www.kaziks.lv

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 03:ad:08:75:23:1a:3d:6a:0a:74:64:97:73:5f:59:4f was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.kaziks.lv

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ad:08:75:23:1a:3d:6a:0a:74:64:97:73:5f:59:4f
Serial Number (int): 4886122883716813616258809333244975439
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 07:c8:06:d8:fa:ce:3c:43:c9:6b:a6:f4:a9:dd:88:9a:c6:2a:b0:a8
Fingerprint (sha256): 7f:7b:12:7f:e1:b9:d1:b8:ac:3c:8d:d1:36:4d:9a:b4:e7:b7:c6:69:17:b4:ca:9b:e4:53:c8:7b:37:91:1e:a2

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/5wMzMCSPqFM
CRL Distribution Point: http://crls.pki.goog/gts1d4/H62TMptl96E.crl

Check the revocation status for certificate www.kaziks.lv

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kaziks.lv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kaziks.lv
yesmarketing.pt
gkj-eh.org
www.refida.li
www.thedramaqueen.app
suniltako.com.np
thesciencecapital.com
mipig.co.jp
wordtransformer.com
announcing-dev3-console.suzulabo.net
www.fiyom.com
www.wordtransformer.com
starcreditation.com
auth.swaybase.com
www.abemma.com
staging-link.kol.store
www.caddosupply.com
cure-ai.jp
forum.hanslarmaharjan.com.np
www.ossbot.computer
jane-lee.org
www.tormentedplayer.com
viewer.input4you.be
www.drawit.fun
resiketo.jp
home.etrivo.net
fast-budget.com
user.locoff.in
www.michaelcastilla.com
ihome-rf.ru
volksbolsa.com.br
sellularity.io
www.manodio.com
app.tamako-nft.com
estimator.digitalartdealers.net
dl.crawlbots.com
multi.9lessons.info
bellatrixtechnologies.info
www.wheelsontrails.com
editor.trainingbeta.com
james-lee.org
demo.airsset.com
app.tymebank.co.za
icdsite.org
click.slotgamesonline.co.uk
b3.bytekast.io
r3.realsafe.me
www.moietmaplanete.org
go.isxgames.com
app.ridewithequo.com
xlsol.com.br
app.nextcard.me
www.esolutions-24.com
performance.teamculture.com.br
www.wxbrief.ca
groceries.makeitwork.io
myfive.kr
www.dataarch.co
www.apinexus.in
login.payeg.in
www.svstransport.in
admin.blotch.app
skypalace.net
spellingcee.hopku.net
tjjiskra.vojnuvmestec.cz
app.beauty-develop.ru
www.fancygiveaways.app
www.handsomegenius.com.au
www.bekuster.com.br
www.poojabridalcreations.com
mea-portal.itxi.aero
link.welbi.menu
www.fabisaad.com.br
www.clinipro.ca
www.scorepad.it
www.egamebook.com
dev.mu.bcom.group
www.antari.io
dikson.com.co
codycolorgrid.codemooc.org
livebusinessupdate.abbviebroadcast.com
www.allyouropinions.com
floorandwall.ae
babv.cr
waterfull.m1studio.co
www.eusebeialegal.com
faq-staging.logichat.io
www.appxotica.com
app.berriesmart.com
horloge.informacion.my.id
www.fuzatto.com
pottemaskoten.no
www.spell.games
protectyourschool.xtend.education
www.angelgworld.com
www.yso.tw
auth.beer-tasting.halvedcut.com
najava.mojgrad.mk
mojo.malooba.com
www.fix-claims.de

Other certificates including the domain name kaziks.lv

(limited to 100 certificates)
www.quranchallenge.id
stg-console.nanobebe.io
www.appmaster.cc
msfi.in
www.ppog.org
www.margaretcampbell.ie
wayang.io
jetson.com.ng
myseries.mako.co.il
www.kaziks.lv
www.huaweitheme.app
www.oji-yakuyo.jp
ajoara.com
aiwebsite.outgrow.chat
demo.dert.solutions
www.hundertschaft.com
bettool.dev
www.coach-leblanc.fr

Certificate

The complete raw certificate details for www.kaziks.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINQjCCDCqgAwIBAgIQA60IdSMaPWoKdGSXc19ZTzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzExMjMxMTQyNTRaFw0yNDAyMjEx
MjM5NDZaMBgxFjAUBgNVBAMTDXd3dy5rYXppa3MubHYwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCq2zTJ4uANYulcbyxEHaJDwiPfPMQt2foPoTEJAiRQ
cYK/oe7CX1Dw8gheyJnJq36JJC9CEFn3BIdhi5gVa9cO3UrGPUA04oVYORZa+IL3
NZ2F1oo92VjO0Il5w36cCusY+fokeimM8aumgLI2rk4dc3KcUYG1+/Rod8+bfvVj
95StpQ50QEMyVfe2g5zKEguVmeNCHoaV0RX02wZ3PkA9D8XPCfCO+m3ho8kdU9oI
X0AaQDSXhg76qrvsny2+r538Ncux0PO7/MeHJmsXIgNrwLnH5zCHw/aiG0Nzli8u
DgmGcbKkiNj+/Ezjpk6WGrUF0QiQXj0tBslZYPleVVRVAgMBAAGjggpYMIIKVDAO
BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUIUXCO6xMLOtrT7XnyeLDatG9s8IwHwYDVR0jBBgwFoAUJeIY
DrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilo
dHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC81d016TUNTUHFGTTAxBggrBgEF
BQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjCCB/wG
A1UdEQSCB/Mwggfvgg13d3cua2F6aWtzLmx2gg95ZXNtYXJrZXRpbmcucHSCCmdr
ai1laC5vcmeCDXd3dy5yZWZpZGEubGmCFXd3dy50aGVkcmFtYXF1ZWVuLmFwcIIQ
c3VuaWx0YWtvLmNvbS5ucIIVdGhlc2NpZW5jZWNhcGl0YWwuY29tggttaXBpZy5j
by5qcIITd29yZHRyYW5zZm9ybWVyLmNvbYIkYW5ub3VuY2luZy1kZXYzLWNvbnNv
bGUuc3V6dWxhYm8ubmV0gg13d3cuZml5b20uY29tghd3d3cud29yZHRyYW5zZm9y
bWVyLmNvbYITc3RhcmNyZWRpdGF0aW9uLmNvbYIRYXV0aC5zd2F5YmFzZS5jb22C
Dnd3dy5hYmVtbWEuY29tghZzdGFnaW5nLWxpbmsua29sLnN0b3JlghN3d3cuY2Fk
ZG9zdXBwbHkuY29tggpjdXJlLWFpLmpwghxmb3J1bS5oYW5zbGFybWFoYXJqYW4u
Y29tLm5wghN3d3cub3NzYm90LmNvbXB1dGVyggxqYW5lLWxlZS5vcmeCF3d3dy50
b3JtZW50ZWRwbGF5ZXIuY29tghN2aWV3ZXIuaW5wdXQ0eW91LmJlgg53d3cuZHJh
d2l0LmZ1boILcmVzaWtldG8uanCCD2hvbWUuZXRyaXZvLm5ldIIPZmFzdC1idWRn
ZXQuY29tgg51c2VyLmxvY29mZi5pboIXd3d3Lm1pY2hhZWxjYXN0aWxsYS5jb22C
C2lob21lLXJmLnJ1ghF2b2xrc2JvbHNhLmNvbS5icoIOc2VsbHVsYXJpdHkuaW+C
D3d3dy5tYW5vZGlvLmNvbYISYXBwLnRhbWFrby1uZnQuY29tgh9lc3RpbWF0b3Iu
ZGlnaXRhbGFydGRlYWxlcnMubmV0ghBkbC5jcmF3bGJvdHMuY29tghNtdWx0aS45
bGVzc29ucy5pbmZvghpiZWxsYXRyaXh0ZWNobm9sb2dpZXMuaW5mb4IWd3d3Lndo
ZWVsc29udHJhaWxzLmNvbYIXZWRpdG9yLnRyYWluaW5nYmV0YS5jb22CDWphbWVz
LWxlZS5vcmeCEGRlbW8uYWlyc3NldC5jb22CEmFwcC50eW1lYmFuay5jby56YYIL
aWNkc2l0ZS5vcmeCG2NsaWNrLnNsb3RnYW1lc29ubGluZS5jby51a4IOYjMuYnl0
ZWthc3QuaW+CDnIzLnJlYWxzYWZlLm1lghZ3d3cubW9pZXRtYXBsYW5ldGUub3Jn
gg9nby5pc3hnYW1lcy5jb22CFGFwcC5yaWRld2l0aGVxdW8uY29tggx4bHNvbC5j
b20uYnKCD2FwcC5uZXh0Y2FyZC5tZYIVd3d3LmVzb2x1dGlvbnMtMjQuY29tgh5w
ZXJmb3JtYW5jZS50ZWFtY3VsdHVyZS5jb20uYnKCDnd3dy53eGJyaWVmLmNhghdn
cm9jZXJpZXMubWFrZWl0d29yay5pb4IJbXlmaXZlLmtygg93d3cuZGF0YWFyY2gu
Y2+CD3d3dy5hcGluZXh1cy5pboIObG9naW4ucGF5ZWcuaW6CE3d3dy5zdnN0cmFu
c3BvcnQuaW6CEGFkbWluLmJsb3RjaC5hcHCCDXNreXBhbGFjZS5uZXSCFXNwZWxs
aW5nY2VlLmhvcGt1Lm5ldIIYdGpqaXNrcmEudm9qbnV2bWVzdGVjLmN6ghVhcHAu
YmVhdXR5LWRldmVsb3AucnWCFnd3dy5mYW5jeWdpdmVhd2F5cy5hcHCCGXd3dy5o
YW5kc29tZWdlbml1cy5jb20uYXWCE3d3dy5iZWt1c3Rlci5jb20uYnKCHHd3dy5w
b29qYWJyaWRhbGNyZWF0aW9ucy5jb22CFG1lYS1wb3J0YWwuaXR4aS5hZXJvgg9s
aW5rLndlbGJpLm1lbnWCE3d3dy5mYWJpc2FhZC5jb20uYnKCD3d3dy5jbGluaXBy
by5jYYIPd3d3LnNjb3JlcGFkLml0ghF3d3cuZWdhbWVib29rLmNvbYIRZGV2Lm11
LmJjb20uZ3JvdXCCDXd3dy5hbnRhcmkuaW+CDWRpa3Nvbi5jb20uY2+CGmNvZHlj
b2xvcmdyaWQuY29kZW1vb2Mub3JngiZsaXZlYnVzaW5lc3N1cGRhdGUuYWJidmll
YnJvYWRjYXN0LmNvbYIXd3d3LmFsbHlvdXJvcGluaW9ucy5jb22CD2Zsb29yYW5k
d2FsbC5hZYIHYmFidi5jcoIVd2F0ZXJmdWxsLm0xc3R1ZGlvLmNvghV3d3cuZXVz
ZWJlaWFsZWdhbC5jb22CF2ZhcS1zdGFnaW5nLmxvZ2ljaGF0LmlvghF3d3cuYXBw
eG90aWNhLmNvbYITYXBwLmJlcnJpZXNtYXJ0LmNvbYIZaG9ybG9nZS5pbmZvcm1h
Y2lvbi5teS5pZIIPd3d3LmZ1emF0dG8uY29tghBwb3R0ZW1hc2tvdGVuLm5vgg93
d3cuc3BlbGwuZ2FtZXOCIXByb3RlY3R5b3Vyc2Nob29sLnh0ZW5kLmVkdWNhdGlv
boITd3d3LmFuZ2VsZ3dvcmxkLmNvbYIKd3d3Lnlzby50d4IfYXV0aC5iZWVyLXRh
c3RpbmcuaGFsdmVkY3V0LmNvbYIRbmFqYXZhLm1vamdyYWQubWuCEG1vam8ubWFs
b29iYS5jb22CEXd3dy5maXgtY2xhaW1zLmRlMCEGA1UdIAQaMBgwCAYGZ4EMAQIB
MAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtp
Lmdvb2cvZ3RzMWQ0L0g2MlRNcHRsOTZFLmNybDCCAQIGCisGAQQB1nkCBAIEgfME
gfAA7gB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi/w0a3AA
AAQDAEYwRAIgfyXm7GmWOubR4tymRk925AzxQNJIDJVGwbjSmGiCmRACIBZfRmQ0
OD0U7fEz/Y7/qSYYzFJXkiRfmDeD6SCg1ymcAHUAO1N3dT4tuYBOizBbBv5AO2fY
T8P0x70ADS1yb+H61BcAAAGL/DRrZAAABAMARjBEAiA6Yx0X9Qo6WELneKrJSyAv
AXZ9S9F5eXNBOBuTvAN8AgIgXgjILnMZehiobQIX0FcBnowraag2lEcig8WY76Up
/A0wDQYJKoZIhvcNAQELBQADggEBACOgABBDQ5GHkR/tYTlao1TuE4t6vw55MkxA
U5F5g9jmZxIlr7S5SGuq/vY0UhKOKBZDzumwv1PYpetuWKWUCe0K801jgFOjXzWA
dST77xgTOm7sv1bUJ2N/EaTe2RzgwlDa6dVCKabaPyZ58+G8cp75J47R6fexk7Zs
OAuMn9ki9hOD1qDithSNY9xLWFcEgAgtuUtxsiUlzTxn6R5De70VtpQeytV6ncHy
3FriXqo7ICA4MOTvMImvsqwERX8Z2+dFXIniKbvzIIO3WipMkgDORhXmPuddF28M
0Zs2hWEK3/C704HKw3XXk4meXpwt3nlYESYSEgOt9gccKTZFWjM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4886122883716813616258809333244975439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 11:42:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 12:39:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kaziks.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/5wMzMCSPqFM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2035 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaziks.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesmarketing.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gkj-eh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refida.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedramaqueen.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suniltako.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesciencecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mipig.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordtransformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'announcing-dev3-console.suzulabo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiyom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordtransformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starcreditation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.swaybase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abemma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-link.kol.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caddosupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cure-ai.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.hanslarmaharjan.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ossbot.computer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jane-lee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tormentedplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewer.input4you.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drawit.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resiketo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.etrivo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast-budget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user.locoff.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelcastilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihome-rf.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volksbolsa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellularity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manodio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tamako-nft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estimator.digitalartdealers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.crawlbots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multi.9lessons.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellatrixtechnologies.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheelsontrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editor.trainingbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'james-lee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.airsset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tymebank.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdsite.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.slotgamesonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b3.bytekast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r3.realsafe.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moietmaplanete.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.isxgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ridewithequo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlsol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nextcard.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esolutions-24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance.teamculture.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wxbrief.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groceries.makeitwork.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfive.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dataarch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apinexus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.payeg.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svstransport.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.blotch.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypalace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spellingcee.hopku.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjjiskra.vojnuvmestec.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.beauty-develop.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancygiveaways.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handsomegenius.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bekuster.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poojabridalcreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mea-portal.itxi.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.welbi.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabisaad.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clinipro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scorepad.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egamebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mu.bcom.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antari.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dikson.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codycolorgrid.codemooc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebusinessupdate.abbviebroadcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allyouropinions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floorandwall.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babv.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfull.m1studio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eusebeialegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq-staging.logichat.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appxotica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.berriesmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horloge.informacion.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuzatto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottemaskoten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spell.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectyourschool.xtend.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelgworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yso.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.beer-tasting.halvedcut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'najava.mojgrad.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojo.malooba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fix-claims.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/H62TMptl96E.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bfc346b70000004030046304402207f25e6ec69963ae6d1e2dca6464f76e40cf140d2480c9546c1b8d298688299100220165f466434383d14edf133fd8effa92618cc525792245f983783e920a0d7299c0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bfc346b64000004030046304402203a631d17f50a3a5842e778aac94b202f01767d4bd179797341381b93bc037c0202205e08c82e73197a18a86d0217d057019e8c2b69a83694472283c598efa529fc0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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