vindico.bookourspace.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number de:55:83:db:af:97:7b:51:12:66:0c:41:55:bc:9d:dd was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vindico.bookourspace.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): de:55:83:db:af:97:7b:51:12:66:0c:41:55:bc:9d:dd
Serial Number (int): 295532634698195459989872349230374100445
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): bd:b0:a3:d1:18:df:ac:a2:14:ca:21:b8:43:d0:21:65:e2:65:ed:50
Fingerprint (sha256): 8f:93:f2:08:a0:e4:b5:42:34:ae:58:38:9f:d6:ab:18:9b:de:3e:99:e6:25:a5:c7:ee:0d:fe:bd:33:3e:68:27

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/dXjzgXjNXx4
CRL Distribution Point: http://crls.pki.goog/gts1d4/4tH3zExNRPQ.crl

Check the revocation status for certificate vindico.bookourspace.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vindico.bookourspace.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vindico.bookourspace.com
softwarehut.io
www.smartchainai.org
muji-uat.order.place
daniel-roth-portfolio.co.uk
app.fourpillars.pro
produttoriluganegadimonza.it
otterlyhealthy.uk
globalcompact.un75.online
devpay.atoa.me
www.tapfocus.co.uk
www.elettrasistemi.com
isday.net
www.orbit.adempsey.me
www.livionaef.ch
drive.smarty-app.ro
sonpa.com.ua
www.napadprobechovice.cz
www.cnote.solutions
admin.renaultplr.com.br
www.thecrafted.co.nz
bpmn.bienpratique.fr
www.fietskluis-app.nl
www.lasselauraenterprise.dk
bankers-calc.uniquewebdevelopers.in
library.shoo.ovh
www.vlakemnalhotku.cz
mein-klassenzimmer.ch
www.geumsabba.store
staging-next.sky.garden
center.dnlogis.vn
www.findlr.se
www.maru.xyz
www.allpasso.com.br
page.itask.com.sg
www.klankentrainer.nl
bizcard-gocorp.cube.id
worddetector.games235.com
qakavak.biibiic.com
soul-number.sooyadev.com
drmariogutierrez.com
www.funsport.dk
www.dmdmusic.ru
api.ulgebra.com
dash.hosplan.com
damuat.umusic-online.com
2.uro.gda.pl
www.walkin.africa
app.cribsy.ai
www.logrocket.io
www.virtualweb.app
www.turnify.app
www.steadytrack.app
seigut.app
to-do.biz
thetrybe.app
fons.agency
paymaq.co
footballrepublic.com.au
davincicompetition.ca
link.tngdigital.com.my
www.akshintala.com
cjbmgmt.com
diceeestudio.com
fiestaexplosivatandt.com
flatslease.com
emgcompliance.com
www.col-a-fruits.com
www.jonatech.cloud
furnaceclasses.com
link-sit.tngdigital.com.my
www.donotblink.app
admin.pod.otongtong.net
www.boda-carlos-alexa.com
www.fwgamingnight.com
humancheck.exponentiateam.com
lomokwa.com
link.nikela.app
lazyeee.com
mengky.com
jeyasaltcompany.com
todo.netchainmedia.com
metanoiahr.com
www.h2ldesignstudio.com
cms.zlearn.vn
www.pontotvpublicidade.com.br
midjouneryapi.com
td.hptranscoders.com
demoapp-jxyzpoiu-20894.petavue.com
roasberry.com
portaforza.com
sleepyangler.com
aliumair.dev
teachsafely.com
thewinterfilm.com
www.junh.dev
cauefidelis.com.br
hd.socolive09.com
www.fregocoffee.com
taurasolucoes.com.br

Other certificates including the domain name bookourspace.com

(limited to 100 certificates)
www.qincheng1.com
zivost.in
ltutech.app
app.oddzwaniaj.pl
zivost.in
l.inkblottherapy.com
how-o.com
erikmonjas.com
www.amst.co.in
crowdsale.eatonomy.ca
vtc-alpes-transport-tourisme.com
app.settlework.com
dev.api.fix.claims
vindico.bookourspace.com
www.sopran.com.br
www.bodysapp.com
www.qincheng1.com
carriedbybees.com
tomasbelada.com
isday.net
swuni.bookourspace.com
www.plataformasierrachiva.org.es
vindico.bookourspace.com
app.mixvisor.com
www.coloradosportsnetwork.com
vindico.bookourspace.com
www.whatsyourlevel.app
seva.lotoshnikov.com
anniehouseshop.com
admin.agencykr.com
ouggaagdqq.okooptyka.pl
crm2.binarysystem.eu
www.bvarg.com.ar
freescreenrecorder.xyz
getit.vn
saturdaysundayfilms.com
ltutech.app
qr.pslove.dev
beeldverhalen.staatsbosbeheer.nl
followmanager.shin.app
bestigious.com
tokita.dev
www.guiso.net
skyseye.net

Certificate

The complete raw certificate details for vindico.bookourspace.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295532634698195459989872349230374100445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 04:12:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 05:10:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vindico.bookourspace.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/dXjzgXjNXx4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2048 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vindico.bookourspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softwarehut.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartchainai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muji-uat.order.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daniel-roth-portfolio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fourpillars.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produttoriluganegadimonza.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otterlyhealthy.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcompact.un75.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devpay.atoa.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tapfocus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elettrasistemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbit.adempsey.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livionaef.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.smarty-app.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonpa.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napadprobechovice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnote.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.renaultplr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecrafted.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpmn.bienpratique.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fietskluis-app.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lasselauraenterprise.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankers-calc.uniquewebdevelopers.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.shoo.ovh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vlakemnalhotku.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-klassenzimmer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geumsabba.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-next.sky.garden'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'center.dnlogis.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findlr.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maru.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allpasso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.itask.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klankentrainer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizcard-gocorp.cube.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worddetector.games235.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qakavak.biibiic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soul-number.sooyadev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drmariogutierrez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funsport.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmdmusic.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ulgebra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash.hosplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damuat.umusic-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.uro.gda.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walkin.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cribsy.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logrocket.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virtualweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turnify.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steadytrack.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seigut.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'to-do.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetrybe.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fons.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymaq.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballrepublic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davincicompetition.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.tngdigital.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akshintala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjbmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diceeestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiestaexplosivatandt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatslease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emgcompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.col-a-fruits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonatech.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furnaceclasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-sit.tngdigital.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donotblink.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pod.otongtong.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boda-carlos-alexa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fwgamingnight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humancheck.exponentiateam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lomokwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.nikela.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazyeee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mengky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeyasaltcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todo.netchainmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metanoiahr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.h2ldesignstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.zlearn.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pontotvpublicidade.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midjouneryapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'td.hptranscoders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoapp-jxyzpoiu-20894.petavue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roasberry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaforza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepyangler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliumair.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachsafely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewinterfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.junh.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cauefidelis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hd.socolive09.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fregocoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurasolucoes.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/4tH3zExNRPQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c4cfdfe0a0000040300463044022050a8c1f6af2d4f78f035b5b8dd822a986c6c4ae412a69466d6c6708f735dd4b8022021aa45e8e804ec540cc6a1ecb5db084ac9a089ac430e4f4bd6a4521ed415e21c00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c4cfdfedb00000403004730450220782ba4fc7eaea6d0283a3279200a3f4415d6232be56f2b6b1564a81c417280a702210081a1e8739717c65972d74cc4b2dc8a9786ed502dd344e784745b02e4cdbe1d84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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