thetunneloflight.mwata.site

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 05:1f:b0:26:67:e4:6d:fb:10:d6:9f:d7:5f:92:85:3b was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thetunneloflight.mwata.site

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:1f:b0:26:67:e4:6d:fb:10:d6:9f:d7:5f:92:85:3b
Serial Number (int): 6810673928452687724806329678408353083
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): d4:2c:b6:ed:48:ed:7d:fa:ee:43:13:21:85:54:f1:49:2f:25:77:41
Fingerprint (sha256): 6c:b5:63:c6:6a:7e:5b:5c:fa:bc:04:ca:90:f7:46:22:31:ab:1a:04:3e:be:64:20:4e:28:46:be:c5:b3:af:14

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/CRktc4bgp9s
CRL Distribution Point: http://crls.pki.goog/gts1d4/dsfiNr-mayI.crl

Check the revocation status for certificate thetunneloflight.mwata.site

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thetunneloflight.mwata.site

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thetunneloflight.mwata.site
projects.kanaeokana.net
lp.gpocket.jp
www.cartobuk.it
www.ctkca.com
vs1.heinrichs.tech
dev.blwjbs.com
elearning.auribises.com
www.akshatdivya.com
data.sourcesync.io
iitjee.ayushpgupta.com
admin.jamesdonnelly.dev
www.spottedutfpr.com
lite-referral.services.amplifique.me
text.dl-vr.com
www.yesyep.io
www.truetoform.online
app.crosscar.services
pcrtest.nl
www.portizs.com
motech.dev
portal.q.plus
cart.paypolaraircargo.com
enn.design
rmaloney.dev
www.macrodatum.com
specstal.pp.ua
lava.a4apps.com
dev.vwtalent.com
sfedorenko.com.ua
www.skymeyer.dev
dev.together.nthn.io
www.jtknox.me
www.dataonline.app
candlestick.ai
loom.qa
www.laazucena.mx
master.minutebox.xyz
henergy.xyz
servnology.app
mb.pubq.se
www.gobulldogs.org
chargehanger.com
4ace.online
testfarmfresh.estore.business
www.gnkc.in
www.ij3rry.de
eldarion.cloud
medlivre.drtis.com.br
docs.hcs.bespokesy.dev
m5-portal.app
dev.play4buff.io
api.mathkey-app.com
beta.morenft.io
www.sonzera.rocks
wellnesspass.app
bookaby.me
stockists.warp.net
auth.finantare.asociatia-g2.ro
www.mentor.easya.co.uk
www.house-bud.com
clicks.grevling.dev
www.wellnesspass.app
gebemot.online
aaaa.aisessment.com
arbej.com
tbpoweron.com
login.meuid.com.br
app.acc.scheduler.quietpathtech.com
qa-marketing.arrivae.com
sofilive.com
time.woodcrestcompanies.com
biobitbybit.com
staging.flarenow.app
laazucena.mx
map.wwla.kiwi
m5-portal.com
sophiessweetswv.com
www.kinesiologie-martina.at
omnia-lead.com
portal.test.virtecsolutions.com.au
www.rovermax.com
softyorch.com
cheeckbox.com
hiffopet.com
www.ebisoftcafe.com
app.addhere.com
bitdeliverysk.com
docs.kited.io
lexcraft.eu
www.spatialfeelings.com
www.giftcard.karma.life
waitlyapp.com
admin.quickprescript.info
portal.s4biz.co.za
undergroundauto.me
www.coinbroom.com
app.detailthatmobile.com
dlugosch-audio.de
justice.mycase.tax

Other certificates including the domain name mwata.site

(limited to 100 certificates)
juan-gonzalez.me
mydar.co
pensionspenguin.com
eqzolu.com
torewin.com
mydar.co
survey.app.buildbetter.app
mydar.co
thriftybabes.org
crownstore.in
teledermatologija.lt
rapidhotelsystem.com
fixonet.com
one-beta.ultroncloud.com
mydar.co
stage-speak.beepboop.us
www.mijn.bobdebot.nl
mydar.co
app.stalliontech.io
btdevs.com
plantcrossingcode.com
www.shareabook.lk
thetunneloflight.mwata.site
www.efreela.app
clu-mo.com
go.lakecatholictheatre.org
www.opinionperu.com.pe
thriftybabes.org
simplesmind.pt
www.nancycorrigan.us
staging-auth.evfy.sg
www.mevsimdeyemek.com
clu-mo.com
lp3.profiopticiasi.ro
btdevs.com
nus.karim.ooo
einfachbiken.at
immigrationnationusa.com
meet.2gether.fun
shotoclock.io
bartsedu.partners.medics.academy
www.teamtogether.se
join.fabulist.app
munichpubsportscup.rocks
www.abmforcovid.org
meet.2gether.fun
quply.it
vecindiario.org
emlak.iytiraf.com
uitools.webfussel.de
www.cpaiii.com
dash.elsiglo.app
www.iammaymaps.com

Certificate

The complete raw certificate details for thetunneloflight.mwata.site in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6810673928452687724806329678408353083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 05:59:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 06:57:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thetunneloflight.mwata.site'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/CRktc4bgp9s'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1941 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetunneloflight.mwata.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.kanaeokana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.gpocket.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartobuk.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vs1.heinrichs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.blwjbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.auribises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akshatdivya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.sourcesync.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iitjee.ayushpgupta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jamesdonnelly.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spottedutfpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lite-referral.services.amplifique.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'text.dl-vr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yesyep.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truetoform.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.crosscar.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcrtest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portizs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motech.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.q.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.paypolaraircargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enn.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmaloney.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrodatum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specstal.pp.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lava.a4apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.vwtalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfedorenko.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skymeyer.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.together.nthn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtknox.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dataonline.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candlestick.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loom.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laazucena.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.minutebox.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henergy.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servnology.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb.pubq.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobulldogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargehanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4ace.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testfarmfresh.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnkc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ij3rry.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldarion.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medlivre.drtis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.hcs.bespokesy.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm5-portal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.play4buff.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mathkey-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.morenft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonzera.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellnesspass.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookaby.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockists.warp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.finantare.asociatia-g2.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mentor.easya.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.house-bud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicks.grevling.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnesspass.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gebemot.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaaa.aisessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbej.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbpoweron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.meuid.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.acc.scheduler.quietpathtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-marketing.arrivae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofilive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time.woodcrestcompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biobitbybit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.flarenow.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laazucena.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.wwla.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm5-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophiessweetswv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinesiologie-martina.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnia-lead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.test.virtecsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rovermax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softyorch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheeckbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiffopet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebisoftcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.addhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitdeliverysk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.kited.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexcraft.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spatialfeelings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giftcard.karma.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitlyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.quickprescript.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.s4biz.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undergroundauto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coinbroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.detailthatmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlugosch-audio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justice.mycase.tax'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/dsfiNr-mayI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b89ae1c2200000403004730450221008cadb9ff88ca6ff1da5cb976a2907c511f4679a8a05ebe5cf059d00ec5d2eb3f02206573c75178dd2fdc5f44d550452bd21058bb07d7014b414b9db3f7ef03b590bb007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b89ae1c64000004030046304402203a975abe3f4c61ca09342ee6b13b888bb4751d1e18d14df2c91f73310831215202204104ed2f246dd69471f64578787592f2a6f60e3433e71bace9536b441176daf5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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