citycraft.io

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 08:ef:f8:4c:0f:db:ed:fa:12:75:32:2f:51:7c:8b:b1 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citycraft.io

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:ef:f8:4c:0f:db:ed:fa:12:75:32:2f:51:7c:8b:b1
Serial Number (int): 11879818979299361200492303929791253425
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b1:c4:83:66:b7:17:ee:e1:14:5b:a6:65:bf:1d:91:77:93:ed:5a:f7
Fingerprint (sha256): 8d:b5:80:ab:c6:15:de:26:56:f2:77:45:ff:e9:49:41:fd:7b:70:2f:77:47:f2:99:1a:28:ce:a3:da:cf:17:ed

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/EBhT32jeFd0
CRL Distribution Point: http://crls.pki.goog/gts1d4/bpNfk8kFi2k.crl

Check the revocation status for certificate citycraft.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citycraft.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citycraft.io
www.swiftday.com
www.advisor.im
ad-portal.adastria.co.jp
taxmytendies.com
aneyeonbeautyqa.pgsitecore.com
propertysponge.com
tiie.com.br
eidedo.com
famelinks.app
app.preflight.com
moveto.odinprotocol.io
joinmeinvite.gravityhaus.com
sponsor.kaily.in
www.locksmiths.com.sg
www.brooksidemachining.com
sistema.xglobal.com.br
orchid-app.oz-tms.com
guaraci.g2canal.com.br
leander.app
tsspdcl.bharatsmr.com
www.mjai.app
links.stride.mycareally.health
northwest.band
coreplus.portfoliolink.co.za
signin.hivebuzzer.com
www.dateandtime.in
aumann.io
peachparty.app
payments.ipex.co
p3qas.buddyrecruit.ai
join-dev.break.is
links.moovefit.com
management.casalisa.co
www.davidpellegrini.ca
flowgram.com
maaps.net.in
www.liamskinner.co.uk
www.homiez.shop
307.mx
gustavozunigagoni.com
www.pragmaticreview.com.pl
www.dinersguild.com
lol.guru-pon.com
search.rateraide.com
cdn.bober.lol
www.fichazo.com
www.mydryeye.app
www.snapbuy.online
link.sybel.co
euphoria.kapygenius.com
www.nueveolas.es
legacy-app-staging.geneowebapp.com
unistores.app
www.gustavozunigagoni.com
photography.marcrufeis.de
testingcognitosettings.com
www.grafixshop.com
coria4henry.com
auth.turnonline.biz
iyanaadmin.estore.business
app.maidcafetrainer.com
www.e-graft.com
www.nologs-vpn.com
360agiletalent.3diq.com
apocha.biz
www.joswong.me
www.bootstrapping.tools
login.himadritanayacashpoint.in
secretsanta.catalyst.sh
www.jardinarmonia.cl
crazy-santa.com
muat.turnsignl.com
app.thebapp.app
montesrojo.cl
www.entr86.ru
vamos.coleta.relatoweb.com.br
www.agrogreenenergy.com.co
pattison.docmasweetspot.ca
www.gentlestudent.gent
desoftwarestudio.com
treasure.tsar5.com
www.doubletruffle.co.nz
gogoelectric.joyride.tech
www.greatlakesheatingandcooling.ca
www.pcify.es
guide.abhomebuyersguide.ca
gwg22.amag-leasing.ch
fs8techrego.com
www.telmoapp.com
goyib.com
www.aiprentice.com
motiv-app.com
burcuelci.com
www.artsquarefeet.com
www.erikmonjas.com
www.aylaentrekin.com
jonmarcello.ca
order.goyirunway.com
www.editorial-uribe.com.mx

Other certificates including the domain name citycraft.io

(limited to 100 certificates)
mylovedoll.fr
braaco.com
join.sda.com.au
docs.staging.retorio.com
www.stitch-universe.tk
www.81score.ca
yumaroo.co
hoodinitech.com
deliven.app
ycbh.in
ecomdyno.com
noreply.yukabyguliz.com
hiveproperties.com.au
www.flirtflow.app
citycraft.io
diegoserodio.com
ehephzibah.com
fleet.ccar-dev.bcgplatinion.io
www.mytrendingstories.com
hoodinitech.com
linkdev.theboxmarket.vn
www.81score.ca
photography.marcrufeis.de
uni.u-nyan.co
www.kudotree.cloud

Certificate

The complete raw certificate details for citycraft.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11879818979299361200492303929791253425
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 02:19:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 03:17:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citycraft.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/EBhT32jeFd0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2099 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swiftday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advisor.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad-portal.adastria.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxmytendies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aneyeonbeautyqa.pgsitecore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertysponge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiie.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eidedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'famelinks.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.preflight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moveto.odinprotocol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinmeinvite.gravityhaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.kaily.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.locksmiths.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooksidemachining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistema.xglobal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchid-app.oz-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guaraci.g2canal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leander.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsspdcl.bharatsmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mjai.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.stride.mycareally.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwest.band'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coreplus.portfoliolink.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.hivebuzzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dateandtime.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aumann.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachparty.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.ipex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p3qas.buddyrecruit.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join-dev.break.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.moovefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.casalisa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davidpellegrini.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowgram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maaps.net.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liamskinner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homiez.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '307.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gustavozunigagoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pragmaticreview.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dinersguild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lol.guru-pon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.rateraide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bober.lol'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fichazo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydryeye.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snapbuy.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.sybel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euphoria.kapygenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nueveolas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy-app-staging.geneowebapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unistores.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gustavozunigagoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photography.marcrufeis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testingcognitosettings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grafixshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coria4henry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.turnonline.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iyanaadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.maidcafetrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-graft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nologs-vpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360agiletalent.3diq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apocha.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joswong.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bootstrapping.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.himadritanayacashpoint.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretsanta.catalyst.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jardinarmonia.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazy-santa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muat.turnsignl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thebapp.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montesrojo.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.entr86.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vamos.coleta.relatoweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrogreenenergy.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pattison.docmasweetspot.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gentlestudent.gent'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desoftwarestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasure.tsar5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doubletruffle.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogoelectric.joyride.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatlakesheatingandcooling.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcify.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guide.abhomebuyersguide.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwg22.amag-leasing.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs8techrego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telmoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goyib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiprentice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motiv-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burcuelci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsquarefeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erikmonjas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aylaentrekin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonmarcello.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.goyirunway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.editorial-uribe.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/bpNfk8kFi2k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001895cb5c92e00000403004830460221008a15a9b3447c890e3ba3764a7bd1e701659e683fbb690f458e9403983cc88148022100a9916cb51837910beee67703718c5dda71e30bba94cdbf5ada19f6e1e5abf2d7007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001895cb5c9370000040300473045022100ae16c1baa0e1dc5409480263f0eb29600d732bf581a27f8f8fad1ba5c11fbf58022032ee7e04ee5e4b0316e1de7577f0a51903508242954d5e328643033f472040db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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