befirst-qa.ovdns.co.za

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 52:1c:23:7a:87:e5:06:e6:0a:00:00:00:00:f1:27:e4 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=befirst-qa.ovdns.co.za

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 52:1c:23:7a:87:e5:06:e6:0a:00:00:00:00:f1:27:e4
Serial Number (int): 109142799558631384216669001876679763940
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): fb:9f:7f:be:9d:27:a1:88:06:30:3a:f8:0b:98:a5:93:24:96:ea:b2
Fingerprint (sha256): 73:ad:3c:8e:5e:74:bb:21:f8:1e:36:e3:9d:29:77:dd:b2:49:c6:a9:5c:01:b2:df:14:3b:4c:23:91:e7:ba:01

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d4
CRL Distribution Point: http://crls.pki.goog/gts1d4/_qUPrlTybXM.crl

Check the revocation status for certificate befirst-qa.ovdns.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for befirst-qa.ovdns.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

befirst-qa.ovdns.co.za
exo.tl
www.recipesusorigin.xyz
app.auto247remedies.com
trimhomes.co.uk
ctvilamariana.app
link.simplify.art
painelsacramento.g2canal.com.br
controle.mobilizei.com.br
padova.softeo.com.br
freshkitchen.estore.business
ganeshmartadmin.estore.business
localdukanadmin.estore.business
pinetreedigital.ca
t.shoppersdrugmart.ca
firma.recetame.cl
larsen161.club
maverics.estore.business
moonlightgroup.co
ajantaartsindia.com
alaadeif.com
www.pinetreedigital.ca
stage.assuredflow.com
www.barbwall.com
stage.fiu.campusexperienceapp.com
ciudadturmero.com
colon30.com
inh-elinmejorable.elinmejorable.com
www.alaadeif.com
hitchedmoney.com
www.equinexcontroldeplagas.com
www.estermabel.com
gjkeller.f2bportfolio.com
glasque.com
www.colon30.com
gpmwholesale.com
www.greatwallandkinkao.com
guideforultimategolf.com
navikalyan.com
keilizcakesupplies.com
www.glasque.com
ocdutah.com
okyo.com
blog.pliszko.com
hive.swarmloyalty.com
www.staging.ryddm.com
sejoartgallery.com
theneuronclinic.sevaro.com
www.sheikhmuzammil.com
sidelineapps.com
statuslayer.com
v2.sudacode.com
thalianyora.com
tranpad.com
www.twentytwo.company
kanzlei-lrp.fastdocs.de
glasque.de
video-of-the-day.de
www.v2.sudacode.com
module-manager.bce.dev
goodswe.dev
ddtrungit.ga
ilm.digital
beta.cloudhosts.dk
www.glasque.de
facturator.es
mauriciofernandez.es
cup.asv-leichtathletik.eu
www.goodswe.dev
zaack.fr
dashboard.sqrl.gallery
glidin.co.in
glidin.in
admin.printmymoments.in
techmaroon.in
www.zaack.fr
convers.lenka.info
uat.zig.live
redcup.pagi.info
stuffed.ving.info
beetleborg.zimo.info
bsuite.laams.io
board.mezza.io
bootware.jp
app.openbooks.live
app.wcards.net
www.frdm.news
icoffee.co.nz
www.icoffee.nz
otamas.kreisen.org
puthichak.org
vapari.page
www.icoffee.co.nz
starboom.ro
salimhartono.site
console.getmemo.co.za
admin.tales.so
devicedb.app
www.salimhartono.site
wooribaby-universal-links.nerdfactory.ai

Other certificates including the domain name ovdns.co.za

(limited to 100 certificates)
befirst-uat.ovdns.co.za
www.gracklecanvas.com
promo.parkourai.com
tmanual.mimamori-info.com
becasdeportivasusa.com
justice.is
develop.merchscale.com
*.ovdns.co.za
wrapstarzldn.co.uk
www.formulalabs.io
school.3dgalaxy.be
www.matthewdizon.me
sizweafrica.sudotech.co.za
gshs.ghr-home.com
shredreel.com
pangea-nifi.ovdns.co.za
wrapstarzldn.co.uk
myako.ovdns.co.za
kokomosprays.com
sizweafrica.sudotech.co.za
befirst-qa.ovdns.co.za
*.ovdns.co.za
sizweafrica.sudotech.co.za
samipcrestha.com.np
myptetools.com
sizweafrica.sudotech.co.za
www.beerandbush.co.za
satishsoumya.com
becasdeportivasusa.com
sizweafrica.sudotech.co.za
waitoc.hemisphere.digital
yourback.app
flip-klip.dk
samipcrestha.com.np
eliassportstrivia.com
myako-scorm.ovdns.co.za
sizweafrica.sudotech.co.za
www.nicolasvenne.ca
sizweafrica.sudotech.co.za
download.chronwell.net
simtronics.com.au
www.sajanrampal.site
isurusranmohotti.tk
ovdns.co.za
cum.engineer
www.aleksandravujadinovic.com
www.pesodecuba.com
clicks-production.sudotech.co.za
www.numarg.xyz
sizweafrica.sudotech.co.za
www.violetpharmacy.com
befirst-qa.ovdns.co.za
download.chronwell.net
www.patflatti.ch
www.sajanrampal.site
admin.delishmall.com
setu.gupshup.io
hugot-optimizer-dev3.pbcd.net
*.ovdns.co.za
imoveisverana.com.br
hugot-optimizer-dev3.pbcd.net
clicks-production.sudotech.co.za
brightpalette.ca
actinius.com
geyiks.org
www.wolfardsolutions.nl
sportsball.gg
www.cloudfit.tv
www.sitch.cards
grabadaddy.com
graphql.2nie.com
forms.staging.keap.app
www.danmarksopsamling.dk
qlhd.tanbinhmanh.com
clicks-production.sudotech.co.za
flip-klip.dk
www.formulalabs.io
partner-app.hopefulinc.me
clicks-test2.sudotech.co.za
www.keyforher.com
login.doublehelixtracking.com
www.alrightnotes.com
staging.support.nival.me
adityasaxena.dev
myjobis.fun
myako.ovdns.co.za
graphql.2nie.com
aaplabhajiwala.com
admin.novisecurity.com
www.cloudfit.tv
dev-360s.athum.com
musicminer.co.in
sizweafrica.sudotech.co.za
cilngirusta.com
www.ventwithstrangers.com
www.coffeeshopmentor.com
www.singinglessonsnottingham.com
uiroute.com
sizweafrica.sudotech.co.za
nate-duncan.com

Certificate

The complete raw certificate details for befirst-qa.ovdns.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109142799558631384216669001876679763940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-08 20:19:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-06 21:19:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'befirst-qa.ovdns.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1995 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'befirst-qa.ovdns.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exo.tl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recipesusorigin.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.auto247remedies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimhomes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctvilamariana.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.simplify.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painelsacramento.g2canal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controle.mobilizei.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padova.softeo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshkitchen.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganeshmartadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localdukanadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinetreedigital.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.shoppersdrugmart.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firma.recetame.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larsen161.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maverics.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonlightgroup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajantaartsindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaadeif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinetreedigital.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.assuredflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbwall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.fiu.campusexperienceapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciudadturmero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colon30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inh-elinmejorable.elinmejorable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alaadeif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitchedmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equinexcontroldeplagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estermabel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjkeller.f2bportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colon30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpmwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatwallandkinkao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guideforultimategolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navikalyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keilizcakesupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glasque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocdutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.pliszko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hive.swarmloyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.ryddm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sejoartgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theneuronclinic.sevaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheikhmuzammil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidelineapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuslayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.sudacode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thalianyora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tranpad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twentytwo.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzlei-lrp.fastdocs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasque.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-of-the-day.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.v2.sudacode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'module-manager.bce.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodswe.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddtrungit.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilm.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.cloudhosts.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glasque.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facturator.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauriciofernandez.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cup.asv-leichtathletik.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodswe.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaack.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.sqrl.gallery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glidin.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glidin.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.printmymoments.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techmaroon.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zaack.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convers.lenka.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.zig.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcup.pagi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuffed.ving.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beetleborg.zimo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsuite.laams.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'board.mezza.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootware.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.openbooks.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.wcards.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frdm.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icoffee.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icoffee.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otamas.kreisen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puthichak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vapari.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icoffee.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starboom.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salimhartono.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.getmemo.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tales.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devicedb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salimhartono.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wooribaby-universal-links.nerdfactory.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/_qUPrlTybXM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017a87ffdaeb0000040300483046022100e862fb79d779a6e3abfb87e579819c2af9418eca8eec6a880852ebfa55451e3b022100f18613db67d1023fa358c1b2a8e51f6fd8df0d60d00216b65951eaa977de9a7e007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f90000017a87ffdee2000004030047304502207c94520ec06b2598d152bb146d5718f495daeec38fcbfc5b83a7751468a45b6c022100b23ca77150b666c34cdeb9152ae1f0cc3e101b151fbe6095c42cfd220f025bcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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