kozmonaut.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e8:19:bb:44:d2:44:f6:ae:12:a7:fa:6f:3d:59:35:c1 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kozmonaut.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e8:19:bb:44:d2:44:f6:ae:12:a7:fa:6f:3d:59:35:c1
Serial Number (int): 308514500706750010968189567233989096897
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 32:eb:61:b6:74:b4:f3:3b:fa:b8:fd:71:13:b1:63:db:66:30:2f:af
Fingerprint (sha256): 9c:2e:6f:d1:64:92:58:40:46:d4:b0:9f:04:be:df:49:9d:17:0f:04:92:4f:a2:20:55:b3:b0:f0:bd:57:05:4d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/B2DuMUIJkoU
CRL Distribution Point: http://crls.pki.goog/gts1d4/QAjxP9bEukA.crl

Check the revocation status for certificate kozmonaut.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kozmonaut.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kozmonaut.com
customize.kozyheat.com
leagenais.com
arcana.labmonade.com
health.kluproject.com
letsitok.com
manasamitr.com
lomasos.com
marianomomo.com
martinongyj.com
www.lovepetdn.com
cs2-staging.mixablestudio.com
console.matkortet.com
namanpestcontrol.com
assistenterh.minervafoods.com
mycedarcraft.com
widget.nostromedia.com
onfarmwater.com
www.ozininatolyesi.com
auth.dev.piclar.com
stream.jwpubs.org
volunteers.makewecareful.org
avico.rocks
www.watkanloekwel.nl
portal.demo.caroo.co.uk
investhumber-netzero.co.uk
admin.takepart.egg.srl
www.investhumber-netzero.co.uk
www.digisailor.us
ishamal.ru
links.suqya.app
alejandroandre.com.ar
tongskitchen.com.au
swan-referral.swanshop.ae
www.telearuba.aw
www.slowjamz.com.ar
link.samisaude.com.br
sellerstar.com.br
rocadefogo.com.br
katoa.ch
www.lar.city
lomasdemillaray.cl
e.birikimpilleri.com
celynxie.com
www.chhayamedicine.com
bc-gu.ch
gtechqr.com
core.answer.hrmonitor.com
afm.civitimeapp.com
sankhya.mitraecp.com
lesparaules-restaurant.com
air.mogeia.com
nancybubicatherapy.com
se.mojoule.com
nighttimedriveband.com
dev-admin.novemapp.com
nwtsolution.com
pasedesaludcasalab.com
p1f-api-log.pingone.com
developer.pickanapp.com
officinetrepuntozero.com
aquilinodominguez.porcelanosapartners.com
puregoldenhour.com
quicksharefile.com
www.roalcan.com
rockyken.com
www.rockyken.com
selfsoulmate.com
www.simpla-scale.com
speakerequityassessor.com
thefemalequotient.speakerequityassessor.com
backgrounds.sparkello.com
www.speakerequityassessor.com
thuisvester.sqiffer.com
s.tedxcitbengaluru.com
tuaregcomex.com
tutamkhamon.com
passwords.labs.tozny.com
um-in.com
ugur-ertas.com
coronavirus.thebaselab.com
tutorials-api.vectric.com
zangup.com
app.zero1-mtl.com
app.yuzuyou.com
ondrejzraly.cz
my.virtualstudiofitness.com
pandilna.cz
www.allmedi.de
cooperit.dev
www.ochterbeck.de
jackwade.dev
draftcheck.kevinbigay.dev
srivatsa.dev
www.srivatsa.dev
meteor.timkrause.dev
vorschau.gemeindehaus.digital
kirkesystem.dk
dev-admin.ar.fan
portfolio-aaldn.fr

Other certificates including the domain name kozmonaut.com

(limited to 100 certificates)
gottime.app
daily-dinners.com
educathours.com
padraocops.com
divinonino.ga
www.elles-belles.co.uk
sinapsa.hr
chifoumiparty.com
contabilidadesegovia.com.br
daily-dinners.com
kozmonaut.com
www.victormaestri.com.br
yakshatantra.com
lowes-kitchens-cert.3dcloud.io
valetcleaning.com
dinodigiulio.com
sinapsa.hr

Certificate

The complete raw certificate details for kozmonaut.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308514500706750010968189567233989096897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-14 18:46:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 18:46:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kozmonaut.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/B2DuMUIJkoU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2096 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kozmonaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customize.kozyheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leagenais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcana.labmonade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.kluproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsitok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manasamitr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lomasos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marianomomo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinongyj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovepetdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs2-staging.mixablestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.matkortet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namanpestcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenterh.minervafoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycedarcraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.nostromedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfarmwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozininatolyesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.dev.piclar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.jwpubs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volunteers.makewecareful.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avico.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watkanloekwel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.demo.caroo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investhumber-netzero.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.takepart.egg.srl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investhumber-netzero.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digisailor.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishamal.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.suqya.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alejandroandre.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongskitchen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swan-referral.swanshop.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telearuba.aw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slowjamz.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.samisaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellerstar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocadefogo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katoa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lar.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lomasdemillaray.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.birikimpilleri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celynxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chhayamedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bc-gu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtechqr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.answer.hrmonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afm.civitimeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sankhya.mitraecp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesparaules-restaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'air.mogeia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nancybubicatherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.mojoule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nighttimedriveband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-admin.novemapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwtsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasedesaludcasalab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p1f-api-log.pingone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.pickanapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officinetrepuntozero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquilinodominguez.porcelanosapartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puregoldenhour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicksharefile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roalcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockyken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockyken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfsoulmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpla-scale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speakerequityassessor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefemalequotient.speakerequityassessor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backgrounds.sparkello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speakerequityassessor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thuisvester.sqiffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.tedxcitbengaluru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuaregcomex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutamkhamon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passwords.labs.tozny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'um-in.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugur-ertas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.thebaselab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorials-api.vectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zangup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.zero1-mtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.yuzuyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondrejzraly.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.virtualstudiofitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandilna.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allmedi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperit.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ochterbeck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackwade.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draftcheck.kevinbigay.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srivatsa.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srivatsa.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteor.timkrause.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorschau.gemeindehaus.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirkesystem.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-admin.ar.fan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-aaldn.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/QAjxP9bEukA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185122e0bdc000004030047304502200f3af068821b6dfbd34570212121e6d78d4a2e8ecbbfc1d24ac23e2862b9cd990221008520e2254686346153669a1ceb20b7fc53229ef6cffdc9f010b15ebc3f5f5ce50075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185122e0be800000403004630440220344b675c575c030d3b8a5d8062194842be9786bbffe0bc0895d29064b584e18e022035394f5b0d0c224aece250ec9b7baea4f3b43917d6831a81227ea280574bb5a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0061ecd5e821b995cb0523a867fa2766fd87e6c6ac01815f58df9f0a59fc7235a7265ad9c0b77afbf07d0276537757872fe80136f09280bec46ca88856a61c6eefaf91072312f750d1d17d7daf44250c2d17384a301f41b1ab9123e15346c30473245195c1401a90001a73c17e49f09f360287dd69423cfedf885d415a5570a8cf0231942d1c3f9e6fed01507feabe8eb3beaa0e41d7a409c0e98e3a6dc9c35cda3838a3d9937240bafa8d36b1bb017306cba2262577f985a9bd23efac22554105220d2aa4fef31419fd8c6a234bbe0991e44aa69781010e5c28dfaf7b75559477c78a0961d92198bc7646bec9d3e9ce77b67e5d2686af431e400676dd28350d94