my.mindsum.app

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number d0:8b:1d:39:ef:26:06:a1:09:be:24:e3:ae:c6:64:6e was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=my.mindsum.app

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d0:8b:1d:39:ef:26:06:a1:09:be:24:e3:ae:c6:64:6e
Serial Number (int): 277201745166495499649140704401561117806
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 8b:f4:c9:4f:26:b3:62:da:44:4f:57:9e:2b:af:b0:fd:0c:77:f7:e9
Fingerprint (sha256): a3:5d:0d:aa:c9:57:56:72:32:ce:1d:9f:1f:c8:c7:1d:25:b1:cf:50:72:92:7f:8b:a1:3f:b3:6e:6b:96:25:34

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Hwh0-6Ib47I
CRL Distribution Point: http://crls.pki.goog/gts1d4/k7562-bXs-A.crl

Check the revocation status for certificate my.mindsum.app

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for my.mindsum.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

my.mindsum.app
ferienwohnungen-rotter.de
app.belong.chat
clotidal.pl
api.atyabtabkha.com
nouns.love
zeodel.com
merkezjaponotomotiv.com.tr
www.apollocomercios.com
www.martinade.com
www.merkezjaponotomotiv.com.tr
alive.livy-home.com
kylanlewis.page
my.euroloppet.com
savonlinnaairport.fi
www.vitsols.com
www.edertaveira.com
app.mindlib.de
www.jacksonbarbearia.com.br
mysense.co
cdn.actini.us
www.equix.app
simpleprofiles.ca
www.megavent.in
m.cubor3.com
www.tradejourney.app
welcometomygarden.org
tke.us
www.vinitalyplus.com
humancloudnetwork.org
portal.flylisted.com
lockdownlearnings.org
d.0br1.io
www.1perfectnetwork.com
sms.sjc.co.za
link.ezobanks.com
8mb.co.za
app.dellenhauer.de
clasicwebtools.com
intisolusi.co.id
toppings.tv
facundoimobiliaria.com.br
ibnp.soniw.pl
www.kangoo-trekka-club.org
imsv2dev.rnlawgroup.com
mtool.bengalpictures.com
krista.screendead.com
clip.gochiusa.life
allstar.limo
www.briansawaylunch.com
support.stride.studio
app.blockaspot.com
www.benni.io
checkin.wildroverhostels.com
esimapp.ymobile.jp
www.thesubtract.in
www.scc-application.co.za
pwa.garnisoft.nl
guandan.bailinhe.com
stage-money.kahero.co
appkasa.com
www.listworks.se
www.hotellimeira.cv
app.tipshere.com
www.geoconnectionsinc.com
dev.maeckers.com
pletaterramajor.com
newsy.madhive.com
squads.mytogs.co.nz
dinossauros.inexpertmode.com
www.bringitapp.co
dinosaurs.inexpertmode.com
cadeiras.inexpertmode.com
sidecar-prod.cpptl.co
lyftdrivers.ca
ielnexus.com
rentawayapp.com
nautilusnft.com
app.mmseas.com
decodeinstallations.com
www.online-buchungskalender.com
portraitsbyisabel.com
florentletendre.com
www.innovasana.be
diyaads.showitmax.com
test.cultify.beebitpruebas.com
www.buddysafe.app
www.linkinfaith.com
www.munchkinnotes.com
www.garagemichiels.com
dev.swoof.me
roadviewbr.com
app.aeghome.electroluxmobile.com
redfoxcontractor.com
chairs.inexpertmode.com
app.boostwithhma.com
www.muradjouhari.com
binhduong.toolstore24h.com
studio.sandbox.awellhealth.com
secrecyapp.com

Other certificates including the domain name mindsum.app

(limited to 100 certificates)
www.equix.app
sawickiphu.pl
newsy.madhive.com
app.ungcash.no
buixuanhanh.vn
4geeks.lapieza.io
clasicwebtools.com
cleverle.app
www.staige.at
www.staige.at
dy.wearsafe.com
newsbit.co
my.mindsum.app
gofresher.in
educator.medwhiz.in
mindsum.app
baraksebelas.xyz
pets.cballenar.me
admockups.com
cleverle.app

Certificate

The complete raw certificate details for my.mindsum.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277201745166495499649140704401561117806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 06:39:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 07:37:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.mindsum.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Hwh0-6Ib47I'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2072 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mindsum.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienwohnungen-rotter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.belong.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clotidal.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.atyabtabkha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nouns.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeodel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merkezjaponotomotiv.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apollocomercios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merkezjaponotomotiv.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alive.livy-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kylanlewis.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.euroloppet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savonlinnaairport.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitsols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edertaveira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mindlib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksonbarbearia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysense.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.actini.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpleprofiles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.megavent.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cubor3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradejourney.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometomygarden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tke.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinitalyplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humancloudnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.flylisted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockdownlearnings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.0br1.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1perfectnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.sjc.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.ezobanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8mb.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dellenhauer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clasicwebtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intisolusi.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toppings.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facundoimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnp.soniw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kangoo-trekka-club.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsv2dev.rnlawgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtool.bengalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krista.screendead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clip.gochiusa.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allstar.limo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briansawaylunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stride.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.blockaspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benni.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin.wildroverhostels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esimapp.ymobile.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesubtract.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scc-application.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwa.garnisoft.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guandan.bailinhe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-money.kahero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appkasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listworks.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotellimeira.cv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tipshere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geoconnectionsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.maeckers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pletaterramajor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsy.madhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squads.mytogs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinossauros.inexpertmode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bringitapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinosaurs.inexpertmode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadeiras.inexpertmode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidecar-prod.cpptl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyftdrivers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ielnexus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentawayapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nautilusnft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mmseas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decodeinstallations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online-buchungskalender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portraitsbyisabel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florentletendre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovasana.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyaads.showitmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cultify.beebitpruebas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddysafe.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linkinfaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.munchkinnotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garagemichiels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.swoof.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadviewbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aeghome.electroluxmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redfoxcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chairs.inexpertmode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.boostwithhma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muradjouhari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binhduong.toolstore24h.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.sandbox.awellhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secrecyapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/k7562-bXs-A.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018abbd48d1300000403004630440220518001170b85b263a484337221e2dfd1806732a3d53d2a04e8f0ca66a77bdf82022077743a0d8caaea7ab84aff0d4878ee74d7da71396f0e783b9c285dd59d73a6c70076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018abbd48d180000040300473045022100c77b94f35c68f8513ce77d8971b3faa1cd4c0041934a262f5aff279608d376e302206ec9caa20251a67518eb38207b95bcb7438aa5d892b14b9c0ac8b01da46c9395
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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