cortrust.co.nz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 27:4a:58:1a:7b:b7:b1:22:12:13:50:8b:76:12:e1:ef was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cortrust.co.nz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 27:4a:58:1a:7b:b7:b1:22:12:13:50:8b:76:12:e1:ef
Serial Number (int): 52225908753409369126003977172150313455
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): eb:5c:74:8e:1a:f4:ed:44:ca:61:68:51:5f:b0:49:62:b9:f3:0d:48
Fingerprint (sha256): 9d:9c:92:ec:ba:91:4f:4d:74:79:c2:4f:05:d5:65:d6:36:76:cf:37:3a:c6:14:a0:40:b0:aa:f8:63:e8:3a:86

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Ju3C0b5W6D0
CRL Distribution Point: http://crls.pki.goog/gts1d4/BVtWSeynCXU.crl

Check the revocation status for certificate cortrust.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cortrust.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cortrust.co.nz
link.heylo.us
czarnypas.probs.pl
blprt.studio
metatext.ai
www.vtechit.solutions
ufukkaya.ch
www.agavix.com
results.linguaskill.com
ddmcdanapur.org
www.timraybould.net
app.agingclock.tech
gsn.12traits.com
felipebuffet.com.br
api.mobile.dev.onshop.lk
www.quizics.io
alpha.minutebox.xyz
www.buildingaugmented.com
www.agingclock.tech
user.agorify.com
www.oshukai-karate-68.fr
calls.targetreach.net
www.poddi.fi
japaprint.com
xeastage.services.xerox.com
www.blockmass.com
events.statueofequality.org
idavision.tech
kesneldigital.com
dashboard.figr.me
studio-aws.kiswe.com
2022.rncup.world
www.fernandoimoveissc.com.br
links.lucrasports.com
manthila.com
lulusmaquillage.com
medalsplaza.appily.nl
www.alsakerhytte.no
www.smolenski-mikolaj.pl
marketingcontactcenteraxalta.com
soycandidato.pe.moons.solutions
www.brauliodavid.com
lostules.zelgium.com
www.howardhonig.com
maxbielenberg.com
brushly.bullet-mobile.store
devworldportal.it
dulink.infinitied.com
horizon.joyride.tech
www.trofeobenedetto.it
pointprovider.com
meet.30boxes.com
strata.portal.plenadata.com
www.joocatech.com
nuilea.com
dev.nasheedstation.com
marksandnumbers.com
www.mberasolutions.com
webo.com.hk
www.mirameet.com
attorney.netlaw.com
dev.onsmartpath.com
www.niquelsoft.com
www.lulusmaquillage.com
schweserbook.com
www.thequeen.monarchy.org.nz
farm.karriardag.se
admin.dev.wooday.jp
www.pangpangguy.com
www.mnksoft.org
www.ticomi-technics.be
admin.nxxtr.com
www.jill9.com
aeinstein.orchestra4edu.com
healthstrategy.ae
dazzleplay.co.kr
www.braziliansaudi.com.br
insight.mediumra.re
applewood.greenlightforms.com
www.neonome.com
ciand.net
mico-webgl-test.3dcloud.io
www.digisehat.com
gather-your.party
www.hcentre.burhaninatural.com
studio.panoroll.com
tusarrescue.org
winner.andrelademann.de
hello.revox.io
dev.nominator.synapps.hu
tecna-sales.tecnaprofessional.eu
ishetmorgen.nl
attach.mikmak.tv
www.wow-unknown.cz
www.cartoonfun.co.uk
qualisbubulae.com
www.waalers.com
tickbird.org
csworkindiauatpassword.creatorofone.in
health-facilities.dev.utah.gov

Other certificates including the domain name cortrust.co.nz

(limited to 100 certificates)
www.mountainhoundoffers.com
blprt.studio
link.overplay.com
www.lakhwani.ca
barcode-keyboard.eu
cortrust.co.nz
dashboard.figr.me
link-lab.setoko-test.com
wonderworld.techputer.in

Certificate

The complete raw certificate details for cortrust.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52225908753409369126003977172150313455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 17:19:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 18:17:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cortrust.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Ju3C0b5W6D0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.heylo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czarnypas.probs.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blprt.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metatext.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vtechit.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufukkaya.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agavix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.linguaskill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddmcdanapur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timraybould.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.agingclock.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsn.12traits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felipebuffet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mobile.dev.onshop.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizics.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.minutebox.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildingaugmented.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agingclock.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user.agorify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oshukai-karate-68.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calls.targetreach.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japaprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeastage.services.xerox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockmass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.statueofequality.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idavision.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kesneldigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.figr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio-aws.kiswe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2022.rncup.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fernandoimoveissc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.lucrasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manthila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lulusmaquillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medalsplaza.appily.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alsakerhytte.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smolenski-mikolaj.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingcontactcenteraxalta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soycandidato.pe.moons.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brauliodavid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostules.zelgium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howardhonig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxbielenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brushly.bullet-mobile.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devworldportal.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dulink.infinitied.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizon.joyride.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trofeobenedetto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointprovider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.30boxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strata.portal.plenadata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joocatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuilea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nasheedstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marksandnumbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mberasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webo.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mirameet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attorney.netlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onsmartpath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niquelsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lulusmaquillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schweserbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thequeen.monarchy.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm.karriardag.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dev.wooday.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pangpangguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnksoft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ticomi-technics.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nxxtr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jill9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeinstein.orchestra4edu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthstrategy.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dazzleplay.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.braziliansaudi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.mediumra.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applewood.greenlightforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neonome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciand.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mico-webgl-test.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digisehat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gather-your.party'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcentre.burhaninatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.panoroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusarrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winner.andrelademann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.revox.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nominator.synapps.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecna-sales.tecnaprofessional.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishetmorgen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attach.mikmak.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wow-unknown.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartoonfun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualisbubulae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waalers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickbird.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csworkindiauatpassword.creatorofone.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-facilities.dev.utah.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/BVtWSeynCXU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dfb3e47720000040300483046022100e39bde3cece1b210fb0ce0e2a7b4fa59c5bdfcf74e4b1864379d231e56f7d69c022100f4dbbb9b6360c1acfe1b089c5514a3d8461166af5052a77879c2600a17f866c5007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dfb3e474d000004030047304502202c1fcc52616b8bc0327ecd3f71076d57c8277be07e823d9cb25fd53f395e656d022100ada548ea09ecdbdc30d9698c238ff30282d75a9c17ddeac5dbb8b5a4e2f3f443
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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