markus-wagner.net

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 70:9e:05:d7:e7:96:b8:40:0a:cb:0b:ef:cc:82:ad:5a was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=markus-wagner.net

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:9e:05:d7:e7:96:b8:40:0a:cb:0b:ef:cc:82:ad:5a
Serial Number (int): 149694036949335285594194013988589841754
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b4:32:85:3d:05:f6:b6:5e:9c:48:6a:92:f0:e5:c9:f3:02:ae:bb:5d
Fingerprint (sha256): 77:c9:44:84:00:97:53:65:ec:19:05:68:c2:14:b7:0b:34:98:36:97:d2:c7:4c:a5:c0:67:83:20:62:02:74:be

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/uXJd2f7oqwA
CRL Distribution Point: http://crls.pki.goog/gts1d4/ZVagZNvG2A0.crl

Check the revocation status for certificate markus-wagner.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markus-wagner.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

markus-wagner.net
www.versatilesolutions.ca
sriharivishnu.com
me.pangoni.io
alz.moe
artisanmarble.ie
retriever.dog
info.herooy.com
timberline.chrislauer.net
www.buyinsg.com
app.styledcalendar.com
console.mytrendingstories.com
kodiak.chrislauer.net
rnaffordable.co.uk
www.sported.ke
travelcardapp.nl
www.ivan-filatov.info
bigox.chrislauer.net
greencheddar.org
account.kqed.org
auth.songcraft.io
www.refnex.com
pagoschoix.com.mx
durcon.cl
mta-sts.mjg.icu
southsalish.org
lnk.sidp.me
orderpoint.online
demo.powertechs.us
link.dev.brd.so
href.huwi.mx
www.fit2.live
www.floridalawschoolchallenge.org
prophecysports.app
carverify.co.za
startupvalidate.com
www.verbup.com
connect.xmltravelgate.com
www.jp-ventures.de
www.song.co.uk
kaibaoom.tw
www.thelostmetropolis.org
www.shyconsult.com
messages.remac.app
www.puzzletime.app
www.bjcollins.tech
appclip.veracityprotocol.org
www.museboard.xyz
www.neonbloom.fr
www.shinra.app
app.staging.fidu.sg
equipometre.facilit.norsys.fr
stg.csm.bitkey.site
dev-test.forartsexhibitions.com
ca.creatoradar.com
nz.creatoradar.com
grupovidas.drtis.com.br
gearhartgrowth.com
joegrio.com
authcmp.wearewoodruff.xyz
igasha.com
uk.creatoradar.com
storage.ankigpt.wtf
100pins.100.pn
www.houserjohn.com
induseverest.com
www.monotone.com
app-tst.mmseas.com
koonva.com
animesenpai.horizondrift.com
lacrosselab.com
www.gpsinnova.com
www.onetruthlove.com
photobombwidget.com
packagebuilders.com
dev.my.htt-testing.com
neuropatrones.com
www.adjouorigins.com
api.projectrxnegade.com
www.sparkoftrade.com
espera.sixbase.com.br
sagelec-app.speakylink.com
www.charcoalsystem.com.br
disney.icebreaker.video
talk.mkutano.org
www.brockwellunitedfc.co.uk
sagelec.speakylink.com
markenbreit.de
auth.rasmus.com
www.wybro.com
www.upt7209.com
www.medifit-peer.be
zkgrants.com
auth.studybuckets.com
smartbibles.com
rtc.lawliv.com
spencer-settlement.com
zona-privada.coopeconti.pe
jlsistemasweb.com.br
exhibitor.bim-app.at

Other certificates including the domain name markus-wagner.net

(limited to 100 certificates)
www.coronacommunity.in
app.byggkollen.se
augmentedtheatre.com
markus-wagner.net
www.crblalock.com
travelcardapp.nl
gurudevschool.com
energizer.lernit.app
www.anthonyng.me

Certificate

The complete raw certificate details for markus-wagner.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149694036949335285594194013988589841754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 00:18:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 01:16:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markus-wagner.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/uXJd2f7oqwA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2028 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markus-wagner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.versatilesolutions.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sriharivishnu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.pangoni.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alz.moe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisanmarble.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retriever.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.herooy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timberline.chrislauer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyinsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.styledcalendar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.mytrendingstories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodiak.chrislauer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnaffordable.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sported.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelcardapp.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivan-filatov.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigox.chrislauer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greencheddar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.songcraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refnex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagoschoix.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durcon.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.mjg.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southsalish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnk.sidp.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderpoint.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.powertechs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.dev.brd.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'href.huwi.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fit2.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floridalawschoolchallenge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prophecysports.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carverify.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupvalidate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verbup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.xmltravelgate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jp-ventures.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.song.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaibaoom.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelostmetropolis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shyconsult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messages.remac.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puzzletime.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bjcollins.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appclip.veracityprotocol.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museboard.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neonbloom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shinra.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staging.fidu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equipometre.facilit.norsys.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.csm.bitkey.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-test.forartsexhibitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.creatoradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nz.creatoradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupovidas.drtis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearhartgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joegrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authcmp.wearewoodruff.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igasha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.creatoradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.ankigpt.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100pins.100.pn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houserjohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'induseverest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monotone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-tst.mmseas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koonva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animesenpai.horizondrift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacrosselab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpsinnova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onetruthlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photobombwidget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packagebuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.my.htt-testing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuropatrones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adjouorigins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.projectrxnegade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sparkoftrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espera.sixbase.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagelec-app.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charcoalsystem.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disney.icebreaker.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talk.mkutano.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brockwellunitedfc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagelec.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markenbreit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.rasmus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wybro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upt7209.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medifit-peer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zkgrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.studybuckets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartbibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtc.lawliv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spencer-settlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zona-privada.coopeconti.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlsistemasweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibitor.bim-app.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/ZVagZNvG2A0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c9966da8300000403004830460221009e25a60f4675a3f5cd3104b499bfcd23739e55433910fa93ba597e651de723b7022100cfca4a36fe6004841c72fed9aab90bd61c9fd3a0ad1841fcf009ec243c0de19100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c9966da9d00000403004730450220187f51993882e603d91e611e431b12c607629689af02aaed1fa5ab51893ead6a02210089edcd3e3ebe39f65660c474304f2b8d6493bb08daa45dd1365b1bcf28a6af80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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