gd.cns.net.tw

Issued by WR3

About this certificate

This digital certificate with serial number ee:52:a9:7e:35:ca:e6:2c:12:83:a0:13:ca:db:9c:66 was issued on by Google Trust Services.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gd.cns.net.tw

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): ee:52:a9:7e:35:ca:e6:2c:12:83:a0:13:ca:db:9c:66
Serial Number (int): 316785469065829323039629093836546612326
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: c7:81:f5:fd:8e:88:d9:00:3c:4d:63:a2:50:31:24:a0:ce:23:fe:23

Fingerprint (sha1): 3d:b6:1f:99:78:4c:bb:20:44:06:7f:b6:3e:ba:f6:66:09:c5:05:f1
Fingerprint (sha256): a2:b3:e2:a8:3a:41:90:5a:93:cf:79:84:f8:31:44:8f:ce:d5:7e:f0:8e:7c:de:4f:be:00:34:9c:70:53:64:48

Issuing Certificate URL: http://i.pki.goog/wr3.crt

Revocation information

OCSP Server: http://o.pki.goog/s/wr3/7lI
CRL Distribution Point: http://c.pki.goog/wr3/qms0OAXgtIg.crl

Check the revocation status for certificate gd.cns.net.tw

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gd.cns.net.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gd.cns.net.tw
therapie.placeholder.tn
www.thermoartdesign.ro
beta.monesco.consibio.com
www.doneerapp.com
sad.datanorte.com.br
www.gecolmoveis.com.br
v2.alpha.weezer.fr
www.tsurunomundo.com.br
tgbank.com.br
www.lkbnk.ru
www.token.minigo.store
www.savanjo.nl
go.213.kr
eplant-app.nlf.com.vn
www.apizf.tg
edoc-staging.smas.edu.vn
www.nexthuman.me
my-v1.mmis.edu.ph
aisportswatch.eu
app.lowhigh-fabric.com
nibblepick.com
www.emlkw.com
www.janes-forest.org
handball-stats.mgm12.dev
app.shir.ly
sandbox.app.gsh.marlim.co
team1806.com
uniget.com
www.pipuy.com
www.vanhemme.nl
wibce.net
juliet.vm.peterjin.org
utimax.in
www.dymka.me
admissions.sjc.co.za
www.traditionequipment.com
lyricstudio.net
www.yourstaffknow.com
dev.boost.tools
portal.codingtier.com
www.borsetti.com
affiliate.coddy.tech
www.waitlyapp.com
valentinehomehealthcare.com
mensd3.rowanhockey.com
fprod.squadapp.co.uk
strikex.in
web.dev.cabotagestudien.com
www.jorgecamse.es
staging-partner.boostr.id
dv7.owqlo.com
staging.playmc2.com
dev.joppy.me
nanowallet.rnetian.in
app.kellner.4bits.mx
typhoon.cash
dev.myclarity.io
meshtelecom.28east.co.za
applink.upliftprayer.com
www.harryjacks.co.uk
beta.demo.teamraise.app
hireguy.co.uk
dashboard.streetsidebrewery.com
publisher.dashlink.de
fileball.jp
woodbadgeticket.org
www.inprose.info
mobile.ninetingale.io
www.thekafkanerd.io
www.citimaxenterprises.com
www.ahlantourism.com
bigfootds.com
adminn.mausi.in
claymoresafe.ae
care4k9s.co.uk
dev-app.sportscalesystem.com
flyphotostlouis.com
heartworktherapy.ca
www.jummp.io
painted.ch
l.memeize.me
int.fich.digital
beuken-essers.be-financieelfit.nl
www.easeurload.com
servicos.termosulengenharia.com
mohawk.tables.chat
majoras.cl
www.christchurchindia.org
gdno.dk
staging.blur.live
app.connecthr.co.mz
www.locallygrown.tv
conyurba.com
deklaracije.papircoop.rs
porchbeers.ca
app.chataverse.io
twenty.complex.com
www.genshin-planner.io
www.pranavgupta.org

Other certificates including the domain name cns.net.tw

(limited to 100 certificates)
www.pageverse.app
cp5643891906707456.order.place
www.casalox.com
www.huesnap.com
www.registrefirmu.lv
www.appcode.ro
spirit-varo.com
cdn.ru.voxelmax.com
resumebuilderai.com
www.tmhrakennus.fi
robertoesantos.com.br
www.diskonhemat.com
preview.appscreens.com
www.startrucks.app
sawickiphu.pl
broxbournemusicacademy.com
dev-wallboard-riga.ngpenterprise.co.uk
manager.guilhermepereira.dev.br
diagrambpm.com
jonnyibiza.comwww.jonnyibiza.com
www.upliftnow.net
mavlabsfpv.com
www.lnk.eus
*.cns.net.tw
www.artfix.ru
www.moveontecnologia.com.br
shipperperu.com
adlytics.ai
ydiatistudios.com
justusforall.org
spirit-varo.com
iliuhin.com
partners.pronthego.com
sfs.com.br
yume-app.com
blinelive.com
static.wow.one
api.payos.app
qa-admin.avsoft.cl
www.notinourscene.com
online.thinfinity.com
www.symbri.com
www.knowinghim.app
www.vintageautocorp.in
www.dylanbevan.co.uk
evelynogvegard.no
pkkonyvek.hu
auth.exercite.me
www.appcode.ro
www.alexsquibbs.com
www.conamer.io
bo.emaraplay.com
www.starbirds.io
www.serigno.com
triangula.com
qr.rwanga.org
schlusseldienstspandau.de
gd.cns.net.tw
andersonmartins.com.br
customer.cheaperwaste.co.uk
app.payva.io
landsea.heuristip.com
sfs.com.br
swarmloyalty.com
blessingcharmexportoutlet.com
service.fitnessdoctor.com.au
tedhawking.com
panel.catarfacil.es
www.starbirds.io
learn.nixonsucuc.com
desertdaze.mandolin.com
pointagon.com
links.youbchat.com
backerberry.com
docs.dev.evofit.org
ymd.development.fensi.in
enviwise.com.my
ssid.yidindji.country
2hot2besingle.co.za
www.theprworkshop.in
simplebingo.net
www.t-dent.com.ar
www.tuples.tech
wodeapp.xyz
evelynogvegard.no
thecloudgirl.dev
www.d3rivr.dev
admin1.adomne.com
www.portizs.com
test.witney-wolves.org.uk
www.realartllc.quest
firebase.jodiemason.me
areaexclusiva.farmogalcosmetics.com
app.biz2book.com
www.goldvintage.com.ua
clalitpa.um-manu.com
payproc.top-up.kz
my.marketradar.kz
colegios.mision.education
www.vinarc.co.kr

Certificate

The complete raw certificate details for gd.cns.net.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316785469065829323039629093836546612326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 16:44:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 17:42:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gd.cns.net.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c781f5fd8e88d9003c4d63a2503124a0ce23fe23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr3/7lI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gd.cns.net.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therapie.placeholder.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermoartdesign.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.monesco.consibio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doneerapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sad.datanorte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gecolmoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.alpha.weezer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsurunomundo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lkbnk.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.token.minigo.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savanjo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.213.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eplant-app.nlf.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apizf.tg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edoc-staging.smas.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nexthuman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-v1.mmis.edu.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisportswatch.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lowhigh-fabric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nibblepick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emlkw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janes-forest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handball-stats.mgm12.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.shir.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.app.gsh.marlim.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team1806.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pipuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanhemme.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wibce.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juliet.vm.peterjin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utimax.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dymka.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.sjc.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traditionequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyricstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourstaffknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.boost.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.codingtier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borsetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.coddy.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitlyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentinehomehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mensd3.rowanhockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fprod.squadapp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strikex.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.dev.cabotagestudien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jorgecamse.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-partner.boostr.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv7.owqlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.playmc2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.joppy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanowallet.rnetian.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kellner.4bits.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typhoon.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.myclarity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meshtelecom.28east.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink.upliftprayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harryjacks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.demo.teamraise.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hireguy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.streetsidebrewery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publisher.dashlink.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileball.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodbadgeticket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inprose.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ninetingale.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekafkanerd.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citimaxenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahlantourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigfootds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminn.mausi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claymoresafe.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care4k9s.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-app.sportscalesystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyphotostlouis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartworktherapy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jummp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painted.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.memeize.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.fich.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beuken-essers.be-financieelfit.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easeurload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicos.termosulengenharia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohawk.tables.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majoras.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdno.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.blur.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.connecthr.co.mz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.locallygrown.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conyurba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deklaracije.papircoop.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porchbeers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.chataverse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twenty.complex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genshin-planner.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pranavgupta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr3/qms0OAXgtIg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fda0d13e3000004030047304502201d54bd26550589cd5cb8ac8f7921735d2cc7518df9d4afbfde66f7571c479c70022100aeec3648c41892684a74e9d53600a7b38639d7f9240eb1a491af481903d973ce00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fda0d140b0000040300473045022100b50e1ca37556e36f877b15549e40d7f0e04699ec62fd7f3d815480abaef7fba2022059906053195a79601760189eb46083528a5bcd3cfa64980a8fe3842ea77bb84b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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