www.bbnt.co.th

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 1b:1d:92:56:ac:f2:c0:ae:10:c1:1c:00:b3:44:9a:c1 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bbnt.co.th

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:1d:92:56:ac:f2:c0:ae:10:c1:1c:00:b3:44:9a:c1
Serial Number (int): 36042700594039239583168653207313619649
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 13:eb:32:82:97:32:b5:40:ee:61:48:88:cc:21:c7:c6:8f:d4:7b:89
Fingerprint (sha256): 70:c6:02:6e:ca:b1:ad:96:7f:aa:11:7f:a4:d1:de:f0:c2:52:61:86:e0:a0:49:82:0f:f9:2f:0e:ff:a9:92:96

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/iLWEyLN2AkM
CRL Distribution Point: http://crls.pki.goog/gts1d4/KLT9VNR8wwI.crl

Check the revocation status for certificate www.bbnt.co.th

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bbnt.co.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bbnt.co.th
sumansarkar.com
dashofcode.com
singserv.sg
cxucoaching.com
www.linfieldfarm.net
coltstreet.com
www.jordanwiney.com
staging.hub.hoxbycollective.com
www.goodcash.co
www.privatepractice.studio
faci-manager.com
meatan.com
test.logoicstudios.com
empleadosm.affinity.do
nourpos.com
www.carzoos.com.au
reeseticket.com
azadgirls.com
www.peopleculture.net.au
www.akceceny.cz
discussion.whigh.co
oolab.c-oonet.com
www.zaiteck.com
dashboard.weborama.nl
cookie.avada.io
uaeh.lapieza.io
www.remi-nguyen-duc-osteopathe.fr
www.batriq.com.sa
coollab.pt
starwars.jeddai.com
baogianhanh.app
www.alanchu.dev
eduqwik.com
cigkoefte27.split-app.de
ivanmoroz.net
crown-medical.com
changatech.com
ghiermann.com
bruiloft.knupke.com
xapps.to
vyro.ai
coding4kids.co.uk
moneymanager.eliecerdaza.com
cammington.28east.co.za
organizations.cme-tracker.app
calyang.pedidomovil.es
studio.mafynetti.fi
fcm.naghampro.com
feedback.livion.fi
faculdadeibg.edu.br
www.myhomecloud.app
anxiety-tracker.thewordisbird.dev
simcon.app
hermannfreiburg.de
iamout.app
www.whatsacut.com
pqs-d.facet-adviseurs.nl
app.yousay.tv
www.miami-college.us
mmcbd.jia-technologies.com
joanne.frankmonaghan.co.uk
admin.chessneurons.com
memberclicks.cme-tracker.app
dl.planto.hk
www.memorypie.app
solve.climate-science.com
bildin.com.pe
joker214taxi.nl
galadriel.quest
beststockadvisors.com
www.billogstudio.com
danhague.co.uk
login.drprax.com
nikolaigust.de
www.jasidapp.app
10mb.app
www.angelcareaga.com
www.teachmenotes.com
www.beststockadvisors.com
festerton.com.mx
parksenin.com
www.pwnyup.com
project-butler.com
dev-tracker.tripattern.com
www.copperfinch.io
www.maxsash.com
firebase.passwordlastic.fr
www.joinbid.com.br
www.ahmed-gabtni.com
baxta.8bhsolutions.com
ajpcl.com
www.minishell.info
www.pinkdhaga.com
shepherdfleets.com
www.concretepours.com
rhghd.club
analytics-development.bigadvice.com
truemaulik.com
shreenarayanamahall.com

Other certificates including the domain name bbnt.co.th

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bbnt.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36042700594039239583168653207313619649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 12:58:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 13:55:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bbnt.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/iLWEyLN2AkM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2001 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnt.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumansarkar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashofcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singserv.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxucoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfieldfarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coltstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jordanwiney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.hub.hoxbycollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodcash.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatepractice.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faci-manager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.logoicstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empleadosm.affinity.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nourpos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carzoos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reeseticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azadgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peopleculture.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akceceny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discussion.whigh.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oolab.c-oonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zaiteck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.weborama.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookie.avada.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uaeh.lapieza.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remi-nguyen-duc-osteopathe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.batriq.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coollab.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starwars.jeddai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baogianhanh.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alanchu.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduqwik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigkoefte27.split-app.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanmoroz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crown-medical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghiermann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bruiloft.knupke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapps.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyro.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coding4kids.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneymanager.eliecerdaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cammington.28east.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organizations.cme-tracker.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calyang.pedidomovil.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.mafynetti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcm.naghampro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.livion.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculdadeibg.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhomecloud.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anxiety-tracker.thewordisbird.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simcon.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermannfreiburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamout.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatsacut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pqs-d.facet-adviseurs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.yousay.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miami-college.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcbd.jia-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joanne.frankmonaghan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chessneurons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberclicks.cme-tracker.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.planto.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memorypie.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solve.climate-science.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bildin.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker214taxi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galadriel.quest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beststockadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billogstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danhague.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.drprax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikolaigust.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasidapp.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10mb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelcareaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teachmenotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beststockadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festerton.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parksenin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pwnyup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project-butler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tracker.tripattern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copperfinch.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxsash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.passwordlastic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinbid.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahmed-gabtni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baxta.8bhsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajpcl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minishell.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinkdhaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shepherdfleets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concretepours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhghd.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics-development.bigadvice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truemaulik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shreenarayanamahall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/KLT9VNR8wwI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae13bf2d80000040300473045022100a080a323932191e72a3f164522db2904579080f34fce412b2b6292a9996b18f4022012e00b88f4523d340d46f3b3662fd046e4a4e33cd6f90ae3bd13fe393f7edf5d007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ae13bf2d10000040300483046022100f63e67e5fecb1f30de42c84526eacdceeb1f917bdf0904ac277d8d06b72b08c2022100cda18cf068e27b5cffdb1cb0c09261a00ec8bccb12bf5e69ace64eb96a89ecd7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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