www.blumenflum.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 10:37:16:f7:84:06:5b:3f:0a:df:c4:6c:ce:60:81:4e was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.blumenflum.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:37:16:f7:84:06:5b:3f:0a:df:c4:6c:ce:60:81:4e
Serial Number (int): 21553690083005196595684418167395877198
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 2d:1e:18:b9:34:d5:d5:bc:fe:c3:17:06:86:81:d0:56:50:25:e8:b1
Fingerprint (sha256): 73:fd:df:87:4c:c2:b3:b8:62:47:e9:22:dd:20:d9:13:26:fe:3e:63:d9:a0:03:dd:3e:27:39:42:74:e1:2b:3f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Pg6xrsSq4yg
CRL Distribution Point: http://crls.pki.goog/gts1d4/J2j3RCiEy04.crl

Check the revocation status for certificate www.blumenflum.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.blumenflum.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.blumenflum.de
fingerbible.com
christianarthur.com
app.dyc.coffee
retail.crashstickers.com
jana-deutsch.com
rebecalevy.com
mvsexport.com
app.meltinpot.org
italkdoc.com
www.absenso.com
amcmikro.hu
spoken-pictures-staging.innotactsoftware.com
dashboard.ptlumbung.com
subjectivefunction.com
osacodopao.com
jcamautosports.com
host.hearu.io
admin.collecto.art
www.zaroslabs.com
www.bunkerforecast.com
verification.teembly.com
yunyounglee.com
app.pauseperformance.com
wendellcodes.com
votecube.com
contabili.dev
nebikon.avdis.ch
pushtheb.com
www.subjectivefunction.com
simulateur1.kamatz.kmp.agency
www.elkmisii.info
ipp.klarway.com
www.acrossair.com
v2.mesetiquettes.com
stage.carteiracliente.com.br
auth.poppri.com
www.youandmewebcreations.com
lotuss-test.originsme.com
www.uat.howlingwolfe.com
stoktalk.com
train.konta.tech
makebetter.com.jm
www.rafaeldurofitness.com
www.contratospersonalizados.com.br
stampen-cm-dev.adssets.com
sportskinnect.com
www.persona.guide
odoo.gets.cloud
mann-kann.ch
www.goncadogan.com
www.barrykarsh.com
www.events4you.live
www.bnder.dev
sandbox.paincareoregon.com
codehaven.co.in
kagoshima.linx.live
brewery.apibrew.app
www.skagera.com
youkno.ai
www.soundfixwebdesign.com
dashboard.liveticket.app
morris-meadows.ovh.org.uk
www.bidtomato.com
novios.misterboda.es
dev-privacy.colavosalon.com
demo.algoritmi.org
beecounted.org
www.normansteger.com
console.picker.salon
app-link.vroom.com
stg.mypage.e-bukken.app
tilt.strollhere.com
www.smartseohosting.net
dartmission.pixela.tech
ascor.partnerhub.co.za
freelearningsheets.com
scendoinspiaggia.it
scpa.controltag.it
fmp.alttics.com
fidelity.cashaam.com
reliancetrafficservices.co.nz
nowaelektro.talpasmart.com
www.neuro-screen.com
link.rylbro.in
one-education-advisors-stage-2.ischoolconnect.com
one-education-advisors-stage-5.ischoolconnect.com
www.rltr.li
one-education-advisors-stage-6.ischoolconnect.com
www.cigkofteshop.com
olegarioperitoimoveis.com.br
one-education-advisors-stage-7.ischoolconnect.com
one-education-advisors-stage-3.ischoolconnect.com
via-stage.ischoolconnect.com
invman.africancleanenergy.com
app.monax.dk
ivantruong.com
app.foody.ar
backpack.ccpcs.org
kelaiah.com

Other certificates including the domain name blumenflum.de

(limited to 100 certificates)
indiquebodylaser.com.br
app.sanayolda.net
www.bravespetits.com
www.stickntex.fr
www.artilas.app
www.stickntex.fr
www.blumenflum.de
signin.statusfy.com
100blackdevs.com
app.sweetearth.mx
qsarcert.in
mcleod.stage.parade.ai
thepickatune.com
www.blumenflum.de
agent.shippyexpress.com
app.carterapagos.com
promorojanatb.com
www.harryxie.dev

Certificate

The complete raw certificate details for www.blumenflum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21553690083005196595684418167395877198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 00:01:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 00:59:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.blumenflum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Pg6xrsSq4yg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2269 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumenflum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fingerbible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianarthur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dyc.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.crashstickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jana-deutsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebecalevy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvsexport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.meltinpot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italkdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absenso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amcmikro.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoken-pictures-staging.innotactsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.ptlumbung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subjectivefunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osacodopao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcamautosports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.hearu.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.collecto.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zaroslabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bunkerforecast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verification.teembly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yunyounglee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pauseperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wendellcodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votecube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contabili.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebikon.avdis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushtheb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subjectivefunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulateur1.kamatz.kmp.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkmisii.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipp.klarway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrossair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.mesetiquettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.carteiracliente.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.poppri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youandmewebcreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotuss-test.originsme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat.howlingwolfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoktalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.konta.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makebetter.com.jm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rafaeldurofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratospersonalizados.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stampen-cm-dev.adssets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportskinnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.persona.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odoo.gets.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mann-kann.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goncadogan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barrykarsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.events4you.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnder.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.paincareoregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codehaven.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kagoshima.linx.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewery.apibrew.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skagera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youkno.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soundfixwebdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.liveticket.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morris-meadows.ovh.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bidtomato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novios.misterboda.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-privacy.colavosalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.algoritmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beecounted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.normansteger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.picker.salon'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-link.vroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mypage.e-bukken.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilt.strollhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartseohosting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dartmission.pixela.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascor.partnerhub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelearningsheets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scendoinspiaggia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpa.controltag.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmp.alttics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelity.cashaam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reliancetrafficservices.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowaelektro.talpasmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neuro-screen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.rylbro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-education-advisors-stage-2.ischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-education-advisors-stage-5.ischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rltr.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-education-advisors-stage-6.ischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cigkofteshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olegarioperitoimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-education-advisors-stage-7.ischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-education-advisors-stage-3.ischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'via-stage.ischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invman.africancleanenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.monax.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivantruong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.foody.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backpack.ccpcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelaiah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/J2j3RCiEy04.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001062458e59c5df88fd38b91826e39ce5dcbfa674c9c0b8345ac9560b2d2af58715dec29e2c3484bfc19de2f1a2e67c5622e90237b4215b887278a6e35e39a7d341d16fe3a858d157565d24c246b63e946fc4033fdb82cd77bf002a02387d076a6662e2ed35168b3430cf39b3aaf52546163a84f88bfc2fc08d699cfc551f7196ffd50fbc39b4f3ffe4089fb8446cfd559cfe5f562fd6899c2d433a58834832b0a9d36ccaaa07d48550fbf188e72e9c9a19e965f9f870620769ca99b74f3fca02cf66929583a023d6a22f0fbc9e1f274beb0e22a6930b859faed0f6d53781a86c116f60c449099020c2497807de6b5093e6c2f1d6795b8a7a5918669b92f5acee