alexandertsema.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e9:34:38:57:bd:a0:57:8c:10:d3:5a:18:5e:ff:86:e3 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alexandertsema.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e9:34:38:57:bd:a0:57:8c:10:d3:5a:18:5e:ff:86:e3
Serial Number (int): 309981265221003661074824892959655167715
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 2b:2f:b4:68:94:4f:38:de:46:4a:8b:6f:d6:51:f8:04:57:7e:07:2c
Fingerprint (sha256): 86:e9:fd:68:53:19:c9:41:5a:ac:fd:28:f8:32:77:b0:2c:cd:6c:32:f0:57:ee:62:f9:70:73:42:f0:ca:91:b1

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/lx6iFSfIh3Y
CRL Distribution Point: http://crls.pki.goog/gts1d4/S9vTJcWMVR0.crl

Check the revocation status for certificate alexandertsema.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alexandertsema.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alexandertsema.com
8bityoda.com
beneprog.com
diversdiscount.com
test.jetpackai.com
booking.hyll.com
deeplink.monjackgames.com
carmelmotors-scanner-carmel.cox2m.com
roundcount.sparwerx.com
www.nioequipment.in
msclinic.live
vaximum.in
curator.eu.wow-dev.org
dev-website.dang-app.com
configurator.deepskill.com
gandalf.dslrteam.com
elitemapacademy.com
www.elitemapacademy.com
honeyspotter.com
tiagosantos.dev.br
www.honeyspotter.com
staging.intouchwe.com
ishamerabuttonhai.com
readinglinesapp.com
techcrus.com
lukasweijl.com
ai.thecyberspaceuniversity.com
links.thinknlocal.com
www.timetospang.com
uniqhire.com
flappy.tronodyssey.com
www.uniqhire.com
refer.xpresscure.com
zaroslabs.com
yavolatours.com
ferienspiele-rothenbergen.de
www.ageofmobile.de
production.aplano.de
www.jakub-boucek.cz
www.geisel-web.de
deutsche-direkt.ihr-versicherungsschutz.de
www.davidma.dev
rwemad.dev
www.looch.dev
voidprojects.dev
ibedhdie.fun
niemeyer.fyi
www.arttege.eu
earn.coinage.finance
arttege.eu
www.niemeyer.fyi
elisys.app
www.walterafurman.app
drumuri.bike
mythcarver.games
pos.choiceinc.biz
calculator.blue
donedigital.com.au
www.niceonenailsottawa.ca
upl.mprado.com.br
www.mgustav.ca
covid19triage.aki.bz
www.animallabs.co
alternativasoftware.com.br
staging.grappl.co
api-staging.xpersity.co
380tek.com
preprod-app.speakylink.ca
www.agroferreteravyr.com
breakingoodworldwide.com
backend.cretenborg.com
www.traderabbit.com.br
www.gamersvote.com
autofb.datakund.com
epihelper.com
www.magnesconnect.com
jinhechinese.com
www.markusmengel.com
gifgroen.com
console.meiliiapp.com
www.mkplabs.com
moogenda.com
meteoricvr.com
musicians-armoury.com
neokcs.com
nightlifecia.com
nortrix.com
nyxspace.com
myfreestylo.com
experience.staging.optimusride.com
remoteforslides.com
www.quantsolar.com
www.rewisefinancial.com
shopify-nft.com
stolen.scjalliance.com
sparkcommodities.com
www.sparkcommodities.com
www.qomand.com
sparkfabrik.com
www.splashanddashindia.com

Other certificates including the domain name alexandertsema.com

(limited to 100 certificates)
fidmobile.intlmz.com
www.carroceriastaluzia.com.br
12n.app
k.koopid.ai
www.exdiv-watcher.com
newswav.app
test.newswav.app
alexandertsema.com
gaali.vn
link.marlim.co
blackpepperapps.com
www.webboot.io
staging.thinkbudgetapp.com.au
wyve.app
www.fireflyon.com
render.tiptondigital.com
mvs.blocktrack.net
www.lenteh.ru
safe-lease-milage.qwezey.com
new.heygrady.com
www.webboot.io
jilpampanga.org
deltanow.tech
alexandertsema.com
www.javiervanegasramirez.com
elhuguito.tk
www.kanjegfeste.no
commonityapp.com
www.alexandertsema.com
nodeinsiders.com
procanarias.com
startrips.org
gaali.vn
n-12v.com
cartney.in
appfree2all.com
onthejob.site
ckbusinessltd.com
api.bepos.io
profileofmigal.dev
profileofmigal.dev
sharepa.hu
www.ecaverse.us

Certificate

The complete raw certificate details for alexandertsema.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINUDCCDDigAwIBAgIRAOk0OFe9oFeMENNaGF7/huMwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjIxMTE5MDA0NjQ5WhcNMjMwMjE3
MDA0NjQ4WjAdMRswGQYDVQQDExJhbGV4YW5kZXJ0c2VtYS5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2zTJ4uANYulcbyxEHaJDwiPfPMQt2foP
oTEJAiRQcYK/oe7CX1Dw8gheyJnJq36JJC9CEFn3BIdhi5gVa9cO3UrGPUA04oVY
ORZa+IL3NZ2F1oo92VjO0Il5w36cCusY+fokeimM8aumgLI2rk4dc3KcUYG1+/Ro
d8+bfvVj95StpQ50QEMyVfe2g5zKEguVmeNCHoaV0RX02wZ3PkA9D8XPCfCO+m3h
o8kdU9oIX0AaQDSXhg76qrvsny2+r538Ncux0PO7/MeHJmsXIgNrwLnH5zCHw/ai
G0Nzli8uDgmGcbKkiNj+/Ezjpk6WGrUF0QiQXj0tBslZYPleVVRVAgMBAAGjggpg
MIIKXDAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUIUXCO6xMLOtrT7XnyeLDatG9s8IwHwYDVR0jBBgw
FoAUJeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUF
BzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC9seDZpRlNmSWgzWTAx
BggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRl
cjCCCAIGA1UdEQSCB/kwggf1ghJhbGV4YW5kZXJ0c2VtYS5jb22CDDhiaXR5b2Rh
LmNvbYIMYmVuZXByb2cuY29tghJkaXZlcnNkaXNjb3VudC5jb22CEnRlc3QuamV0
cGFja2FpLmNvbYIQYm9va2luZy5oeWxsLmNvbYIZZGVlcGxpbmsubW9uamFja2dh
bWVzLmNvbYIlY2FybWVsbW90b3JzLXNjYW5uZXItY2FybWVsLmNveDJtLmNvbYIX
cm91bmRjb3VudC5zcGFyd2VyeC5jb22CE3d3dy5uaW9lcXVpcG1lbnQuaW6CDW1z
Y2xpbmljLmxpdmWCCnZheGltdW0uaW6CFmN1cmF0b3IuZXUud293LWRldi5vcmeC
GGRldi13ZWJzaXRlLmRhbmctYXBwLmNvbYIaY29uZmlndXJhdG9yLmRlZXBza2ls
bC5jb22CFGdhbmRhbGYuZHNscnRlYW0uY29tghNlbGl0ZW1hcGFjYWRlbXkuY29t
ghd3d3cuZWxpdGVtYXBhY2FkZW15LmNvbYIQaG9uZXlzcG90dGVyLmNvbYISdGlh
Z29zYW50b3MuZGV2LmJyghR3d3cuaG9uZXlzcG90dGVyLmNvbYIVc3RhZ2luZy5p
bnRvdWNod2UuY29tghVpc2hhbWVyYWJ1dHRvbmhhaS5jb22CE3JlYWRpbmdsaW5l
c2FwcC5jb22CDHRlY2hjcnVzLmNvbYIObHVrYXN3ZWlqbC5jb22CHmFpLnRoZWN5
YmVyc3BhY2V1bml2ZXJzaXR5LmNvbYIVbGlua3MudGhpbmtubG9jYWwuY29tghN3
d3cudGltZXRvc3BhbmcuY29tggx1bmlxaGlyZS5jb22CFmZsYXBweS50cm9ub2R5
c3NleS5jb22CEHd3dy51bmlxaGlyZS5jb22CFHJlZmVyLnhwcmVzc2N1cmUuY29t
gg16YXJvc2xhYnMuY29tgg95YXZvbGF0b3Vycy5jb22CHGZlcmllbnNwaWVsZS1y
b3RoZW5iZXJnZW4uZGWCEnd3dy5hZ2VvZm1vYmlsZS5kZYIUcHJvZHVjdGlvbi5h
cGxhbm8uZGWCE3d3dy5qYWt1Yi1ib3VjZWsuY3qCEXd3dy5nZWlzZWwtd2ViLmRl
gipkZXV0c2NoZS1kaXJla3QuaWhyLXZlcnNpY2hlcnVuZ3NzY2h1dHouZGWCD3d3
dy5kYXZpZG1hLmRldoIKcndlbWFkLmRldoINd3d3Lmxvb2NoLmRldoIQdm9pZHBy
b2plY3RzLmRldoIMaWJlZGhkaWUuZnVuggxuaWVtZXllci5meWmCDnd3dy5hcnR0
ZWdlLmV1ghRlYXJuLmNvaW5hZ2UuZmluYW5jZYIKYXJ0dGVnZS5ldYIQd3d3Lm5p
ZW1leWVyLmZ5aYIKZWxpc3lzLmFwcIIVd3d3LndhbHRlcmFmdXJtYW4uYXBwggxk
cnVtdXJpLmJpa2WCEG15dGhjYXJ2ZXIuZ2FtZXOCEXBvcy5jaG9pY2VpbmMuYml6
gg9jYWxjdWxhdG9yLmJsdWWCEmRvbmVkaWdpdGFsLmNvbS5hdYIZd3d3Lm5pY2Vv
bmVuYWlsc290dGF3YS5jYYIRdXBsLm1wcmFkby5jb20uYnKCDnd3dy5tZ3VzdGF2
LmNhghRjb3ZpZDE5dHJpYWdlLmFraS5ieoIRd3d3LmFuaW1hbGxhYnMuY2+CGmFs
dGVybmF0aXZhc29mdHdhcmUuY29tLmJyghFzdGFnaW5nLmdyYXBwbC5jb4IXYXBp
LXN0YWdpbmcueHBlcnNpdHkuY2+CCjM4MHRlay5jb22CGXByZXByb2QtYXBwLnNw
ZWFreWxpbmsuY2GCGHd3dy5hZ3JvZmVycmV0ZXJhdnlyLmNvbYIYYnJlYWtpbmdv
b2R3b3JsZHdpZGUuY29tghZiYWNrZW5kLmNyZXRlbmJvcmcuY29tghZ3d3cudHJh
ZGVyYWJiaXQuY29tLmJyghJ3d3cuZ2FtZXJzdm90ZS5jb22CE2F1dG9mYi5kYXRh
a3VuZC5jb22CDWVwaWhlbHBlci5jb22CFXd3dy5tYWduZXNjb25uZWN0LmNvbYIQ
amluaGVjaGluZXNlLmNvbYIUd3d3Lm1hcmt1c21lbmdlbC5jb22CDGdpZmdyb2Vu
LmNvbYIVY29uc29sZS5tZWlsaWlhcHAuY29tgg93d3cubWtwbGFicy5jb22CDG1v
b2dlbmRhLmNvbYIObWV0ZW9yaWN2ci5jb22CFW11c2ljaWFucy1hcm1vdXJ5LmNv
bYIKbmVva2NzLmNvbYIQbmlnaHRsaWZlY2lhLmNvbYILbm9ydHJpeC5jb22CDG55
eHNwYWNlLmNvbYIPbXlmcmVlc3R5bG8uY29tgiJleHBlcmllbmNlLnN0YWdpbmcu
b3B0aW11c3JpZGUuY29tghNyZW1vdGVmb3JzbGlkZXMuY29tghJ3d3cucXVhbnRz
b2xhci5jb22CF3d3dy5yZXdpc2VmaW5hbmNpYWwuY29tgg9zaG9waWZ5LW5mdC5j
b22CFnN0b2xlbi5zY2phbGxpYW5jZS5jb22CFHNwYXJrY29tbW9kaXRpZXMuY29t
ghh3d3cuc3Bhcmtjb21tb2RpdGllcy5jb22CDnd3dy5xb21hbmQuY29tgg9zcGFy
a2ZhYnJpay5jb22CGnd3dy5zcGxhc2hhbmRkYXNoaW5kaWEuY29tMCEGA1UdIAQa
MBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0
cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0L1M5dlRKY1dNVlIwLmNybDCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55
NqWaAAABhI2TBn0AAAQDAEcwRQIhAKeenOvajmNdV8Sh6E15uZvr8Of7dsECklkj
XOyhfjRUAiBof212bBiTDQwZGyGtM7yUJ5uUh9LydkpMqCbbUvHnQwB2AOg+0No+
9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhI2TBmMAAAQDAEcwRQIhAP0i
sVHyebAydVKyGhpq4WRCzLOYQXHp4dLTH/qmWfP/AiAbvxlwuY+RJGEN32NiCOpS
QugPgb5m0jWp4GJmvvJ5KjANBgkqhkiG9w0BAQsFAAOCAQEAd+z89XJGThi8DDJR
QE2dH1wNEEhnZEQMvfFFB79kgT93I30pQCmVLxpw9apam6texI+UPwrpbcimklv7
4whylQchIjxkBhfMq6SL7lTrxMtNtiAGRMtnB6EQn9+oX9ncGsjF49ziOcFRadA/
p0GmJ1sIiOcHyZKyJaBwdDU81rxnnlBkrlOeJnxYxgNn2RfiJlfhpgRDYsOz3jgy
4fFidq8IZAI16NDlc4j7dQf3kZQoueU3PW/y4MDWeidKILcOYk34k64DkbLY+Bvc
vWyFlbYd4Cs9w42DXn6D8kj8ohzh8GSIdaZd0tYvaLO6+V0r0WSKyIL8Hupzh6JW
GJq/Jw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309981265221003661074824892959655167715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-19 00:46:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 00:46:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alexandertsema.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/lx6iFSfIh3Y'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2041 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandertsema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8bityoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneprog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversdiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.jetpackai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.hyll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplink.monjackgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carmelmotors-scanner-carmel.cox2m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundcount.sparwerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nioequipment.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msclinic.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaximum.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curator.eu.wow-dev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-website.dang-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator.deepskill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandalf.dslrteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitemapacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elitemapacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeyspotter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiagosantos.dev.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honeyspotter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.intouchwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishamerabuttonhai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readinglinesapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukasweijl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.thecyberspaceuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.thinknlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timetospang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniqhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flappy.tronodyssey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniqhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refer.xpresscure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaroslabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yavolatours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienspiele-rothenbergen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ageofmobile.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.aplano.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jakub-boucek.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geisel-web.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutsche-direkt.ihr-versicherungsschutz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davidma.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwemad.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.looch.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voidprojects.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibedhdie.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niemeyer.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arttege.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earn.coinage.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arttege.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niemeyer.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elisys.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walterafurman.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drumuri.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythcarver.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos.choiceinc.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculator.blue'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donedigital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niceonenailsottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upl.mprado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgustav.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19triage.aki.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animallabs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativasoftware.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.grappl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.xpersity.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '380tek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-app.speakylink.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agroferreteravyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakingoodworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.cretenborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traderabbit.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamersvote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autofb.datakund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epihelper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnesconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jinhechinese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markusmengel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifgroen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.meiliiapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mkplabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moogenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteoricvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicians-armoury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neokcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightlifecia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nortrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyxspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfreestylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.staging.optimusride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remoteforslides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quantsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rewisefinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify-nft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stolen.scjalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkcommodities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sparkcommodities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qomand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkfabrik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splashanddashindia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/S9vTJcWMVR0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001848d93067d0000040300473045022100a79e9cebda8e635d57c4a1e84d79b99bebf0e7fb76c1029259235ceca17e34540220687f6d766c18930d0c191b21ad33bc94279b9487d2f2764a4ca826db52f1e743007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001848d9306630000040300473045022100fd22b151f279b0327552b21a1a6ae16442ccb3984171e9e1d2d31ffaa659f3ff02201bbf1970b98f9124610ddf636208ea5242e80f81be66d235a9e06266bef2792a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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