
www.wheeapp.com
dev.tomilkieway.com
hoome.co.uk
zivainfotech.com
nordicus.turnosweb.app
teknik.tv
ca.emce.dev
www.u-trainer-fitness.com
www.dineoutparticipant.com
estron.mobilenxt.app
www.josefernandes.ca
edspired.in
farm-testnet.aquafinance.live
ahhmoji.com
dev.manager.woonig.app
hlkt.in
www.peruse.app
gh-portal-dev2.pbcd.net
botanicaboutique.jau.co.jp
thefold.app
blog.felixshih.com
link.fishfinapp.com
www.qareen.co.uk
edp.hrbot.com.br
impersonation.kudo.coach
www.oskerko.me
app.olmimoveis.com.br
locitaresmi.com
bodytone.versades.com
smart-pure-life.com
sidebar.peterkajokole.com
www.calltoarms.be
amelioration.hmy-group.com
www.education.uda.org.ua
www.bugs.gq
www.collegien.co.il
284.roox.tk
289.roox.tk
288.roox.tk
294.roox.tk
295.roox.tk
297.roox.tk
vektornode.ch
www.maakbib.be
www.aleph.org.mx
lecture.gla.jp
reclamos.loteriaderionegro.gob.ar
www.alebaja.com.pl
app.pedidos.procab.com.br
devfest2019.gdgastra.ru
www.pensioenbijcovetrus.nl
baritest.servizilocalispa.it
csob-exponea.lukascech.cz
app.farmcommander.co.za
mail.sveam.vn
arlook.co.kr
www.sailscanner.org
www.drdocs.co.za
www.profumeriagenovese.it
auth.google.pnplay.net.br
sa.rba.su
www.roman.ge
www.univerca.com

Other certificates including the domain name almaglobalstrategies.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.almaglobalstrategies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 196478375825201141703384129400086644420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-09 22:09:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 23:08:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.almaglobalstrategies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/54_fGugwYBs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2018 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.almaglobalstrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lazycaption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opiskelija-asunnotpori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2flatdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr2.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simsed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.alarmemeteo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assessment.nworx.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mycohort.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humansofthediaspora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradleyflood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexyansons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiapientz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqwatechnical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.planned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekg.doktoroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopewellpediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.dashocontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gefinanzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guatemallan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dradanielavillavicencio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '29admin.farmerstud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiftomo.letter.shiftinc.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice-dev.thaiqrmenu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host1.sandbox.kit494way.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betops.dreamt20.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaaat.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actiontrails.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoplumes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reo.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siniscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inarmex.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingeniousdrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.surveylex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sesotek.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tomilkieway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoome.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zivainfotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordicus.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknik.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.emce.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.u-trainer-fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dineoutparticipant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estron.mobilenxt.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.josefernandes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edspired.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm-testnet.aquafinance.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahhmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manager.woonig.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlkt.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peruse.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gh-portal-dev2.pbcd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanicaboutique.jau.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefold.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.felixshih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.fishfinapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qareen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edp.hrbot.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impersonation.kudo.coach'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oskerko.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.olmimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locitaresmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodytone.versades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-pure-life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidebar.peterkajokole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calltoarms.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amelioration.hmy-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.education.uda.org.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugs.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegien.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '284.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '289.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '288.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '294.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '295.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '297.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vektornode.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maakbib.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aleph.org.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecture.gla.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reclamos.loteriaderionegro.gob.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alebaja.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pedidos.procab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfest2019.gdgastra.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pensioenbijcovetrus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baritest.servizilocalispa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csob-exponea.lukascech.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.farmcommander.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sveam.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arlook.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailscanner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drdocs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.profumeriagenovese.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.google.pnplay.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.rba.su'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roman.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.univerca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/mMqZoZmTwHM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001893ceafe9c0000040300483046022100aef14c55fe5ecdd60af6b30e5f5903d898763d4f2c15e197ab1ef88e19ad20060221008321669fcad0923e18cf92ccaa3f570be5b25f8f2efe67e436d94ad345770d580075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001893ceafef00000040300463044022020a0d7ea446575f50065ae1ca474e733e48ef4004a36e3575644bcbb81eb71d30220588628f93ed326320eb0b933f34d0292e9286283d4612827b2251f5836e144b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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