status.bienparabien.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number c4:6e:f6:07:11:7a:96:b6:10:4e:3f:d4:00:9c:65:6b was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=status.bienparabien.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c4:6e:f6:07:11:7a:96:b6:10:4e:3f:d4:00:9c:65:6b
Serial Number (int): 261104829861051423869469842111907784043
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 35:17:30:5d:04:19:8f:bc:7b:c1:27:08:14:e9:ef:54:18:45:9e:0d
Fingerprint (sha256): 94:a6:c0:ce:c8:be:96:80:cc:2b:fc:c5:be:6f:87:e9:c8:57:10:c5:2c:d4:b1:a7:29:37:38:97:ba:b9:3a:84

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/of0dyGM0FpY
CRL Distribution Point: http://crls.pki.goog/gts1d4/X2Koz--kjzI.crl

Check the revocation status for certificate status.bienparabien.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for status.bienparabien.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

status.bienparabien.com
www.kairoe.com
debonair.com.br
orderonline.strayacafeandpizzeria.com.au
tourneycloud.com
print.level3k.com
luwei.peblla.app
kjr.peblla.app
letremplin.deeplinks.bfansports.com
www.arsinha.com
cherokeecasa.org
elpa-int.com
digitalvenue.training
moongazingharebars.eventmaster.jobs
cycododge.com
gunni.starcraft.is
dieselpumpbeaumont.com
hatemecauseyouaintme.com
demo.tmbr.app
book-finder.intravaiaezio.co.uk
balloon-to.com
www.invyts.com
www.aotb-kiosk.com
m.prspcts.co
link.camify.ayslabs.io
kikakushare.com
ikude.jp
leasemojo.com
homeandmorestudio.com
avishalom.shalit.name
www.creasources.ca
alperenkarakus.com
e812819d-cb15-44c8-8d6a-2cfcb0cc559d.m.virtualplatform.tv
www.hawking.ro
jpaisley.com
dl.aplimax.net
mth-search.com
dl.daleelak-app.com
pinpointsurf.com
auburnprediction.sqwadhq.com
play.cdn.warena.io
api.artiss.co
payment.i-kasa.com
lostfalcon.com
www.appscontrini.it
blendargout.order.pulp.eu
tema1.zeplinx.com
www.puremomoffers.com
msm.link
www.kaha.co.in
ezfy.link
www.superclass.co.in
join.midfinvest.com
www.optimal.tools
www.charleshodgson.com.au
www.medscrib.com
concordiabank.net
www.nelorandia.com
commodity.uice.com.ua
radontechnologies.in
unhldn.org
joannasmerea.com
ekinbarri.tech
postofficescoin.us-west-2.aws.aurosoftware.net
www.gastro-vier.com
wallboard.jourfixed.com
ppmpro-middleware.apps.new.de
maths.shackfrere.net
server.connectbench.lk
hellomethod.io
ahldn.org
julienrenaux.fr
www.ghosties.xyz
retrospectre.org
prro.medias.com.ua
campaigns.mailtrap.info
www.babanevek.com
link.inishare.com
transformhw.org
www.dccnightcollege.in
www.carpaccioetterem.hu
app.passport-photo.online
link.hotkup.com
bizzybooks.com
www.drapp.seiryupharmacy.com
campaigns.massengines.com
ovanight.co.za
greenvillagesrl.it
www.ahldn.org
siamjsguard.co.th
giuliofilippi.com
www.heartwares.in
www.joshiexclusive.in
www.cybersecurity-sb.info
www.seduni.org
www.flashpedidos.com
kids.justalk.com
waridh.ca
getjotty.com
tender-admin.itmedia.io

Other certificates including the domain name bienparabien.com

(limited to 100 certificates)
tym.share.app-staging.c-rayon.com
amborjo.com
hillstarmedia.com
ivenfe.cc
scoring.bienparabien.com
www.status.bienparabien.com
www.mysolace.app
www.pspkdevtest.net.au
www.botls.app
notes.andymatuschak.org
insent.ai
bienparabien.com
www.joeyyang.com
isys.cc
seils.com.au
account.bienparabien.com
blog.bienparabien.com
www.mryu.menu
simulador.bienparabien.com
cburg.galander.berlin
spotter.soinlabs.net
blog.bienparabien.com
it.bienparabien.com
liquidez.bienparabien.com
www.belezafresca.com
www.kdmservices.in
www.appricode.co
api.facturacion.bienparabien.com
thetiburondon.com
www.pantaurelawan.com
status.bienparabien.com
www.nsjtt.org
*.bienparabien.com
www.matjaz.dev
nrm.bienparabien.com
myautodebits.ca
creditos.bienparabien.com
www.neonotes.app
bienparabien.com
servicios.bienparabien.com
www.karlitekniksupompalari.com
soc.bienparabien.com
subscribe.insighttimer.com
soc.bienparabien.com
mailing.bienparabien.com
tst-originacion.bienparabien.com
agorapacific.com
liquidez.bienparabien.com
neuralup-app.com
www.bienparabien.com
www.bienparabien.com
valija.bienparabien.com
www.okoplay.com
api-ad.bienparabien.com
www.restaurantefutu.es
villaluronorte.com.ar
admin.kiey.com
satisfaccion.bienparabien.com
*.bienparabien.com
*.bienparabien.com
www.iceberg-technology.com
www.thehabitguru.com
nrm.bienparabien.com
ll.myroomabroad.com
yals.bienparabien.com
njhomes.info
www.nsjtt.org
static.bienparabien.com
tst-originacion.bienparabien.com
tym.share.app-staging.c-rayon.com
portmarnockden.com
promotores.bienparabien.com
*.bienparabien.com
www.bienparabien.com
tesoreria.bienparabien.com
www.bamboosalon.ca
mates.tentafy.com
valija.bienparabien.com
neu.report
www.pixelboxapp.com
blog.bienparabien.com
promotores.bienparabien.com
preview.ivyukraine.com
tst.bienparabien.com
www.bienparabien.com
link.metro-fs.com
petit.cocain.blue
kuronlyric.jp
status.bienparabien.com
ulink.goshop.my
tst.bienparabien.com
swiftlab.co.uk
www.urbancapital.in
symmetry.la
www.pantaurelawan.com
dreamitdesigns.net
kingsdownapp.plumsocial.co.uk
link.hilmers.de
tst.bienparabien.com
isys.cc

Certificate

The complete raw certificate details for status.bienparabien.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261104829861051423869469842111907784043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 08:14:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 09:11:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'status.bienparabien.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/of0dyGM0FpY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2078 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bienparabien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kairoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debonair.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderonline.strayacafeandpizzeria.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourneycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.level3k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luwei.peblla.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjr.peblla.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letremplin.deeplinks.bfansports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherokeecasa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpa-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalvenue.training'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moongazingharebars.eventmaster.jobs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycododge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunni.starcraft.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dieselpumpbeaumont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hatemecauseyouaintme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.tmbr.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book-finder.intravaiaezio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balloon-to.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invyts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aotb-kiosk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.prspcts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.camify.ayslabs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikakushare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikude.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasemojo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandmorestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avishalom.shalit.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creasources.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alperenkarakus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e812819d-cb15-44c8-8d6a-2cfcb0cc559d.m.virtualplatform.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawking.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpaisley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.aplimax.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mth-search.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.daleelak-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinpointsurf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auburnprediction.sqwadhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.cdn.warena.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.artiss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.i-kasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostfalcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appscontrini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blendargout.order.pulp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tema1.zeplinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puremomoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msm.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaha.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezfy.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superclass.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.midfinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optimal.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charleshodgson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medscrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concordiabank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelorandia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodity.uice.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radontechnologies.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unhldn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joannasmerea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekinbarri.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postofficescoin.us-west-2.aws.aurosoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gastro-vier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallboard.jourfixed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmpro-middleware.apps.new.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maths.shackfrere.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server.connectbench.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellomethod.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahldn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'julienrenaux.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghosties.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrospectre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prro.medias.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigns.mailtrap.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babanevek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.inishare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transformhw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dccnightcollege.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carpaccioetterem.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.passport-photo.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.hotkup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizzybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drapp.seiryupharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigns.massengines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovanight.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenvillagesrl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahldn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siamjsguard.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giuliofilippi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartwares.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joshiexclusive.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity-sb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seduni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flashpedidos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.justalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waridh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getjotty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tender-admin.itmedia.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/X2Koz--kjzI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018caa8daf76000004030046304402203420fdc14a2ef1fe65ad4d5dc3bf67c3e69beb12192981235be118a62662dc08022065f4f744b240b596765c09a11e2ff8798992d4ae2d5ab481aaf1727a5300e724007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018caa8daf5b000004030047304502210091a7e4255e530614a83275ade0114f7a217b9f65b211e22ca4d3df91b81ccb9302206420b3566d23ddfaee27420c1193ff4e4eb6d81bb388e75fbb8b99bc4015a58b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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