penumbra.zone

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 40:cc:b6:65:92:db:c6:e3:09:81:dd:fa:59:bc:1a:c7 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=penumbra.zone

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:cc:b6:65:92:db:c6:e3:09:81:dd:fa:59:bc:1a:c7
Serial Number (int): 86133519735418504651850697887329295047
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 37:17:f0:28:31:87:51:5d:47:52:37:eb:7e:a8:a4:bc:eb:2a:c8:86
Fingerprint (sha256): 7a:b6:5b:c4:c8:20:9c:2a:a5:0c:6d:2d:7f:84:d0:f0:25:47:44:a7:24:8b:9f:16:e8:2b:f5:29:4e:67:09:b5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/5oShiZypUfs
CRL Distribution Point: http://crls.pki.goog/gts1d4/84DEy2W4wFY.crl

Check the revocation status for certificate penumbra.zone

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for penumbra.zone

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

penumbra.zone
admin.landit.co.jp
www.aromach.me
mytoadm.com
mobile.livedplacespublishing.com
www.kyntek.ch
app.dev.clevertrack.dk
sweetlift.net
www.app.trunkbase.dev
connexions.mirl.club
sammanpublishinghouse.com.np
staging.pwa.saloonhq.io
www.sammanpublishinghouse.com.np
www.kaeyug.com
www.softpark.kr
tryon.metapix.me
itpm-consult.de
beefrs.com
korekcie.sk
dhanwantarycollege.com
www.itpm-consult.de
itpmconsult.de
www.prasunchakra.org
mariganesh.com
pizzamedia.stream
staging-admin.bkn301.sm
mobil.eliar.cloud
staging-businessclient-admin.bkn301.sm
dbase.chat
softpark.kr
staging-payments-admin.bkn301.sm
admin.bkn301.sm
imedicare.in
payments-admin.bkn301.sm
static-dev.yodo.ch
www.lascade.com
games-admin.staging.icebreaker.video
www.mmtradezone.com
www.tsi.com.vn
leste.pizza
kuramatura.eu
test.emonit.cz
delivery.menuti.com.br
linedasher.com
sk.kuramatura.eu
www.tradesearch.com.au
www.planera.org
bhargavnaidu.com
qa.acbot.xbot.com.vn
www.balancegamelab.fun
www.imedicare.in
console.greenstream.io
www.vlconsulting.cz
faceswapai.app
www.mpo100.site
www.damoa.world
jeremy-erickson.com
www.jeremy-erickson.com
hadaward.com.br
passphrase.piyawasin.com
www.muicinimran.online
muicinimran.online
eos-robots.xyz
vbobroff.net
search.teamgaryvee.com
www.szerepcsere.com
rpb-rettifica.it
mpo100.site
astafa.in
www.rpb-rettifica.it
cocol.tokyo
www.vbobroff.net
ymmbulentsezgin.com
www.ymmbulentsezgin.com
statusscreen.prokuma.dev
connect-ng-analytics.rxoconnectdemo.rxo.com
app.garasitekno.com
postcodecheck.net
connect-ng-billing.rxoconnectdemo.rxo.com
connect-ng-claims.rxoconnectdemo.rxo.com
connect-ng-documents.rxoconnectdemo.rxo.com
intranet.vanwijnen.nl
sosmedai.com
connect-ng-door-to-door.rxoconnectdemo.rxo.com
connect-ng-fom.rxoconnectdemo.rxo.com
connect-ng-invoices.rxoconnectdemo.rxo.com
rec-cda-admin.bens-groupe.com
connect-ng-orders.rxoconnectdemo.rxo.com
connect-ng-pending-orders.rxoconnectdemo.rxo.com
highscore-manager.screenable.io
iotconnect-hsw.kapion.de
portal.primeceramics.com.np
www.reviewworxpro.com
bestnaptime.com
cloudevolve.tech
connect-ng-registration.rxoconnectdemo.rxo.com
connect-ng-routes.rxoconnectdemo.rxo.com
connect-ng-reports.rxoconnectdemo.rxo.com
connect-ng-quotes.rxoconnectdemo.rxo.com
condomi-dev.zetaone.com.br

Other certificates including the domain name penumbra.zone

(limited to 100 certificates)

Certificate

The complete raw certificate details for penumbra.zone in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86133519735418504651850697887329295047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 11:49:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 12:47:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'penumbra.zone'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/5oShiZypUfs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penumbra.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.landit.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aromach.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytoadm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.livedplacespublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyntek.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.clevertrack.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetlift.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.trunkbase.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexions.mirl.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sammanpublishinghouse.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pwa.saloonhq.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sammanpublishinghouse.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaeyug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softpark.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryon.metapix.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itpm-consult.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beefrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korekcie.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhanwantarycollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itpm-consult.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itpmconsult.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prasunchakra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariganesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzamedia.stream'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-admin.bkn301.sm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobil.eliar.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-businessclient-admin.bkn301.sm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbase.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softpark.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-payments-admin.bkn301.sm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bkn301.sm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imedicare.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments-admin.bkn301.sm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-dev.yodo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lascade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games-admin.staging.icebreaker.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmtradezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leste.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuramatura.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.emonit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.menuti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linedasher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk.kuramatura.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradesearch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhargavnaidu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.acbot.xbot.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balancegamelab.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imedicare.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.greenstream.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vlconsulting.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceswapai.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpo100.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damoa.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeremy-erickson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeremy-erickson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadaward.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passphrase.piyawasin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muicinimran.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muicinimran.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-robots.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vbobroff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.teamgaryvee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.szerepcsere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpb-rettifica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpo100.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astafa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rpb-rettifica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocol.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vbobroff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymmbulentsezgin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymmbulentsezgin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statusscreen.prokuma.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-analytics.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.garasitekno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postcodecheck.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-billing.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-claims.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-documents.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.vanwijnen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosmedai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-door-to-door.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-fom.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-invoices.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec-cda-admin.bens-groupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-orders.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-pending-orders.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highscore-manager.screenable.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iotconnect-hsw.kapion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.primeceramics.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reviewworxpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestnaptime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudevolve.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-registration.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-routes.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-reports.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-quotes.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condomi-dev.zetaone.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/84DEy2W4wFY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001891bccd9b70000040300473045022100e69ae7bd102983ec536e5e883f976746eee4ac4ca500d8d8d4654c6dc92852580220384b59044bb589f85b0c3163f2f6606b379a7aa99200c1a0d0c1efba5db930690077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001891bccd9da000004030048304602210088c58f9a6ddf2745b612cbc51a1869079a4857ba64357b5150a6e56a2f6ebb2e022100d709e2b53ca8261a26e54750fa4f3ba78beac3669d0c33ee5be65f94293dfd1b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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