www.diit.nyc

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 8f:93:1c:b1:df:e2:0e:12:0a:b4:6d:ae:6d:28:26:bc was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.diit.nyc

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8f:93:1c:b1:df:e2:0e:12:0a:b4:6d:ae:6d:28:26:bc
Serial Number (int): 190843453035589697629534389213824820924
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 0e:12:18:70:4f:cc:28:61:cf:be:de:39:f6:ed:32:5b:b2:3e:7a:31
Fingerprint (sha256): a4:4a:92:a3:d2:3a:9f:94:5f:a3:c8:6a:62:d8:1b:56:5e:fe:42:0c:42:cb:e3:76:c2:f2:d7:70:83:cc:b6:23

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/SKX36dE8ovY
CRL Distribution Point: http://crls.pki.goog/gts1d4/iGwbUs7yz4o.crl

Check the revocation status for certificate www.diit.nyc

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.diit.nyc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.diit.nyc
stayhome.coffee
appclip.veracityprotocol.io
www.speakeasy.fans
staging.personal.lifebrand.life
www.klubsoft.com
www.actea.earth
stage.vivirtual.com.es
dev.carecens.com
mom.kitakeet.com
www.vaddas-technologies.com
www.advancedcomputersofknoxville.com
app.i2ucash.com.br
www.blackhillonline.com
recepcion.ezturns.com
islaisvinksave.lt
admin.hlm.at
mysq.equiem.mobi
www.blogtonft.com
liamwatson.co.za
emilymcpike.com
app.gettwoit.com
www.grupoelhoc.com
saasybird.toplyne.gg
geniewits.com
bipree.com
play.app.vermill.io
affiliate.kidsup.net
plus.staging.fitkit.app
www.humi.app
portfolio.kiranbendkoli.tech
forsterindustriesllc.com
tailord.cloud
www.rngtickets.com
spence.smartroad.eye3.cl
link.virtual-rhythm.net
yllaslodge.com
company.corbon.gov.ng
zwirc.com
www.macfanatic.ca
qa.vezham.com
kazuwai.com
kelechibookstore.com
app.carecens.com
donut.benguelacollection.com
www.gpkbattles.com
app.getadventurely.com
parmabuenpastor.pedix.app
lottamonet.com
link.nester.co.il
lig-demo.picol.app
codi.pensioenduidelijk.com
admin.coverr.co
backchannel.to
app.algoritmo9.site
goclickadmin.estore.business
www.tourasia.ch
widget.runo.app
flugames.com
account.domality.com
goclick.estore.business
www.fullmoonstudios.com.au
petaru.net
vertigocreativo.com.ar
combine-test.bcase.solutions
www.solrapp.io
ingroupsocial.com
instantcobrand.com
app.nomadiccare.com.au
invites.chittoo.com
eclass.sovannaphumi.edu.kh
canure.com
tropjoli.fr
www.successta.com
academia.fuentedevida.com.mx
app.amaya.ag
obike.ca
app.mowo.fi
tv.mymosq.com
www.stakesignal.app
www.vecros.com
taskio.app
qademo.biibiic.com
test.blushingowlstudio.com
blog.manualdablogueira.com.br
share.sonio.me
request-editor.edilance.com
avaritia.hr
portal-dev.wehealth.org
foodmap.fm
puravida.cantera.app
www.tiquisurfacademy.com
camdencargoexpress.net
www.atominvention.com
schools.theactiveschallenge.co.uk
www.saintgelydufesc.city
app.citizenservicecloud.com
www.ak.systems
www.javitti.com.br
www.anilalbayrak.com

Other certificates including the domain name diit.nyc

(limited to 100 certificates)
www.globalpublicschoolpatna.com
l.cawi.it
www.diit.nyc
ekkanoo.now-ins.com
l.cawi.it
evaluate.watani.gov.sa
www.atominvention.com
www.acesseimoveis.imb.br
firebase.jodiemason.me
andyhavlik.it
www.amorerooms.bg
panl.co
preview.xtable.co
links.stg-int.account.nasta.co.jp
almafintech.com.ar
www.thangasamy.xyz
devbot.antion.io
app.umkamall.ru
www.diit.nyc
link.somethingsimple.me
masonswagerdev.com
masonswagerdev.com
twall.gdglille.org
diit.nyc
re14.com

Certificate

The complete raw certificate details for www.diit.nyc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190843453035589697629534389213824820924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 23:06:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 00:05:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.diit.nyc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/SKX36dE8ovY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2077 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diit.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayhome.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appclip.veracityprotocol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speakeasy.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.personal.lifebrand.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klubsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actea.earth'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.vivirtual.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.carecens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mom.kitakeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaddas-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advancedcomputersofknoxville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.i2ucash.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackhillonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recepcion.ezturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islaisvinksave.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hlm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysq.equiem.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogtonft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liamwatson.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emilymcpike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gettwoit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupoelhoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saasybird.toplyne.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniewits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bipree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.app.vermill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.kidsup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plus.staging.fitkit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humi.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.kiranbendkoli.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forsterindustriesllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tailord.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rngtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spence.smartroad.eye3.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.virtual-rhythm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yllaslodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'company.corbon.gov.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwirc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macfanatic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.vezham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazuwai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelechibookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.carecens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donut.benguelacollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpkbattles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.getadventurely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmabuenpastor.pedix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottamonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.nester.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lig-demo.picol.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codi.pensioenduidelijk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.coverr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backchannel.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.algoritmo9.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goclickadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourasia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.runo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flugames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.domality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goclick.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullmoonstudios.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petaru.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertigocreativo.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'combine-test.bcase.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solrapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingroupsocial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantcobrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nomadiccare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invites.chittoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclass.sovannaphumi.edu.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tropjoli.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.successta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academia.fuentedevida.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.amaya.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obike.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mowo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.mymosq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stakesignal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vecros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taskio.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qademo.biibiic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.blushingowlstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.manualdablogueira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.sonio.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'request-editor.edilance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avaritia.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-dev.wehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodmap.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puravida.cantera.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiquisurfacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camdencargoexpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atominvention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schools.theactiveschallenge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintgelydufesc.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.citizenservicecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ak.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.javitti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anilalbayrak.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/iGwbUs7yz4o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018951b8c1ae000004030048304602210099a8b9c7e446267c6b0d61d2bf310f798d8450e8fe822b3f6e9eed8a26c2a7f9022100979a9448751d1093cb6bce7e51812a31f63d99e0fa07d3e9d11024817fc5541f007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018951b8c1c10000040300463044022072b849616c21a31728eddc45cf7cd2826e3bcbc5b4c7528101983af1247a066902200bf0675eb79f260a051827218879e09d31255a326b95d2d755b9457be55da479
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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