lazyastronaut.space

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 66:b3:7e:18:08:34:cb:83:12:d1:16:1b:dc:d5:4a:a1 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lazyastronaut.space

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:b3:7e:18:08:34:cb:83:12:d1:16:1b:dc:d5:4a:a1
Serial Number (int): 136513234195364818913978905322795125409
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b3:b2:de:76:17:ed:e4:22:d3:3c:ad:91:3c:a7:31:ca:b3:23:b1:ff
Fingerprint (sha256): 8b:4c:78:20:a8:b9:ea:e3:ba:21:2c:61:a9:35:d4:aa:8c:9e:47:f7:75:10:18:8c:6f:e1:72:f0:44:f0:98:f2

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/l5t8QNJCOes
CRL Distribution Point: http://crls.pki.goog/gts1d4/LjtNmxrQfWE.crl

Check the revocation status for certificate lazyastronaut.space

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lazyastronaut.space

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lazyastronaut.space
admin.rapo.store
www.1729.org.uk
gateway.network.office.pirika.org
www.smsoftwaregroup.com
lafc.scouthub.app
www.rocketscience.asia
app.mufo.space
www.sbz360.pt
www.parth-gupta.in
joeladamsphotography.com
www.cashsmall.cf
haochenwang.com
www.suffahtech.com
www.goldvip.tech
www.bumps.world
www.programera.in
artichokemovie.com
link.beta.race2020.teamraise.app
equity.yardfundrasing.searchingyard.com
hillarybutzin.com
lemonbox.com.au
operationalv4.wiyak.delivery
www.doubleaaclassactionsettlement.com
formularios.comfenalcovalle.com.co
shop.foodhunter.world
www.gospendlocal.com
www.capitalbeautyportstewart.co.uk
concejomunicipaljunin.com
www.jumpnexus.org
diddo.school
f.limscare.com
poachedmovie.com
connect.tnlbc.com
ftn.pilipovicn.com
auth.9splay.com
www.dailydeeds.co
www.shibatable.com
espressoforwiiu.net
www.alayemarchitects.com
www.csusportscamps.com
torit.in
payonedigital.co.in
www.thierryjean.com
jemlo.se
e-sipendi.com
driverapp.cleantie.com
twoporttechnology.com
www.wayakuya.com
revenue.cohosting.com
kovalevska-target.com.ua
www.passionateimpact.org
app.onestopbizfiling.com
admin.papperoger.com
www.redratel.com
www.aahvaanadevelopers.com
dora.serenefire.com
www.world-clock.com
stcheck.mtdev.net
www.xotahal.cz
auth.merlininvestor.com
www.hotpinkpottery.com
www.nam-nguyen.com
pagamentos.lufemaa.com
genki.honu-tortuga.net
auth.loooms.net
menu.fitpetneeds.com
everlight-bot.cf
www.haysconstructiondfw.com
www.oyald.org
www.asdfghij.com
api-dev.smartcitymarketplace.net
api-training.tradedash.com
console.28east.co.za
cloudpursuit.app
app.restosales.cl
learn.trainiapp.io
raccoon.vip
dev-auth-thesceneny.emvigotech.co.uk
saveliev.eu
apps.mgviz.org
admin.chill.lu
dev-static.referendum2021.campaigns.fire-emblem-heroes.com
pereira.app
dynamic.airchina.com
geobox.app
a.yy.my
www.citrol.net
www.street-child.org
preview.greco.fit
bestellportal.muessig.app
thrillspace.co
leer-rust.nl
signandrun.com
crittercoast.com
scurt.us
leerrust.nl
dev.ryerson.ch
www.sashazimulin.com
rustleren.nl

Other certificates including the domain name lazyastronaut.space

(limited to 100 certificates)
residuossolidos.congresoqroo.gob.mx
dash.novorpm.com
treinamentojob.flitapp.com.br
atolyepub.com
vendly.co
tricount.app
www.assignmentplanner.app
www.nothingnewapp.com
literaseed.org
fiplo.app
www.oesteremis.com
www.lazyastronaut.space
dev-in.beerealit.com
www.tenderdtrack.ae
app.desideroo.it
livego-stg.vonder.io
soundalerts.app
duttweiler.app
christellendaya.com
f.radioatut.tk
www.fittrack.eu
mimosfamilia.com.br
passchip.com
fb.atroom.co
balazsorban.com
gocura.co
www.logitech-songhee.cf
www.duecentodigregorio.it
lift-controller.stephenfrancis.online
literaseed.org
lazyastronaut.space
www.abodesaafan.com
sahadewa.com
www.macaca.games
forms.omsister.com
isaacfightteam.com
admin-dev.formity.ai
www.lazyastronaut.space
eywhere.com
www.macaca.games
dev.bhave.life
www.statuscheck.co
widget.beta.hazalp.com
www.xv8vx.tk
staging.tipple.io
eywhere.com
letseventsource.org
kuogary.com
omniverstech.com
lazyastronaut.space
console.abakosher.com.br
www.pgkuroneru.net
narukaconstructions.com
clubcannabico.jenios.mx

Certificate

The complete raw certificate details for lazyastronaut.space in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136513234195364818913978905322795125409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 07:21:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 08:19:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lazyastronaut.space'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/l5t8QNJCOes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazyastronaut.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rapo.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1729.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.network.office.pirika.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smsoftwaregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafc.scouthub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocketscience.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mufo.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbz360.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parth-gupta.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joeladamsphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashsmall.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haochenwang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suffahtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldvip.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bumps.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.programera.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artichokemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.beta.race2020.teamraise.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equity.yardfundrasing.searchingyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillarybutzin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonbox.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operationalv4.wiyak.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doubleaaclassactionsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formularios.comfenalcovalle.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.foodhunter.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gospendlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbeautyportstewart.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concejomunicipaljunin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumpnexus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diddo.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.limscare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poachedmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.tnlbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftn.pilipovicn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.9splay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailydeeds.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shibatable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espressoforwiiu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alayemarchitects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csusportscamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torit.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payonedigital.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thierryjean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jemlo.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-sipendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driverapp.cleantie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twoporttechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wayakuya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revenue.cohosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kovalevska-target.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passionateimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.onestopbizfiling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.papperoger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redratel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aahvaanadevelopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dora.serenefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.world-clock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcheck.mtdev.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xotahal.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.merlininvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotpinkpottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nam-nguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagamentos.lufemaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genki.honu-tortuga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.loooms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menu.fitpetneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everlight-bot.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haysconstructiondfw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oyald.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asdfghij.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.smartcitymarketplace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-training.tradedash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.28east.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudpursuit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.restosales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.trainiapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raccoon.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-auth-thesceneny.emvigotech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saveliev.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mgviz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chill.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-static.referendum2021.campaigns.fire-emblem-heroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pereira.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic.airchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geobox.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.yy.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citrol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.street-child.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.greco.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestellportal.muessig.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrillspace.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leer-rust.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signandrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crittercoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scurt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leerrust.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ryerson.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sashazimulin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rustleren.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/LjtNmxrQfWE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018aea5479c60000040300473045022100b7833a8359bb385fe06784dba5db9211d241a9fdfd76d71fb6d78fcb96b1085902205a7d04277ab2a8381eb85dd642e28ae5648b6d34ae16cf4a4e7693e7d63be33f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aea5479e90000040300473045022070533fa8d41f70efadebbe23c980f8fa9adea2d10b689dcc688cfe4d5433dc3c022100b0d03f3f2d63d8c90c8a9d66a4f081c4cb5a61f167ebceb180adbe360bd8bc20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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