legalit.ke

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 5a:77:3f:d1:c5:e7:6b:d7:12:87:2f:ae:7f:11:40:2e was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=legalit.ke

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 5a:77:3f:d1:c5:e7:6b:d7:12:87:2f:ae:7f:11:40:2e
Serial Number (int): 120249697358547386645355719234696593454
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 88:4c:cb:85:25:fd:fa:d4:d0:89:d8:0c:9e:e3:66:83:a7:f3:60:16
Fingerprint (sha256): 8b:4f:bb:6a:94:e7:b0:6f:b7:e2:58:42:dd:b8:b0:8a:15:37:c6:bd:2b:eb:17:75:3c:91:03:a0:16:b5:73:32

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/cgVGQ2ApGpI
CRL Distribution Point: http://crls.pki.goog/gts1d4/EUC0mQ4yMPc.crl

Check the revocation status for certificate legalit.ke

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legalit.ke

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legalit.ke
dyslexia.imh.academy
filadelfiasoulfitness.turnosweb.app
www.ionutmitra.com
www.georgi.app
nft.goldenticket.app
dapyapi.sendsmail.com
www.andrealocorotondo.it
www.auth.wavecxm.com
www.mockingbird.studio
www.aadityaa.co
next.golfhub.co
www.revsport.racing
royspredictions.co.uk
www.artefantastico.com
www.finetalk.in
zocksy.in
www.azutaku.tech
www.chaloamdavad.com
galeriagatotulipan.com
preview.wheelofnames.com
www.vedeckyctyrboj.cz
www.durianrecognition.com
compro.192.works
www.davidgawel.com
www.astralgamestudio.com
prosperity.dev
www.hackerdad.dev
www.francocanalejo.dev
dystree.com
www.brianwool.com
solarwebtracker.culin.org
receipts.boroparkshomrim.com
journal.coddy.app
ykumards.com
coffee-prod.jkoschke.me
www.cypherpunkstudio.com
auth.google.omnihypnosis.net
admin.100words.org.au
vaishnavitechnology.com
hutfinder.kurzer.de
www.por.chat
vallrsol.com
app.legislate.tech
collabor.my.id
greenwooddevelopmentnj.com
www.vpitriangle.com
www.luc-hariman.com
www.notesphere.io
adesso-staging.recruiting-solutions.org
www.wartaq-academy.com
www.ahmetaydogan.dev
www.traversal.co.uk
receteitor.interzonas.info
natal.wink.pt
zappsite.com
iot.fain.es
beta.franchisor.ikriyo.com
www.mgkha.dev
treffpunk.me
xiex.co.uk
aviatorhack.net
admin.roboflow.com
wordsfinder.co.uk
scubot.us
maksy.business.lifebrand.life
autote.app
sycamoreacademy.net
mirramian.ru
getmeetly.app
game11.com.br
hearourvoices.io
www.tecxprt.com
www.staging-v2.komplace.id
www.restaurantbooker.nl
fuji-no.for.dinii.jp
xnr.p.w3.app
www.summerhill.app
www.e-tailer.co.uk
www.naturefitness.co
stardemdorchester.column.us
compusfarm.com
www.s-c-o-r-e.de
vm.go-care.com
growth-tracker.barberos.fr
www.trc-ev.com
www.thetabox.io
www.splay.io
perspage.app
priority-app.oz-tms.com
app.preftank.com
devteam.ninja
www.clavoya.com
blog.k2a.in
mathsnyana.co.za
jawskch.cloudesign.studio
e3next.com
www.delriverocopperpipeclassaction.com
www.darekdoubleu.com
auth.tangi.co

Other certificates including the domain name legalit.ke

(limited to 100 certificates)
teampowerinstitute.com
legalit.ke
client.bearadventure.app
bazar.li

Certificate

The complete raw certificate details for legalit.ke in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120249697358547386645355719234696593454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 05:09:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 06:06:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legalit.ke'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/cgVGQ2ApGpI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2044 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalit.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyslexia.imh.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filadelfiasoulfitness.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ionutmitra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgi.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nft.goldenticket.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapyapi.sendsmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrealocorotondo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auth.wavecxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mockingbird.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aadityaa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.golfhub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revsport.racing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royspredictions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artefantastico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finetalk.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zocksy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azutaku.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaloamdavad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeriagatotulipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.wheelofnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vedeckyctyrboj.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durianrecognition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compro.192.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davidgawel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astralgamestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosperity.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hackerdad.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francocanalejo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dystree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brianwool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarwebtracker.culin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receipts.boroparkshomrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journal.coddy.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ykumards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffee-prod.jkoschke.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypherpunkstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.google.omnihypnosis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.100words.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaishnavitechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hutfinder.kurzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.por.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallrsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.legislate.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collabor.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwooddevelopmentnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpitriangle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luc-hariman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notesphere.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adesso-staging.recruiting-solutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wartaq-academy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahmetaydogan.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traversal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receteitor.interzonas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natal.wink.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zappsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iot.fain.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.franchisor.ikriyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgkha.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treffpunk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviatorhack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roboflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordsfinder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scubot.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maksy.business.lifebrand.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autote.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sycamoreacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirramian.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmeetly.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game11.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearourvoices.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecxprt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging-v2.komplace.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurantbooker.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuji-no.for.dinii.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnr.p.w3.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summerhill.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-tailer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturefitness.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stardemdorchester.column.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compusfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s-c-o-r-e.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vm.go-care.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growth-tracker.barberos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trc-ev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetabox.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splay.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perspage.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priority-app.oz-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.preftank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devteam.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clavoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.k2a.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathsnyana.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jawskch.cloudesign.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e3next.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delriverocopperpipeclassaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darekdoubleu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tangi.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/EUC0mQ4yMPc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ecbc6b0590000040300483046022100de288ca19f07bdb43abd3c06db34499dff9d0dc96513cf03ab820848062646b402210086b08b87fe00ba76f76f12ad8909c6d0e49240a67c702e2360ac5e27697a789700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ecbc6b06c00000403004730450220558cbde7647e51695a1ed205d221c9ea06b13db6c0f560e8aa9550f469360e230221008f6dc3defdb8f5d459ec1d187124c92fed3408e2686384400bdbeeff4304378e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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