www.cafidata.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number d9:eb:04:bd:71:9d:ea:cb:10:ea:50:54:76:93:61:b7 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.cafidata.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d9:eb:04:bd:71:9d:ea:cb:10:ea:50:54:76:93:61:b7
Serial Number (int): 289662760986006274958628702666215350711
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 8d:04:86:b4:39:ff:f8:fb:62:91:fa:8a:7f:62:ea:a6:80:c2:f1:6b
Fingerprint (sha256): 82:af:55:8c:fa:c9:8f:52:04:21:20:32:1e:8d:76:12:28:a2:0f:18:1c:97:6b:20:20:e1:48:6a:d6:0b:03:b0

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/nO-79mxz5k4
CRL Distribution Point: http://crls.pki.goog/gts1d4/JcHbY472QxQ.crl

Check the revocation status for certificate www.cafidata.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cafidata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cafidata.com
bespokeprints.ca
bradgaddis.com
dadjokegenerator.com
www.rkstudio.net
bside-music.com
gamequi.cc
pacmanvps.com
gelatodream.de
jessicaklassen.ca
lizziebichardcasting.com
www.thuzio.com
beta.carini.dev
ozon.scrapbooklms.com
www.steelocrafts.com
beautyzoom.app
admin-qa.socialgiver.com
nailab.co
nguyendai.dev
office.zabira.ng
www.thegangpresents.com
pixer.app
www.truemaulik.com
ishealth.app
srisaispiritualcentre.org
r.hacken.ai
thehighfive.network
firebase.dustinrfranz.com
sprawk.app
www.thirumalai.blackflux.in
playgrammar.ninja
www.pq5kfunrun.org
l.openrm.dev
www.mampfenguide.com
bingostallet.com
bim-app.at
beyondi.co
www.orthopathway.com
app.openingaid.com
link.the007percent.com
asics.cheerity.com
victoriamullerjewelry.com
superbmeteor.co
silverlite.in
12interview.com
catalina.abinbevefes.app
train-review.mytrainbell.com
test.clunk.app
meet-staging.mayday.am
manage2.sysproserv.app
fyzo.link
in.vester.app
cellphonecycle.com
doorhanger.getallium.com
staging-360.audion.fm
bigshart.com
admin.fatimagomez.site
www.minted.wtf
dlink.betiaworld.com
suppliers.alter-5.com
www.rennospecialists.com
za.velocityda.com
chiara-pietro.com
myvoicecalculator.com
homemadeplayer.com
lilyni.ca
abiinteriors.com
accounts.opendirectory.cc
preview.cdb-portal.com
guess-the-password.vicbarbu.io
app.809cakes.com
nehatutorials.com
www.avijitsarkar.com
cdn.fusefonts.com
manage3.sysproserv.app
hardfanaticz.com
preview-fcb.oxbull.tech
www.sqab.org
eainthu.piticommerce.com
logit-fitness.com
berlinmeals.com
each.city
www.pulscreen.com
winbelorta.be
link.aswaq-sd.com
www.http429.com
www.otisvis.com
marketplace.descubretrinidad.com
beta.gokeepup.com
link.cekpara.com
www.chatsooner.com
josiah-castillo.dev
www.appzek.com
mii-no-hitorigoto.com
www.logit-fitness.com
www.universitydao.xyz
syd-demo.speakylink.com
chaserradar.com
marcyforgeyborlikmd.com
jackleeconstruction.ca

Other certificates including the domain name cafidata.com

(limited to 100 certificates)
dvd.dickey.tech
aanamalu.live
studioskyfox.com
tastematchapp.com
hijamasister.com
eltilingolingo.com
beyondi.co
www.derechosytutelas.com
www.oliverv.xyz
dev.rro.ch
clubpropagas.com
www.froste.com.au
staging.resynq.app
www.saaennuste.fi
sudheer.dev
acme.codo.ai
www.cafidata.com
app.think20labs.com
eltilingolingo.com
thuzio.com
andrewsimmsfinance.co.nz
vivahaworld.com
audiocare.app
dev.m.pidedirecto.mx
debug.open.dopebytes.com
dev.rro.ch
www.babynatal.mx
beautyzoom.app
debug.open.dopebytes.com
fllrairporrclinic.com
getrently.ca
spacegym.io
hijamasister.com
commerce.aesteon.app
arthurchee.com
redirect.rccsonline.com

Certificate

The complete raw certificate details for www.cafidata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289662760986006274958628702666215350711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 09:26:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 10:25:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cafidata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/nO-79mxz5k4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1983 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafidata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bespokeprints.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradgaddis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadjokegenerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rkstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bside-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamequi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacmanvps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelatodream.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessicaklassen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lizziebichardcasting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thuzio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.carini.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozon.scrapbooklms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steelocrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyzoom.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-qa.socialgiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nailab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nguyendai.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.zabira.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegangpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truemaulik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishealth.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srisaispiritualcentre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.hacken.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehighfive.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.dustinrfranz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprawk.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thirumalai.blackflux.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playgrammar.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pq5kfunrun.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.openrm.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mampfenguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bingostallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bim-app.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orthopathway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.openingaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.the007percent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asics.cheerity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriamullerjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superbmeteor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverlite.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12interview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalina.abinbevefes.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train-review.mytrainbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.clunk.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet-staging.mayday.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage2.sysproserv.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyzo.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.vester.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellphonecycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doorhanger.getallium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-360.audion.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigshart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fatimagomez.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minted.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlink.betiaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suppliers.alter-5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rennospecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'za.velocityda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiara-pietro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvoicecalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homemadeplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilyni.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abiinteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.opendirectory.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.cdb-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guess-the-password.vicbarbu.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.809cakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nehatutorials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avijitsarkar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.fusefonts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage3.sysproserv.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardfanaticz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-fcb.oxbull.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sqab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eainthu.piticommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logit-fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinmeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'each.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pulscreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winbelorta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.aswaq-sd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.http429.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otisvis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.descubretrinidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.gokeepup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.cekpara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chatsooner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josiah-castillo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appzek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mii-no-hitorigoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logit-fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universitydao.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syd-demo.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaserradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcyforgeyborlikmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackleeconstruction.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/JcHbY472QxQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd7ab6e28000004030046304402200f44abf5f96c1cfc5456d292def497daac7b0e4d61fac7ba7728400ac06af89802203d53cebc03e5a6ac53207a00bf4ff7e2378c45dece07eb6088a133ece307a7c30076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd7ab7225000004030047304502201aaadd42823e573782ea58538fe4705d90d6a65f5405e388e227e2542764bc81022100802e139054b947aed2e31c1a29123a162a6f0ca8be077218183b7e55505bd253
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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