www.aviita.ch

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number fa:c1:b7:1f:c2:c7:6f:a9:12:ae:ba:ff:e3:21:22:66 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.aviita.ch

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fa:c1:b7:1f:c2:c7:6f:a9:12:ae:ba:ff:e3:21:22:66
Serial Number (int): 333312826437237891601110019081200804454
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): bf:08:5a:b1:ed:a4:40:5c:52:c0:97:1b:9c:00:05:fe:ea:72:ba:bf
Fingerprint (sha256): 90:5f:44:38:16:ce:9c:e5:3b:a2:c3:8b:04:0d:e5:62:ff:ab:68:42:ff:9b:33:a5:d2:9f:c6:61:b1:e9:e4:11

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Rgt5FMeuqjw
CRL Distribution Point: http://crls.pki.goog/gts1d4/oe-d6m8QGjw.crl

Check the revocation status for certificate www.aviita.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aviita.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aviita.ch
prod.anuartists.com
devweb.lobibox.com
www.samrothfarb.com
data.artresan.pl
www.xenfax.com
dev-app.kraaft.co
puyufarma.com
phantombarons.io
portal.c4-s.net
www.wesbeard.com
test.workade.it
www.devotopark.com.ar
app.stratzy.in
kamyar.io
ailux-group.com.mx
lightbulb.wobblewares.com
lexoid.ru
carpenterbuilt.net
techfreaks.com.br
faq.logichat.io
www.lmrealtyinvesting.com
get.coinjar-sandbox.com
flickin.app
admin.royal.com.pe
www.hearttoheartproject.org
www.beyondcentral.com
mauth.bitbot.plus
balancer.tools
promodaihatsulamongan.online
www.onslr.com
www.workiji.com
staging.api.delivery-class.28east.co.za
dev.kanban.page
uygulama.org
iamtom.online
www.joemcgrath.dev
www.koroutine.co.uk
hivemind.watch
cocinabarcelona.socoda.com.co
rubiconcouriers.com
dev.protonenergy.md
admin-test.pneusys.cz
app.winecode.rdlabo.jp
firebase.bmfn.us
qa.kamal.entelocean.io
www.bytesfire.in
tutorial.entityc.org
www.offchan.org
www.qudak.se
abcomp.no
au.outgrow.website
anthol.app
www.techferment.com
work.parkalot.io
danicris.com
crm.komerzio.net
bootspruefung-schweiz.ch
fondationulb.be
dev.akylix.com
dorsly.com
www.aidensystems.com
switch.bet49.club
dexnia.com
ducklighting.com
digimoxie.com
www.spoxies.app
playlistsync.app
ecuatsp.com
www.tristan-bihler.org
asambleavirtual.com.co
gakal.au
futurizac.com
temich.in.ua
gps.7gates7.com
griffin.ginalne.com
666stories.com
suitecast.cloud
jayscancerjourney.com
meet-nightly.liveswitch.io
www.app.skinidesigner.ch
motomachishosai.com
light-area.com
admin.hoosocials.com
www.antonlicht.com
simon.mightbesimon.com
onsiteglassmo.com
console.emmas.wlloyalty.net
invid.com
pic-tonybeton.mentor-stage.neccton.com
www.leveluptriathloncoaching.com
bcb.paco.app
perdmap.com
translator.enqudo.com
ella-guesthouse-srilanka.com
niekbijman.com
developer.bridge.arrowhealth.io
www.auidigital.com
staging-portal.k-9apps.com
www.chriswijnia.com

Other certificates including the domain name aviita.ch

(limited to 100 certificates)
admin.wt.wowdesk.jp
aviita.ch
othersupply.com
susanvespoli.com
2017.tag-der-sommerfrische.de
makotorestaurant.com
www.salinas.no
aviita.ch
uzunyabaharsenligi.com
baeareatechnologies.com
connect.semil.com.br
mateoestrada.com
baeareatechnologies.com
www.better-day.co
system.datakora.com
login.mybrand.site
www.borrowexchange.app
11520682.peerly.app
www.dungeon-bot.app
www.caselec.jp
othersupply.com
www.abbon.co.th
www.moment-bern.ch
fitgram.app
datavideo.felixxgroep.nl
creatortrax.com
www.incident-aware.com
vsatownhall.liveevent.co.za
themaxmarchuk.com
gboxurca.turnosweb.app
log.shinofara.xyz
www.aviita.ch
augxel.com
zonguldakkarapinar.bel.tr
boomba.digital
www.mecnic.com
www.webgoodbe.com
buyappinstall.com
www.mudanzadirecta.com
fatty.beeman.app
ydl.inxout.top
www.aprilrwatson.com
ministore.rovool.com
wdmaster.net
pensioenbijphix.nl
www.aviita.ch
lindblom.io
aviita.ch
admin.renzitosbabys.com
panificadoramartins.lupi.delivery
www.rebatum.com
www.yafcofoodandbeverages.com
tmthrgd.dev
staging-portal.k-9apps.com
vsatownhall.liveevent.co.za
www.justworks.be

Certificate

The complete raw certificate details for www.aviita.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333312826437237891601110019081200804454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 00:03:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 00:59:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aviita.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Rgt5FMeuqjw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1982 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviita.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.anuartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devweb.lobibox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samrothfarb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.artresan.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xenfax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-app.kraaft.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puyufarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phantombarons.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.c4-s.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wesbeard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.workade.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devotopark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stratzy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamyar.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ailux-group.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightbulb.wobblewares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexoid.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpenterbuilt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techfreaks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.logichat.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmrealtyinvesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.coinjar-sandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flickin.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.royal.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hearttoheartproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beyondcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauth.bitbot.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balancer.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promodaihatsulamongan.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onslr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.delivery-class.28east.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kanban.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uygulama.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamtom.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joemcgrath.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koroutine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hivemind.watch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocinabarcelona.socoda.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubiconcouriers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.protonenergy.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-test.pneusys.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.winecode.rdlabo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.bmfn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.kamal.entelocean.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bytesfire.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorial.entityc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offchan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qudak.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcomp.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.outgrow.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthol.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techferment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'work.parkalot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danicris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.komerzio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootspruefung-schweiz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondationulb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.akylix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorsly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aidensystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.bet49.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dexnia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducklighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimoxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spoxies.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playlistsync.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecuatsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tristan-bihler.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asambleavirtual.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gakal.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurizac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temich.in.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gps.7gates7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'griffin.ginalne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '666stories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitecast.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jayscancerjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet-nightly.liveswitch.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.skinidesigner.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motomachishosai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'light-area.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hoosocials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antonlicht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simon.mightbesimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onsiteglassmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.emmas.wlloyalty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pic-tonybeton.mentor-stage.neccton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leveluptriathloncoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcb.paco.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perdmap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translator.enqudo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ella-guesthouse-srilanka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niekbijman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.bridge.arrowhealth.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auidigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-portal.k-9apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chriswijnia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/oe-d6m8QGjw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0e4d3e700000040300473045022100f509f0665c4b858f096370e521a16ad8976ed6d9efe6196d753e060b1852120602207798d229f77b39fae5a736ee16060c38d9a0751c93e7092269ffbe8cf00a5b7c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c0e4d3e480000040300473045022073528a8e20bff2ce8da700df71c77916fcf37ee73d39be7a088fe8463d07a8dd022100f227beaffeaf7ab99f983cd1fc609803331d6ebc820f6e698affc6e394f5083f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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