www.curi.live

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 0c:07:97:b0:a0:7a:24:40:10:66:db:b7:10:18:95:55 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.curi.live

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:07:97:b0:a0:7a:24:40:10:66:db:b7:10:18:95:55
Serial Number (int): 15990158665100749889377904007793120597
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 09:3a:d2:f8:3b:ef:3c:75:02:56:64:b1:1c:a0:47:f0:29:d7:65:17
Fingerprint (sha256): 8b:ac:fd:06:cb:e4:b0:3e:af:0a:2a:e7:b1:c9:91:57:a2:e0:f1:5e:47:18:c6:33:66:e8:81:e7:4a:bb:ed:45

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/BDj_osjGEIE
CRL Distribution Point: http://crls.pki.goog/gts1d4/KivJoGl0ycA.crl

Check the revocation status for certificate www.curi.live

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.curi.live

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.curi.live
rockys.co.nz
turen.klenis.org
www.youex.design
uctepe.zeplinx.com
amar-incon.mn
delavertiente.com
dafe.ie
tests.mobigic.com
www.zeeshanaamir.com
www.zultel.co.za
auth.account.inu-dev.tech
pedidos.kromalab.mx
www.pascaldauer.de
app.honda.scratchdev.ca
andreatondelli.it
www.emiliaimoveis.com.br
app-dev.uugot.it
www.dreisbach.us
www.anielaolsztynek.pl
www.epilog.hr
www.as9team.com
www.aprohirdetes.com
atoilaparole.fr
m.2nd.gdn
ktb.biblemission.kz
beta.karnott.fr
www.geniusrepair.it
noba.fodmapnorge.no
stefaniaepaolo.it
adminclinic.scansandmore.in
partner.speeltuin.watdrinkje.be
mytamatnotif-proto.mws.fr
info.startupburada.com
ashtree.co.za
www.gamusha.jp
www.langmajer.cz
apps.saiantar.co.id
karaoke-odai.oka-ryunoske.work
igra.gnada.si
admin.ravintolahameentie.fi
www.centroesofagohsr.it
dra.dulceeugenia.com.br
www.aikidowatanabedojo.it
calc.alexerem.ru
auth.hcbds.kr
auth.ez-translate.co.il
martin.test.legala.no
app.citadele.lv
www.goldhill.nl
centralstar.co.kr
auth.formflex.app
www.forestobservatory.com
admin.v-waiter.com
www.dev.woonig.app
fau.copal.ai
gianluca-staging.vhci-software.com
claimtag.io
vucit.app
boglebot.com
danielyount.com
fridaymorningalbum.club
stg.corp.aywd.co
www.jasminescence.com
dev-jens.beta.numerous.cloud
decoreba.app
bryanmudge.com
sunflowerapp.co
bomberos.opos.app
loads.exofreight.com
charleshodgson.com.au
www.dirtybroccoli.com
setup.exofreight.com
denticenter.com.mx
legal.coophi.com
www.snickerbockens.com
filler.ai
www.react-todos.gautamsharma.dev
rauharakkausjafyrkka.fi
dunderjeep.com
inusualsignage.com
app.dippii.com
www.wordwhirl.com
agent.dev.videolink.app
carriers.exofreight.com
doc.usemason.com
www.chibiworld.com
edgewoodmgmt.portal.plenadata.com
shuseisha.info
drbrunomachado.drtis.com.br
testclient.studentkota.ca
t.wakilni.com
chefjhou.com.br
testadmin.studentkota.ca
smartkidsmarket.com
isonetcryoet.com
dev.app.sappay.net
mech.parts
aiminigrou.com
admin.encolnschool.com

Other certificates including the domain name curi.live

(limited to 100 certificates)
sms.synapcom.com
app-dev.curipod.com
app-dev.curipod.com
renouf.dev
inwoodsoftballleague.com
www.curi.live
curi.live
timesensitive.info
sms.synapcom.com
ph.peblla.app
ten-q.kai-lab.com
curi.live
curi.live
genic.guru-pon.com
anvilsoftworks.com

Certificate

The complete raw certificate details for www.curi.live in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15990158665100749889377904007793120597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 13:11:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 14:08:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.curi.live'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/BDj_osjGEIE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curi.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockys.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turen.klenis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youex.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uctepe.zeplinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amar-incon.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delavertiente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dafe.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tests.mobigic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeeshanaamir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zultel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.account.inu-dev.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedidos.kromalab.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pascaldauer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.honda.scratchdev.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andreatondelli.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emiliaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev.uugot.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreisbach.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anielaolsztynek.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epilog.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.as9team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprohirdetes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atoilaparole.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.2nd.gdn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktb.biblemission.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.karnott.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geniusrepair.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noba.fodmapnorge.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefaniaepaolo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminclinic.scansandmore.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.speeltuin.watdrinkje.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytamatnotif-proto.mws.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.startupburada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashtree.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamusha.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.langmajer.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.saiantar.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karaoke-odai.oka-ryunoske.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igra.gnada.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ravintolahameentie.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centroesofagohsr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dra.dulceeugenia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aikidowatanabedojo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calc.alexerem.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.hcbds.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.ez-translate.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martin.test.legala.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.citadele.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldhill.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralstar.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.formflex.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forestobservatory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.v-waiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.woonig.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fau.copal.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gianluca-staging.vhci-software.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimtag.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vucit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boglebot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielyount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridaymorningalbum.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.corp.aywd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasminescence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-jens.beta.numerous.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decoreba.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryanmudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunflowerapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bomberos.opos.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loads.exofreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charleshodgson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dirtybroccoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setup.exofreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denticenter.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.coophi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickerbockens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filler.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.react-todos.gautamsharma.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauharakkausjafyrkka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunderjeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inusualsignage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dippii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordwhirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.dev.videolink.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carriers.exofreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.usemason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chibiworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgewoodmgmt.portal.plenadata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuseisha.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drbrunomachado.drtis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testclient.studentkota.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wakilni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefjhou.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testadmin.studentkota.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartkidsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isonetcryoet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.app.sappay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mech.parts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiminigrou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.encolnschool.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/KivJoGl0ycA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018accae3a920000040300483046022100a61900dfaaf9b88026c2bb48dd05ffdbdef15aadffeafc022041c9008cb1542202210093860477e4d6206f902ad4e2e0a348b2172b2f525a307df1306e3bfab7f0bb930075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018accae3aca0000040300463044022053f44cd61ab751145ee5df9b12c6b17542c09f20ca65b976d825db9e3f03d473022069ee6b9722898cb53439e801837de14e02f2f679aa1ce2bafd805ccfbf60ce32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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