platform.kriterium.jaak-it.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e5:a1:fa:37:90:c8:e0:c9:12:18:0f:bc:87:9f:b5:e3 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=platform.kriterium.jaak-it.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e5:a1:fa:37:90:c8:e0:c9:12:18:0f:bc:87:9f:b5:e3
Serial Number (int): 305234245833728381442697927912926983651
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): f6:79:8d:5a:de:dd:7b:4b:5e:bd:d8:ed:f9:18:b2:fa:8d:f1:d3:13
Fingerprint (sha256): 9a:4e:b6:97:2c:87:06:ac:59:ea:02:84:81:d4:70:03:f3:62:36:5a:05:b8:6b:47:0e:c4:cc:bc:28:5d:d5:42

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/A3f22K6X0ao
CRL Distribution Point: http://crls.pki.goog/gts1d4/DYCW9hNzrXw.crl

Check the revocation status for certificate platform.kriterium.jaak-it.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platform.kriterium.jaak-it.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

platform.kriterium.jaak-it.com
www.bestsalary.app
sowmax.in
www.zainbaloch.com
meteorman.dev
rebot.dev
sightwords.zywien.com
johnburchfield.dev
11521882.stratics.io
markdown.griffintennent.com
www.sanghyeonlee.com
mob.hotdesk.io
auth.happydebits.com
oborlink.17app.io
haslomat.pl
lowbudgetfm.com
codesharkai.com
admin-uat.originsme.com
maknet.originsme.com
neonscenecreator.com
dev.console.divezone.app
qualityreis.com.br
www.cui.studio
claddingscandalmap.co.uk
appoptima.com
sang.cafe
sdf2d.schmelczer.dev
www.live.ab3.ch
barretos.g2canal.com.br
www.silanindustries.co.za
bswarm.hostabee.com
atnd.coderdojo-kodaira.org
it.cvc.ac.th
pemilu.amatek.co.id
www.fadeha.app
baki.jollof.fi
f96.zooz.cf
f55.zooz.cf
admin.dreamkpay.com
sub-dev.imetric.app
almabot.com
f73.zooz.cf
gm-trade.ru
f81.zooz.cf
f56.zooz.cf
f70.zooz.cf
f80.zooz.cf
activate.cz
links.testing.seussibles.com
my-mono-money.app
www.sebadrc.com
hisabkitab.in
quasi.market
link.myklick.com.br
emlybrand.com.br
www.emlybrand.com.br
www.acilcekicigelsin.com
mithlesh.website
int-key-link.lukb.ch
newenanalytics.uy
toponavi.info
www.tecnetics.in
business.ajaypunekar.in
www.zephyrhillmusic.com
link.bumtzihaus.com
vodo-drive.com
manotools.com
www.thrinaxinnovations.it
www.vequis.com.br
www.drtruptishah.com
www.imax.com.pe
oos-stage.choiceinc.biz
optimumonline.se
digitransgroup.co.za
www.servicetidy.com
www.cohenin.com
www.jklspecialevents.com
www.juriespies.co.za
www.xlabs.com.tr
dreamerschildcare.com
lucianoivansoro.com
www.lerchdrums.com
castwise.in
minutes.app.arrx.uk
windsapp.com
postmaker.io
sanaclothing.in
coding.space
bytesfire.in
venew.in
somos-lilith.com
ui-staging.mfit.co.in
getcryptograph.app
wooster.preritdas.com
pregveda.co.in
admin1075.estore.business
app.ezsignage.com.au
hub-staging.vodacast.com
website1042.estore.business
enrolment.beta.loophealth.com

Other certificates including the domain name jaak-it.com

(limited to 100 certificates)
avaya.ideacloud.com
www.juke80s-group.com
link-stg.astropay.com
share.docflix.com
kabanasacai.com.br
orange.app.nossaff.com
jaak-it.com
arthoonar.com
essupport.nightly.pocketpost.life
www.betterbehaviorcampaign.com
hitalama.com
app.loveisvenus.com
gist.louiscad.com
koyukan.com
tanabat.sorav.it
amixapp.com
www.kingsleyelrica.com
www.scottgeorge.net
dashboard.arusoil.com
clickhire.bakeminds.com
podsmonitor.com
jaak-it.com
dykt.app
nutchy.dev
orange.app.nossaff.com
jaak-it.com
crazy-santa.com
www.jaak-it.com
www.anotherclass.net
www.jaak-it.com
www.widooc.com
www.jaak-it.com
www.borderhopper.net
metalparts.hu
qa-site.omnixdigital.com.br
dantruong.net
www.valoradesign.com
go.hiddenharvest.ca
fanid.jaak-it.com
jaak-it.com
platform.kriterium.jaak-it.com
www.scottgeorge.net
adityakarad.com
ncr.raxar.com.ar
www.rightwayenglish.com
go.hiddenharvest.ca
fideltech.net
in1.ai
stage.portal.theseabay.com
playground.fungoman.net
jaak-it.com
nutchy.dev
jaak-it.com
playground.fungoman.net
www.boldambition.net
www.jaak-it.com
www.thx1138-force.com
jarurisaman.estore.business
mala-educacion.com
app.verkopeapp.com
www.ehei.in
console.cloudleft.ie
invitations.sipass.io
www.hughedwards.dev
jaak-it.com
www.bollnasglas.se
xoeta.com
www.jaak-it.com
dashboard.reviewbiz.io

Certificate

The complete raw certificate details for platform.kriterium.jaak-it.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305234245833728381442697927912926983651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 03:37:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 04:35:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platform.kriterium.jaak-it.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/A3f22K6X0ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1941 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.kriterium.jaak-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsalary.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sowmax.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zainbaloch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteorman.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebot.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sightwords.zywien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnburchfield.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11521882.stratics.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markdown.griffintennent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanghyeonlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mob.hotdesk.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.happydebits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oborlink.17app.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haslomat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowbudgetfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codesharkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-uat.originsme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maknet.originsme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonscenecreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.console.divezone.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityreis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cui.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claddingscandalmap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appoptima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sang.cafe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdf2d.schmelczer.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live.ab3.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barretos.g2canal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silanindustries.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bswarm.hostabee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atnd.coderdojo-kodaira.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.cvc.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pemilu.amatek.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fadeha.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baki.jollof.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f96.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f55.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dreamkpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub-dev.imetric.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almabot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f73.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm-trade.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f81.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f56.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f70.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f80.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.testing.seussibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mono-money.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sebadrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hisabkitab.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quasi.market'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.myklick.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emlybrand.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emlybrand.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acilcekicigelsin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mithlesh.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-key-link.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newenanalytics.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toponavi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnetics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.ajaypunekar.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zephyrhillmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.bumtzihaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodo-drive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manotools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrinaxinnovations.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vequis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drtruptishah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imax.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos-stage.choiceinc.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimumonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitransgroup.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicetidy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cohenin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jklspecialevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juriespies.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xlabs.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamerschildcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucianoivansoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lerchdrums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castwise.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minutes.app.arrx.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postmaker.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanaclothing.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coding.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytesfire.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venew.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somos-lilith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui-staging.mfit.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getcryptograph.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wooster.preritdas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pregveda.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin1075.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ezsignage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub-staging.vodacast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website1042.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrolment.beta.loophealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/DYCW9hNzrXw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac57a3900000004030047304502205256006441fa11aa18a9246d08922ec9666571d94cc3881915762bd095c825cc022100b85e028698cddaf643ed796f44029fe037c43099bb8510a03f3fcc686dcd31b60077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ac57a370e0000040300483046022100cefaf259d08c8157a118bb76fdc7c002524c9b177eb6fbe96079f1156cbdb219022100f236bd1f55cd7180cf68db661c2052cca92715b071a66c35e82b4b67369028a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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