benthearchitect.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number c6:a2:71:35:66:bf:80:de:0a:8f:a5:56:45:67:f6:d0 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=benthearchitect.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c6:a2:71:35:66:bf:80:de:0a:8f:a5:56:45:67:f6:d0
Serial Number (int): 264030591399672795197715128350470043344
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 14:54:f0:2b:33:f5:26:30:90:68:79:0e:a7:81:6c:0b:7b:35:d0:db
Fingerprint (sha256): a1:fc:da:5d:a6:fd:c1:4c:fc:c1:80:01:ad:47:79:78:fe:99:6f:98:04:f4:36:2a:ad:22:d8:f8:a0:3f:03:b8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/-YzRqudY2c0
CRL Distribution Point: http://crls.pki.goog/gts1d4/0ed3-CX9n0U.crl

Check the revocation status for certificate benthearchitect.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benthearchitect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benthearchitect.com
balamlabs.com
dev-events.habitatnycwc.org
expensifire.com
www.el-gayza.com
boobfeedr.com
employerlinks.offerdox.com
www.mikesite.es
getweb.dev
www.tutiqet.com
klient.domartstyl.pl
www.fishermandirect.com
www.melonaut.com
tawwinsan.piticommerce.com
www.restartapp.mobi
www.cucunguk.com
kshetra-admin.macademy.in
sec.optomapp.com
techmeet.se
obeseandrade.com.br
chatbot.edu.pl
kashoo.jud3.io
www.akela-expert-rh.com
lepremier.com.br
ppmpro-middleware.apps.new.de
ivakickoff2022.liveevent.co.za
www.agile-welzijn.nl
2022chatzconnectbp.liveevent.co.za
booking.vidoctor.vn
frontdeskh.rainmaker.travel
fursov.eu
www.nios.co.il
empleo.metodocharlie.com
ballin3.cbros.it
app.lleurequalia.cat
revistaanima.com.br
www.gepifoldmunkaszeged.hu
www.carpaccioetterem.hu
app.licensecare.dk
fire.timvw.be
www.cavalomorreu.com.br
staging.bizadmin.food.cururucu.jp
www.meltt.kr
www.phuketsoftevents.com
tornis.tvg.edu.lv
app.pharmacyhipass.co.kr
www.vepor.com.uy
sio.backpac.co
www.dhappaa.com
real-estate-calc.billfan.ca
app-plus-scoring-dev.1stcutoutings.com
staging.app.carv.com
vutg.io
conferencia.fidelizzare.app
drebutanta.ge.orchestra4edu.com
cdvsmrlc5fhzfcnicphv.smartimob.io
agileadventure.app
grdn.org
ifuse.vn
dashboard.ukey.co
devhour.us
webwin.name
auth.finalsite.com
planetapuc.imersys.com
pikpsikoloji.com
hcws.info
getmodas.ca
www.yetti-friends.de
rhythmwireless.io
bb.studio
www.goodlaughscomedy.net
pokedexit.aabass.net
www.bubbloapp.com
omshakthiproperties.com
beta.portal.aerialcanvas.com
poetica.zenzaiya.dev
bieritor.com
www.tbcmcallen.com
www.sosclickabogados.com
www.invitatis.com
app.giantsms.com
calenview.geniam.com
configurator.getmystripes.com
hospitalityhouse.medpharmservices.com
go.lemberglaw-alert.com
console-hospitalityhouse.medpharmservices.com
www.kowlooninn.com
easywholesale.estore.business
mojave.agency
ensembler.app
gub.app
i.meetsla.com
vendor-app.naqlx.com
auth.apocha.app
www.dolchi.watch
www.gctcorporation.com
shimogaproperties.com
take-ticket.parkchamp.ca
app.stateful.com
firebase.flosette.com

Other certificates including the domain name benthearchitect.com

(limited to 100 certificates)
tnmrealtor.com
mesa.tenho.delivery
lisamaccarrigan.com
events.antaragni.in
www.thebollo.com
benthearchitect.com
benthearchitect.com
mygroup.io
agileadventure.app
baisetamere.fr

Certificate

The complete raw certificate details for benthearchitect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264030591399672795197715128350470043344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 14:54:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 15:51:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benthearchitect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/-YzRqudY2c0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benthearchitect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balamlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-events.habitatnycwc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expensifire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.el-gayza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobfeedr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employerlinks.offerdox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikesite.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getweb.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutiqet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klient.domartstyl.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fishermandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melonaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tawwinsan.piticommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restartapp.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cucunguk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kshetra-admin.macademy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.optomapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techmeet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obeseandrade.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kashoo.jud3.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akela-expert-rh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lepremier.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmpro-middleware.apps.new.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivakickoff2022.liveevent.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agile-welzijn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2022chatzconnectbp.liveevent.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.vidoctor.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontdeskh.rainmaker.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fursov.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nios.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empleo.metodocharlie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballin3.cbros.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lleurequalia.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revistaanima.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gepifoldmunkaszeged.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carpaccioetterem.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.licensecare.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.timvw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cavalomorreu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bizadmin.food.cururucu.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meltt.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phuketsoftevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tornis.tvg.edu.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pharmacyhipass.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vepor.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sio.backpac.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhappaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'real-estate-calc.billfan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-plus-scoring-dev.1stcutoutings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.app.carv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vutg.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conferencia.fidelizzare.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drebutanta.ge.orchestra4edu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdvsmrlc5fhzfcnicphv.smartimob.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agileadventure.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grdn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifuse.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.ukey.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devhour.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webwin.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.finalsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetapuc.imersys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikpsikoloji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcws.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmodas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yetti-friends.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhythmwireless.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bb.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodlaughscomedy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokedexit.aabass.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bubbloapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omshakthiproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.portal.aerialcanvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poetica.zenzaiya.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bieritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbcmcallen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sosclickabogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invitatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.giantsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calenview.geniam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator.getmystripes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitalityhouse.medpharmservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.lemberglaw-alert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console-hospitalityhouse.medpharmservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kowlooninn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easywholesale.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojave.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensembler.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.meetsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor-app.naqlx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.apocha.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolchi.watch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gctcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shimogaproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'take-ticket.parkchamp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stateful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.flosette.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/0ed3-CX9n0U.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac7e6324100000403004730450221009c894edfeeabd5847cc446c4ecbd409f05aa8982ee45a1b13a050b6eac19ba1002204810b70d2ec080430ba05a5e65663241e9d9b4de81b4303f99481afd434544cc0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac7e632400000040300483046022100fee3732f7836dee51a4072c485bf5c55f6b02ab6300fa0e230f6091a2270e83c022100ba1c20d370e126f028b1f52d78c29f63891d699ac5e901c541195f2590303bb7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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