shema.bg

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e3:db:32:03:7f:39:3f:27:10:36:24:fd:ef:7c:e4:4a was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shema.bg

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): e3:db:32:03:7f:39:3f:27:10:36:24:fd:ef:7c:e4:4a
Serial Number (int): 302872882452733503774835050602672481354
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): d0:d2:e0:9d:c3:25:d8:a9:62:44:c5:1d:39:23:b3:21:db:e8:65:30
Fingerprint (sha256): 6c:b9:fd:35:f0:0d:48:80:b7:a4:0e:71:03:b8:bf:02:09:bd:f6:a9:cb:5c:79:a2:b6:8d:b4:90:b5:db:b3:39

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/eRbv9XOm6Fw
CRL Distribution Point: http://crls.pki.goog/gts1d4/mGmYD4H4YkY.crl

Check the revocation status for certificate shema.bg

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shema.bg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shema.bg
datafenix.co.uk
mf-main.powerit.dev
vacuumclean.site
aquarenda.com
gridresilienceindex.org
valitovorchestra.org
app.abiasimoveis.com.br
mappu.app
urbanwoods.in
wov.herstelverzoek.nl
outerfold.com
www.winnerhead.com
bpp-2020-practice.exploredata.app
jhsports.parados.app
bundles.solcode.tech
sundaygpt.xyz
viewers-test.halliv.com
vcsync.app
admin-panel.edefy.us
www.web.alaxsa.com
app.entrie.se
d1-mycollections.dpdlocal.co.uk
wels-contact-us.wels.app
tuko.studio
www.sawcentral.site
sawcentral.site
skilltree.quest
vonquintus.eventtravel.app
player.slices.co
partiful.co
www.theaipodcast.org
www.brillik.com
www.toasterovenworld.site
sainik.insightsacademy.in
strongerwinnipeg.ca
kodomotube.shwld.app
www.vtrakit.com
www.grillsplanet.site
develop-link.vvvip.app
online.ruta16.com
www.coffeecraze.site
app.gojo.global
faynek.com
link.billieapp.io
clinicasfutura.com
piskejhokej.cz
www.hasirele.com
www.soccerplayers.app
nxt.aurora-schools.org
admin.cresicor.ai
srinarayanaeyehospital.org
manamakal.com
flikecard.com
dabtcare.com
casablancalawnservice.com
www.camillely.com
check.affilimate.com
gallery.tonari.no
www.zincir.app
auth.diminuendo.ca
q.makesense.org
lumijobs.tech
suvarli.zeplinx.com
nebraskaimoveis.com.br
antar.chat
n2d.cc
natureboytv.com
lo-beam.com
pennstate-altoona.sowl.to
kwidil.com
developers.balin.app
goodgoings.com
globalboletos.com
staging.fishfacts.com
api.suscripciones.co
andrewdsong.com
staging2.citizenservicecloud.com
aihearu.com
capionic.com
im.batiot.com
30seclearn.com
accquaglobal.com
merchant.topnotch.club
yunabe.jp
www.selftitled.studio
enclaveitservices.com
floracoiffure.ca
www.eut.im
dev.itec.28east.co.za
vishnuananthan.com
signatures.patientflow.com.au
www.fleurs-des-petites-roches.com
devsuper.app
qa-dl.cardbyte.ai
admin.spiffyventures.com
devinpentecost.info
www.billingsarea.com
mgt.nairathrift.com.ng
www.satelit.gkagloria.id

Other certificates including the domain name shema.bg

(limited to 100 certificates)
www.coursereview.matv.io
payment.app.c-rayon.com
payment.app.c-rayon.com
shema.bg
www.linkzy.app
www.jainaiyush.ca
seqhub.in
maymaygourmetfood.com

Certificate

The complete raw certificate details for shema.bg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302872882452733503774835050602672481354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 17:09:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 18:07:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shema.bg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/eRbv9XOm6Fw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1986 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shema.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datafenix.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mf-main.powerit.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacuumclean.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquarenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gridresilienceindex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valitovorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.abiasimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanwoods.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wov.herstelverzoek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outerfold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winnerhead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpp-2020-practice.exploredata.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhsports.parados.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundles.solcode.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sundaygpt.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewers-test.halliv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcsync.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-panel.edefy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web.alaxsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.entrie.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd1-mycollections.dpdlocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wels-contact-us.wels.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuko.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sawcentral.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sawcentral.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skilltree.quest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vonquintus.eventtravel.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.slices.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partiful.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theaipodcast.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brillik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toasterovenworld.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainik.insightsacademy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongerwinnipeg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodomotube.shwld.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vtrakit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grillsplanet.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop-link.vvvip.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ruta16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeecraze.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gojo.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faynek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.billieapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicasfutura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piskejhokej.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hasirele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soccerplayers.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxt.aurora-schools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cresicor.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srinarayanaeyehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manamakal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flikecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dabtcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casablancalawnservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camillely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'check.affilimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery.tonari.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zincir.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.diminuendo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q.makesense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumijobs.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suvarli.zeplinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antar.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n2d.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natureboytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lo-beam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennstate-altoona.sowl.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwidil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.balin.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodgoings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalboletos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.fishfacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.suscripciones.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewdsong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging2.citizenservicecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aihearu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capionic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'im.batiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '30seclearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accquaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchant.topnotch.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yunabe.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selftitled.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enclaveitservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floracoiffure.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eut.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.itec.28east.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vishnuananthan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signatures.patientflow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fleurs-des-petites-roches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsuper.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-dl.cardbyte.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.spiffyventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devinpentecost.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billingsarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgt.nairathrift.com.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satelit.gkagloria.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/mGmYD4H4YkY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f3032f8100000040300463044022062d26ec8ccab23b7b7adca7d4a8e442ac1c594eb1f73c763661308fd8674ed86022001890ed0f967da0040bfc64803ce658f2e4585301794d04ae3356779169fd63100750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f3032f81f0000040300463044022027fd44ea540546562cab7bc25bce260e114c3f8348ebc38c15b5b6bc30efe0900220153e4b6078a394859fc53b24d9da9573fd65e1f7fcca306a0291b8e689df98d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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