www.sassa-status.co.za

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number d1:3d:45:3f:9d:6c:a6:3f:10:55:09:5c:b0:7f:d3:24 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sassa-status.co.za

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d1:3d:45:3f:9d:6c:a6:3f:10:55:09:5c:b0:7f:d3:24
Serial Number (int): 278126785753775427892776002545078227748
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 70:ce:34:7e:59:4e:12:db:75:27:47:67:66:c5:1e:b2:35:34:e7:96
Fingerprint (sha256): 8f:f9:31:5b:98:2f:f5:d5:9c:9c:7b:60:53:9c:b7:3e:b1:70:f0:b7:bb:ba:c2:1f:d5:6e:ac:68:cc:e4:78:39

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/SSw1GyK-Fow
CRL Distribution Point: http://crls.pki.goog/gts1d4/kLp3InpbkNE.crl

Check the revocation status for certificate www.sassa-status.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sassa-status.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sassa-status.co.za
manusapp.com
sabashop.org
tanishqbafna.com
tuples.tech
community.k-9apps.com
v-space.cloud
trumptaxcalculator.com
astroth.com
docs.weatherly.pro
gdkr.foodle.su
orangemakeup.com
rubyaio.com
bvb-preview.idea-ly.de
narinsky.family
www.olivermharrison.com
box.basecamper.com
www.autolocalize.com
abolishcars.org
www.oogiri.org
keshet-app.oz-tms.com
daveandpolly.org
www.moorsmed.com
lpcbd.jia-technologies.com
staging.pebblar.com
www.moviely.io
www.wrestle.com.de
arke.delphus.io
firebase.pix.codes
streamstats.staging.icu
www.bombasalmo.mx
familytrunk.me
vinodegliamici.com
developerweekend.org
pwnwizard.com
bookmypharmacy.com
app.appsonair.com
preview.customchurchapps.net
glowfishventures.com
www.sistemapolis.com
diamondridgepros.com
binance.pay.stage.imem.app
wordlix.app
hrm-unit-config.3dcloud.io
surveyv2.binds.co
heritagecowsadmin.estore.business
zenonmilou.com
flutaro.de
upci.lapieza.io
bayblade.app
insn.menu
avioletaday.com
c-lashes.nl
geminidsystems.com
referral.staff-clothes.com
www.frows.io
cultofmartians.com
get.myclique.app
designers.wiki
beer.indulj.me
taotheartist.com
vendor.inventory.exolvis.com
dolla.tengkudavyan.com
pasjetcentre.com
endofrun.app
smartcolor-kirei.com
fruitacrush.games235.com
coreymellon.dev
lakeshore-roomplanner-test.3dcloud.io
vilkas.turnosweb.app
www.gabrielzapata.dev
dominicevans.dev
www.pasjetcentre.com
kadekbudaya.com
tycooperaow.com
freeaty.com
creditwavepvtltd.com
rateballplus.com
test-cancellation-origin.gohenry.com
coinparliament.com
pro.mymilyapp.com
kautilyam.com
in.hacken.ai
www.artmap.ca
alejs.dev
pierresucker.com
darwinfolio.in
api.diengsmart.com
www.brewzinga.com
bluebookmachine.com
xerovit.io
bll-apply.money-phone.com
skoosh.app
covid19admin.eql.ai
warrioreagle.turnosweb.app
www.termtrainer.app
navtechsolutions.com.br
www.flutterweb.app
ardabozlak.dev
www.jasonhay.dev

Other certificates including the domain name sassa-status.co.za

(limited to 100 certificates)
zinkyawkyaw.dev
admin.nanulishus.com
referral.staff-clothes.com
www.inkedbyjules.com
arke.delphus.io
insight.rdl.bz
www.wolfardsolutions.be
zkinstitution.com
stb-meyer-burgwedel.de
zkinstitution.com
www.wolfardsolutions.be
admin.nanulishus.com
www.sassa-status.co.za
test-order-generator.porterbuddy-test.com
athomearticulation.com
hangerang.us
bellwether.org.in
www.tippermena.com
foreverspecial.estore.business
play.gera.fan

Certificate

The complete raw certificate details for www.sassa-status.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278126785753775427892776002545078227748
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 19:01:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 19:59:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sassa-status.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/SSw1GyK-Fow'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1964 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sassa-status.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manusapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabashop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanishqbafna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuples.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.k-9apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v-space.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trumptaxcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astroth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.weatherly.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdkr.foodle.su'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangemakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubyaio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvb-preview.idea-ly.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narinsky.family'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olivermharrison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'box.basecamper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolocalize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abolishcars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oogiri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keshet-app.oz-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daveandpolly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moorsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpcbd.jia-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pebblar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moviely.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrestle.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arke.delphus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.pix.codes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamstats.staging.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bombasalmo.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familytrunk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinodegliamici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developerweekend.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwnwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookmypharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.appsonair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.customchurchapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glowfishventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sistemapolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondridgepros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binance.pay.stage.imem.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordlix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrm-unit-config.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveyv2.binds.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagecowsadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenonmilou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutaro.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upci.lapieza.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayblade.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insn.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avioletaday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-lashes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geminidsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referral.staff-clothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frows.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultofmartians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.myclique.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designers.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beer.indulj.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taotheartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor.inventory.exolvis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolla.tengkudavyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasjetcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endofrun.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcolor-kirei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruitacrush.games235.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coreymellon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeshore-roomplanner-test.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vilkas.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabrielzapata.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominicevans.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pasjetcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadekbudaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tycooperaow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditwavepvtltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rateballplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cancellation-origin.gohenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinparliament.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.mymilyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kautilyam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.hacken.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artmap.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alejs.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pierresucker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darwinfolio.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.diengsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewzinga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebookmachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xerovit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bll-apply.money-phone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skoosh.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19admin.eql.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrioreagle.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.termtrainer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navtechsolutions.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flutterweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardabozlak.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasonhay.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/kLp3InpbkNE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018acdeea9b40000040300483046022100a918247f33b63444db1b0e5470608bca53d8d18be845df3aa5c5f8abade4974a0221008a0f06bf7848d135964eed99f992a0b29dc663dac519616b348cd8acebbfa14a0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018acdeea9b2000004030046304402205fc74f03201abb96b1550e3e055f8459844104a461aea82d944412e2780dd750022064903ffb1a1e5c9c55c2d77bd6392929b06477ee2e5d191a6db8aa91b88992dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0038edea6d5b722879a207d034e821f13935fc7a0f72219b95e37859475bd635d92e25b44f3041b8688cf3ec9b94d95f1c60601d165fb6f346ab0457454185b6fb5b08805afb2fc7cf95504beceb77ad4960686832b6f383962b0116e55b0a2bec5bda50f19f4a34a5b69da42b40db02ba275ceab0f855c170863e4708109cba45f106574bbf03c7fad1e61ca4a910c43a508119b53cf39b2218403d787b803c5a1f8ba2d974f411e985be80eac6c263195e18a0777693de4cec538e4fa90bf950e24f2f5111469f0d61c6201b342edcd40e249ff041adf102dd5022d7cebf5459cf62671e626932fec18672a674855f4f5771ad2f6697e3b1225e6268d1fd5cd7