scienterra.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 91:27:15:57:52:6f:11:b3:10:76:20:42:67:c1:18:1d was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=scienterra.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 91:27:15:57:52:6f:11:b3:10:76:20:42:67:c1:18:1d
Serial Number (int): 192940991815259520429352075101332379677
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): cf:b3:66:f5:dc:df:9b:b8:ba:b6:3d:8a:2f:3d:c5:b6:9f:dc:98:5b
Fingerprint (sha256): a3:5a:2c:e5:93:f5:52:33:0e:b3:a8:97:31:42:10:fd:83:8c:e9:5b:e2:27:e3:32:27:9c:7b:fe:2d:e7:e4:05

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/6zKgUA9b_ZQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/QyFPSotbuqY.crl

Check the revocation status for certificate scienterra.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scienterra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scienterra.com
notebird.church
contact-us-dev.paxiplatform.com
teachmi.org
asleslie.com
codesenseai.com
www.codesenseai.com
partnernat.com
sleep.reflectionsbhu.org
www.kiddushroom.com
www.orator.beauty
unicozone.quest
miri-graphic.com
passion-pineapple.com
intian.com.mx
www.friendofhumanity.com
download.spaceculture.co
affixcard.com
onrueda.joyride.tech
stream.neuvideo.io
www.freelancercostarica.com
www.inomoment.com
kraid.guru
mijicstefan.com
ipmap.ai
horizonatms.com
honestguidetocooking.com
www.dontileplumbing.com
marquette.ifindtrail.com
benchlyhire.com
link.appkota.com
web.withdeep.com
jwvdh.nl
cdeeble.net
www.linseption.com
arcopharmaindia.com
www.cdeeble.net
www.designincubation.sg
projectsmercury.com
www.ioc-consulting.com
auth.modareseen.com
www.yattalabs.com
ekmeloz.com
speedspotlight.com
tutorialtrak.com
www.saniatazam.com
krishnapandey.com
kynmining.com
www.bookingheads.com
app.getpompom.com
aurikahemsley.com
air-aware.com
www.scinovuscrafted.com
toriigatestudios.com
sinarfaeyza.com
xitblue.com
www.mijicstefan.com
www.petjetsetter.com
www.kelvinatemiehart.com
www.kvkxpress.com
qa.qtick.app
indi-psychology.org
vitamind.dev
kick.inprod.dev
icomuae.com
www.emailaction.online
the-green-brick-road.org
www.the-green-brick-road.org
jaguarnaslub.pl
resume.hoa.do
penningtonroasting.com
www.lokoforlove.com
kaya.education
config-automation.dev.advanced-infrastructure.co.uk
www.jmlasalle.com
rainbowrock.org
onecanberra.smartcondo.app
www.zakwanashfaq.com
applesstrack.rxoconnectmain.rxo.com
ucls-artsfest.org
congregacion-digital-herdivol.fireysoft.co
bytekore.com
www.numberonefarm.shop
aseprusboyaca.com
www.anosales.net
ut23.art
www.bytekore.com
checkout.sicrux.app
www.redehonda.app
glucollective.com
sketches.zip
app.foxstone.co
www.diandrainturire.me
drjamesteela.com
www.jannik-schwarzwolf.me
blazemotion.ai
seolle.ai
dadrankings.com
chxps.com
bisapt.com

Other certificates including the domain name scienterra.com

(limited to 100 certificates)
marketinghacker.net
www.measureitapp.com
www.the-green-brick-road.org
locations-manager.peachystudio.com
www.capstoneproject.app
tng.presen.ca
deriv.ink
ellahoefl.at
congregacion-digital-herdivol.fireysoft.co
scienterra.com
www.bobcoin.cash
dashboard.staging.smartwage.co.za
www.makeme.cards

Certificate

The complete raw certificate details for scienterra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 192940991815259520429352075101332379677
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 19:58:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 20:57:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scienterra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/6zKgUA9b_ZQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1989 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notebird.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact-us-dev.paxiplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asleslie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codesenseai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codesenseai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnernat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleep.reflectionsbhu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiddushroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orator.beauty'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicozone.quest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miri-graphic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passion-pineapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intian.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendofhumanity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.spaceculture.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affixcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrueda.joyride.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.neuvideo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancercostarica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inomoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraid.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijicstefan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipmap.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizonatms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honestguidetocooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontileplumbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marquette.ifindtrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchlyhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.appkota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.withdeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwvdh.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdeeble.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linseption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcopharmaindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdeeble.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designincubation.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectsmercury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ioc-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.modareseen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yattalabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekmeloz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedspotlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorialtrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saniatazam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krishnapandey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kynmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookingheads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.getpompom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurikahemsley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'air-aware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scinovuscrafted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toriigatestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinarfaeyza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xitblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mijicstefan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petjetsetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelvinatemiehart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kvkxpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.qtick.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indi-psychology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitamind.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kick.inprod.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icomuae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emailaction.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-green-brick-road.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-green-brick-road.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguarnaslub.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resume.hoa.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penningtonroasting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lokoforlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaya.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config-automation.dev.advanced-infrastructure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmlasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainbowrock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecanberra.smartcondo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zakwanashfaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applesstrack.rxoconnectmain.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucls-artsfest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congregacion-digital-herdivol.fireysoft.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytekore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.numberonefarm.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aseprusboyaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anosales.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ut23.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bytekore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.sicrux.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redehonda.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glucollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sketches.zip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.foxstone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diandrainturire.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drjamesteela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jannik-schwarzwolf.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blazemotion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seolle.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadrankings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chxps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bisapt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/QyFPSotbuqY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c08474fc60000040300473045022100a5e10662653a17a12d736e609759d6f7808b07862468bf851504fb8cac8ca66b0220200ff4954778252f1279848ff4d8b81cc804aee3cf3b07cc777ba11cd60e32b800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c08474fbb0000040300473045022100b418719a56260f456bbc84f30ef55879dbd67b1e7db723ef950a8a14d065c5dc022062b6558316f4e979fa1dfd35ca2d1bc75947bfb8bd48942b34ba968e79090179
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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