www.betonopoliravimas.lt

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 24:cb:a7:52:75:0a:bd:f9:10:a2:27:29:4f:33:46:e0 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.betonopoliravimas.lt

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:cb:a7:52:75:0a:bd:f9:10:a2:27:29:4f:33:46:e0
Serial Number (int): 48909637805875409960761846344872838880
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 40:fb:03:f8:c5:6a:47:ec:f6:77:f9:9b:0e:1f:82:8b:b4:b5:af:b5
Fingerprint (sha256): 8d:7a:60:de:da:31:5a:c7:d2:fb:19:c6:7f:01:e4:f4:2b:35:4a:c3:26:07:2f:d3:36:9d:e7:06:21:65:d9:8d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/y-B2SC-BmRk
CRL Distribution Point: http://crls.pki.goog/gts1d4/Oum6XtQWsIU.crl

Check the revocation status for certificate www.betonopoliravimas.lt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.betonopoliravimas.lt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.betonopoliravimas.lt
heart.alilishan.com
www.asset-health.com
instant-heart-rate.azumio.com
pmchosenfamily.com
deladesign.com.co
prabhakarselvan.com
www.peths.io
www.saifaldin.ca
www.spur.me
dev.dashboard.karma.life
staging.pos-admin.wahyoo.io
www.ymx.me
dev.storybook.vette.io
hotelreviews-de.com
simpleclub.app
malibu-world.spree.se
renansujii.com
potlideals.estore.business
www.tradesbarn.com
prontomock.com
shmibblez.com
www.everness.dev
pabrikvco.com
sirenmarine-stg-ship.leverege.com
bgcalumnae.com
slavko.dev
crossroadscenteroffrederick.com
taoscanyoncannabis.co
auth.mememaga.com
janetbrunowedding.com
offsetusinagem.com
kmeghana.co
wizards.pppuzzle.com
themachinelearninglab.com
prev.aventura.katapultpro.com
krng.cc
www.clearplan.io
tharanmai.co
hoodball.net
saga.linx.live
staging.date-fns.org
wfm.sandr.io
www.digitaldashboard.cc
pokemass.com
meghanak.co
webinar.simpleclub.com
www.reddotdrone.com
prettycharts.app
vrznaccounts.ideacloud.com
stg-partner.ailumia.com
es.revitalair.com
bjornstadlunsj.no
bolk.art
bonitaperth.com
pineapple.komo.dev
santaan.com
www.animu.tv
girthle.com
cybersecurite.work-and-play.com
porite.us
localqueue.in
shipping.hackathons.org.uk
isidrcnt.removis.jp
demo.nilear.com
berkeley-infocamp.org
devlinks.care.ly
thewebfactory.io
sime.miapppro.com
bmcar.miapppro.com
crossedangles.com
www.orionandpartners.com
app.anton.finance
mobile-android.twingtwing.com
app.tili.ai
geekbracket.dts.utah.gov
app.onixtrobotica.com
www.whatsuptexas.com
blowgummies.com.br
suite.baugeruest.de
www.paulblunt.de
test.kifftech.eu
l.clio.fr
dev.nasheedstation.com
app.mecomdominicana.com
victorgerbrands.nl
www.valdebelar.com
www.kreditkarten360.com
lp.vitanote.jp
www.casadelvoltosanto.it
firebase.lowestfare.com.hk
www.asukiaoi.com
promisecenter.co.kr
app.nteagroup.com
app.farmaciaoffisana.it
www.drove.biz
www.nameitonsteel.co.il
rrinc.quicke.com.pa
gov.mosaicapp.com
harleybrito.dev

Other certificates including the domain name betonopoliravimas.lt

(limited to 100 certificates)
webapp.flaner.com
regiomarktkompass.de
dev-wallboard-riga.ngpenterprise.co.uk
www.betonopoliravimas.lt
welcome.baleum.jp
webapp.flaner.com
clients.moneymatters247.co.uk
crono.app
www.betonopoliravimas.lt
www.enrique-mendez.com
www.szitakotoresidence.hu
admin.ibscoach.org
www.betonopoliravimas.lt
zencool.app
kameleont.me
betonopoliravimas.lt
myhue.brgr.io
alexbaileyresume.com
musapp.co
myhue.brgr.io
queso.zone
www.betonopoliravimas.lt
mochica.jp
www.admin.travel2bali.dk
viiital.com
floatcreative.com
sistema.inlifestyle.com.br
null.urbi.co
www.havendetect.com
player.vir.vn
singulartraderacademy.com
qti.staging.chromex.io
www.pangpangguy.com
hvsti.com.br
none.is
beheer.opbezoek.development.m4m.io
builder.tomesthegame.com
asidoar.pt
portalcapexbtl.atake.com.br
www.inoa.com.br
order.labrador.ai
www.062785.com
www.prescottprue.com
www.3cat.app
www.cutthroughrecordings.com
garenv.com

Certificate

The complete raw certificate details for www.betonopoliravimas.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48909637805875409960761846344872838880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 22:51:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 23:49:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.betonopoliravimas.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/y-B2SC-BmRk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betonopoliravimas.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heart.alilishan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asset-health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instant-heart-rate.azumio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmchosenfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deladesign.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prabhakarselvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peths.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saifaldin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spur.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dashboard.karma.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pos-admin.wahyoo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymx.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.storybook.vette.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelreviews-de.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpleclub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malibu-world.spree.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renansujii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potlideals.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradesbarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prontomock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shmibblez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everness.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pabrikvco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirenmarine-stg-ship.leverege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgcalumnae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slavko.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossroadscenteroffrederick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taoscanyoncannabis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mememaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janetbrunowedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offsetusinagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmeghana.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizards.pppuzzle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themachinelearninglab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prev.aventura.katapultpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krng.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearplan.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tharanmai.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoodball.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saga.linx.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.date-fns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfm.sandr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaldashboard.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meghanak.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinar.simpleclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddotdrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prettycharts.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrznaccounts.ideacloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-partner.ailumia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.revitalair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjornstadlunsj.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolk.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonitaperth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pineapple.komo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.animu.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girthle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersecurite.work-and-play.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porite.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localqueue.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipping.hackathons.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isidrcnt.removis.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.nilear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkeley-infocamp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devlinks.care.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewebfactory.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sime.miapppro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmcar.miapppro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossedangles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orionandpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.anton.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-android.twingtwing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tili.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geekbracket.dts.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.onixtrobotica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatsuptexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blowgummies.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suite.baugeruest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulblunt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.kifftech.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.clio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nasheedstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mecomdominicana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorgerbrands.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valdebelar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kreditkarten360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.vitanote.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casadelvoltosanto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.lowestfare.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asukiaoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promisecenter.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nteagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.farmaciaoffisana.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drove.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nameitonsteel.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrinc.quicke.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gov.mosaicapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harleybrito.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Oum6XtQWsIU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018ac99a8d330000040300473045022100f1444d42e4146dae358022985cf9b29e0206a09c17e73c1959922f9e5c1de1fa02202a3870420504d71c2d46366d07a2286ad498116d2bb0426d035903fb9dac30d5007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ac99a8d1b0000040300483046022100cb6a255c2948c4ccc190d5176061a4890bd23e5de2bf699bc068139bce1940c8022100b70ac1c64f98053348de802912484bf465f3d2678cdcc01c0fde4756cacf6cb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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