marinamazzocchi.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 59:40:aa:6b:82:ae:23:4d:12:bf:53:20:a1:18:f4:33 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=marinamazzocchi.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 59:40:aa:6b:82:ae:23:4d:12:bf:53:20:a1:18:f4:33
Serial Number (int): 118637055151293322540885862008621691955
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): ae:64:86:a7:5a:2d:00:54:49:1a:82:44:33:1c:85:23:1f:02:78:ed
Fingerprint (sha256): 82:3e:39:03:50:07:ed:f4:4c:0d:c6:11:48:20:e6:bd:95:44:5f:59:bf:49:17:89:ed:22:a8:02:45:37:d5:ef

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/qJpaMz8goHU
CRL Distribution Point: http://crls.pki.goog/gts1d4/Ljiga1eCboE.crl

Check the revocation status for certificate marinamazzocchi.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marinamazzocchi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marinamazzocchi.com
www.protung.de
www.antonioangelino.com
www.sarmadmakhdoom.com
scottlinenberger.com
leadapplinks-dev.intervarsity.org
merchant-fd-exp.setoko.com
app-staging.betareader.io
www.ahsaplaces.com
tournament.arcadenfts.com
zarrasvand.com
alpha.planik.pl
www.unravelers.com
niftybounties.com
rudych.com
www.deckdeckgo.com
stage3.ev-liquidhome.de
www.kotitontti.fi
www.rizaasset.com
www.ronaldg.dev
www.nzgray.com
www.xerostech.fr
twentytwofour.com
delwp.firegrid.com.au
read.introist.com
app.distribuidoreszinpro.com
modge.dev
home.alexamin.de
www.lunedex.com
www.thanaphon.dev
improvequality.it
www.dlevacher.fr
calendar.itclub.ro
www.tkevents.no
activomexico.schoolmarket.mx
upwardtaskmanager.net
www.unimodern.com
cuahang.kasoft.vn
www.powerpick.co
care.hipai.in
www.cangis.com
www.nico-flohr.de
services.uniteddisability.com.au
eurekasoft.work
www.dovale.es
support.grocee.id
www.upwardtaskmanager.net
stg.actiontest.thunder2000.com
www.sweetmickymovie.com
www.shadylawnnewland.com
vrijwilligers.muzemix.be
www.synthify.io
aviation.tools
friem.rgateway.it
qr.namsutech.com
staging-admin.coconi.work
bowus.app
collectorsregister.app
basketball.athleteera.app
www.darion.tech
fusend.app
www.snowdog.io
autocop.co.uk
slowsolutions.com
steepdeals.com
sigritphotography.com
teledice.app
sabisapp.websays.com
www.expertdataconsulting.com
nagual.app
aktmodell.rocks
staging-manager.tomatoma.app
www.panto.ai
dev-admin.accelerate-possible.com
www.pimpatcha.com
www.vambuu.com
www.snowflakecreator.com
solkraft.edvardsson.eu
provider.sniffle.com
www.steepdeals.com
pronosticapp.mihurasoft.com
loca.com.vn
www.userbit.com
nolimitlabs.co
contact.intg.keap.page
leija.se
www.fusend.app
re3.ai
primeofficeconsorcio.com.br
backstage.aestheticsmap.com
chiefhacker.com
ingenieriamfp.es
dev.gostream.co
uplift.optakit.app
carwash.support
urhab.com
www.admin.join-live.com
s.scannow.gg
translation-server-ux.commitsmart.com
hellohabit.com

Other certificates including the domain name marinamazzocchi.com

(limited to 100 certificates)
www.nfg.dk
go.ghiveci.com
app.bazaar.com.kw
go.ghiveci.com
pshop.hcmpost.vn
bo.kypsafe.com
richardlengyel.com
isosecu.com
go.ghiveci.com
marinamazzocchi.com
share.stage.soniccloud.com
coxlab-indoors.cox2m.com
niftybounties.com
bluestone-prop.sapphire-standard.com
ci.woovapp.com
www.tammotion.africa
flowby.io
sanddraw.me
go.ghiveci.com
cvgenerator.after5.my.id
cvgenerator.after5.my.id
niftybounties.com
bluestone-prop.sapphire-standard.com
share.stage.soniccloud.com

Certificate

The complete raw certificate details for marinamazzocchi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINTzCCDDegAwIBAgIQWUCqa4KuI00Sv1MgoRj0MzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzExMjYxNTM3NTZaFw0yNDAyMjQx
NjM0NTJaMB4xHDAaBgNVBAMTE21hcmluYW1henpvY2NoaS5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2zTJ4uANYulcbyxEHaJDwiPfPMQt2foP
oTEJAiRQcYK/oe7CX1Dw8gheyJnJq36JJC9CEFn3BIdhi5gVa9cO3UrGPUA04oVY
ORZa+IL3NZ2F1oo92VjO0Il5w36cCusY+fokeimM8aumgLI2rk4dc3KcUYG1+/Ro
d8+bfvVj95StpQ50QEMyVfe2g5zKEguVmeNCHoaV0RX02wZ3PkA9D8XPCfCO+m3h
o8kdU9oIX0AaQDSXhg76qrvsny2+r538Ncux0PO7/MeHJmsXIgNrwLnH5zCHw/ai
G0Nzli8uDgmGcbKkiNj+/Ezjpk6WGrUF0QiQXj0tBslZYPleVVRVAgMBAAGjggpf
MIIKWzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUIUXCO6xMLOtrT7XnyeLDatG9s8IwHwYDVR0jBBgw
FoAUJeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUF
BzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC9xSnBhTXo4Z29IVTAx
BggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRl
cjCCCAEGA1UdEQSCB/gwggf0ghNtYXJpbmFtYXp6b2NjaGkuY29tgg53d3cucHJv
dHVuZy5kZYIXd3d3LmFudG9uaW9hbmdlbGluby5jb22CFnd3dy5zYXJtYWRtYWto
ZG9vbS5jb22CFHNjb3R0bGluZW5iZXJnZXIuY29tgiFsZWFkYXBwbGlua3MtZGV2
LmludGVydmFyc2l0eS5vcmeCGm1lcmNoYW50LWZkLWV4cC5zZXRva28uY29tghlh
cHAtc3RhZ2luZy5iZXRhcmVhZGVyLmlvghJ3d3cuYWhzYXBsYWNlcy5jb22CGXRv
dXJuYW1lbnQuYXJjYWRlbmZ0cy5jb22CDnphcnJhc3ZhbmQuY29tgg9hbHBoYS5w
bGFuaWsucGyCEnd3dy51bnJhdmVsZXJzLmNvbYIRbmlmdHlib3VudGllcy5jb22C
CnJ1ZHljaC5jb22CEnd3dy5kZWNrZGVja2dvLmNvbYIXc3RhZ2UzLmV2LWxpcXVp
ZGhvbWUuZGWCEXd3dy5rb3RpdG9udHRpLmZpghF3d3cucml6YWFzc2V0LmNvbYIP
d3d3LnJvbmFsZGcuZGV2gg53d3cubnpncmF5LmNvbYIQd3d3Lnhlcm9zdGVjaC5m
coIRdHdlbnR5dHdvZm91ci5jb22CFWRlbHdwLmZpcmVncmlkLmNvbS5hdYIRcmVh
ZC5pbnRyb2lzdC5jb22CHGFwcC5kaXN0cmlidWlkb3Jlc3ppbnByby5jb22CCW1v
ZGdlLmRldoIQaG9tZS5hbGV4YW1pbi5kZYIPd3d3Lmx1bmVkZXguY29tghF3d3cu
dGhhbmFwaG9uLmRldoIRaW1wcm92ZXF1YWxpdHkuaXSCEHd3dy5kbGV2YWNoZXIu
ZnKCEmNhbGVuZGFyLml0Y2x1Yi5yb4IPd3d3LnRrZXZlbnRzLm5vghxhY3Rpdm9t
ZXhpY28uc2Nob29sbWFya2V0Lm14ghV1cHdhcmR0YXNrbWFuYWdlci5uZXSCEXd3
dy51bmltb2Rlcm4uY29tghFjdWFoYW5nLmthc29mdC52boIQd3d3LnBvd2VycGlj
ay5jb4INY2FyZS5oaXBhaS5pboIOd3d3LmNhbmdpcy5jb22CEXd3dy5uaWNvLWZs
b2hyLmRlgiBzZXJ2aWNlcy51bml0ZWRkaXNhYmlsaXR5LmNvbS5hdYIPZXVyZWth
c29mdC53b3Jrgg13d3cuZG92YWxlLmVzghFzdXBwb3J0Lmdyb2NlZS5pZIIZd3d3
LnVwd2FyZHRhc2ttYW5hZ2VyLm5ldIIec3RnLmFjdGlvbnRlc3QudGh1bmRlcjIw
MDAuY29tghd3d3cuc3dlZXRtaWNreW1vdmllLmNvbYIYd3d3LnNoYWR5bGF3bm5l
d2xhbmQuY29tghh2cmlqd2lsbGlnZXJzLm11emVtaXguYmWCD3d3dy5zeW50aGlm
eS5pb4IOYXZpYXRpb24udG9vbHOCEWZyaWVtLnJnYXRld2F5Lml0ghBxci5uYW1z
dXRlY2guY29tghlzdGFnaW5nLWFkbWluLmNvY29uaS53b3Jrgglib3d1cy5hcHCC
FmNvbGxlY3RvcnNyZWdpc3Rlci5hcHCCGWJhc2tldGJhbGwuYXRobGV0ZWVyYS5h
cHCCD3d3dy5kYXJpb24udGVjaIIKZnVzZW5kLmFwcIIOd3d3LnNub3dkb2cuaW+C
DWF1dG9jb3AuY28udWuCEXNsb3dzb2x1dGlvbnMuY29tgg5zdGVlcGRlYWxzLmNv
bYIVc2lncml0cGhvdG9ncmFwaHkuY29tggx0ZWxlZGljZS5hcHCCFHNhYmlzYXBw
LndlYnNheXMuY29tghx3d3cuZXhwZXJ0ZGF0YWNvbnN1bHRpbmcuY29tggpuYWd1
YWwuYXBwgg9ha3Rtb2RlbGwucm9ja3OCHHN0YWdpbmctbWFuYWdlci50b21hdG9t
YS5hcHCCDHd3dy5wYW50by5haYIhZGV2LWFkbWluLmFjY2VsZXJhdGUtcG9zc2li
bGUuY29tghF3d3cucGltcGF0Y2hhLmNvbYIOd3d3LnZhbWJ1dS5jb22CGHd3dy5z
bm93Zmxha2VjcmVhdG9yLmNvbYIWc29sa3JhZnQuZWR2YXJkc3Nvbi5ldYIUcHJv
dmlkZXIuc25pZmZsZS5jb22CEnd3dy5zdGVlcGRlYWxzLmNvbYIbcHJvbm9zdGlj
YXBwLm1paHVyYXNvZnQuY29tggtsb2NhLmNvbS52boIPd3d3LnVzZXJiaXQuY29t
gg5ub2xpbWl0bGFicy5jb4IWY29udGFjdC5pbnRnLmtlYXAucGFnZYIIbGVpamEu
c2WCDnd3dy5mdXNlbmQuYXBwggZyZTMuYWmCG3ByaW1lb2ZmaWNlY29uc29yY2lv
LmNvbS5icoIbYmFja3N0YWdlLmFlc3RoZXRpY3NtYXAuY29tgg9jaGllZmhhY2tl
ci5jb22CEGluZ2VuaWVyaWFtZnAuZXOCD2Rldi5nb3N0cmVhbS5jb4ISdXBsaWZ0
Lm9wdGFraXQuYXBwgg9jYXJ3YXNoLnN1cHBvcnSCCXVyaGFiLmNvbYIXd3d3LmFk
bWluLmpvaW4tbGl2ZS5jb22CDHMuc2Nhbm5vdy5nZ4IldHJhbnNsYXRpb24tc2Vy
dmVyLXV4LmNvbW1pdHNtYXJ0LmNvbYIOaGVsbG9oYWJpdC5jb20wIQYDVR0gBBow
GDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRw
Oi8vY3Jscy5wa2kuZ29vZy9ndHMxZDQvTGppZ2ExZUNib0UuY3JsMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf
tZsAAAGMDH6r9wAABAMASDBGAiEA8R3jU17dQ7+XiVfJVNbAXBuAqGIpscCTqDvg
xE/58VICIQCIKOsDay/Ly8MoqycH7+Kqy2kVFOz1+PmLQ3q09eupZwB1AEiw42va
pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjAx+rB0AAAQDAEYwRAIgUS/i
2GVEKXFlZByzSt+Lnt45jTYcX6ZFAtFi8gjgS4ECIEprkJoIJ2Oidzsnr+b5UPH3
kE1c5eoH0C/MhZ2esKUbMA0GCSqGSIb3DQEBCwUAA4IBAQAj641DwsJEBlfRFGgq
847MSiV7/YGasocJe0ClVvqWYxbVdOpirWbJUEIQ4cgiHXQ8uYhevEOYFtPYkOU2
I3hiR/pUd7W636av/XZO03aQi7dc07J3j1Tze+doqjWmrpZwwq/1OsQOPdVj6KLt
lVLE+QZ8+ixfyIyRPFX2F8JpxXZJzMKseLrO+xnwca9woM7wBdhdrYncomlBnaCx
DTm9MpDQ1zvYvDwnVtw6tNFppMkuwMkutCMHnZzK6mnPxaHcd9ui7mUdJ7YRSv3z
wQPAcKAa7O/FoGfZtzaHIvRSRqdKgVJSMYrydODIpHoMPbgioYC4Mt82XViu7u0/
Tc39
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118637055151293322540885862008621691955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 15:37:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 16:34:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marinamazzocchi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/qJpaMz8goHU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2040 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marinamazzocchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antonioangelino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarmadmakhdoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottlinenberger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadapplinks-dev.intervarsity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchant-fd-exp.setoko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-staging.betareader.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahsaplaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tournament.arcadenfts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zarrasvand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.planik.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unravelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niftybounties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deckdeckgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage3.ev-liquidhome.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kotitontti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rizaasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ronaldg.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzgray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xerostech.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twentytwofour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delwp.firegrid.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.introist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.distribuidoreszinpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modge.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.alexamin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lunedex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanaphon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'improvequality.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlevacher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.itclub.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkevents.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activomexico.schoolmarket.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upwardtaskmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuahang.kasoft.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerpick.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.hipai.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cangis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nico-flohr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.uniteddisability.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurekasoft.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dovale.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.grocee.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upwardtaskmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.actiontest.thunder2000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweetmickymovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shadylawnnewland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrijwilligers.muzemix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synthify.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviation.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friem.rgateway.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.namsutech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-admin.coconi.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectorsregister.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketball.athleteera.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darion.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusend.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowdog.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slowsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steepdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigritphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teledice.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabisapp.websays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expertdataconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagual.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktmodell.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-manager.tomatoma.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panto.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-admin.accelerate-possible.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pimpatcha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vambuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowflakecreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solkraft.edvardsson.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provider.sniffle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steepdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronosticapp.mihurasoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loca.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.userbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolimitlabs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.intg.keap.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leija.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fusend.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 're3.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeofficeconsorcio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.aestheticsmap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiefhacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingenieriamfp.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gostream.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uplift.optakit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carwash.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urhab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.join-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.scannow.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translation-server-ux.commitsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellohabit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Ljiga1eCboE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c0c7eabf70000040300483046022100f11de3535edd43bf978957c954d6c05c1b80a86229b1c093a83be0c44ff9f1520221008828eb036b2fcbcbc328ab2707efe2aacb691514ecf5f8f98b437ab4f5eba96700750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0c7eac1d00000403004630440220512fe2d86544297165641cb34adf8b9ede398d361c5fa64502d162f208e04b8102204a6b909a082763a2773b27afe6f950f1f7904d5ce5ea07d02fcc859d9eb0a51b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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