thisbit.ch

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number df:9c:27:39:2a:18:b0:53:0a:51:6a:c3:b9:7e:97:d2 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thisbit.ch

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): df:9c:27:39:2a:18:b0:53:0a:51:6a:c3:b9:7e:97:d2
Serial Number (int): 297228636912975695796304988609120737234
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 63:99:76:f0:68:79:17:10:75:69:42:b2:be:fe:e2:a5:ae:29:20:7d
Fingerprint (sha256): a7:b6:b7:7d:a1:17:79:55:92:4a:01:ba:16:41:5c:02:83:c2:8e:f4:8c:8f:de:20:9e:80:b7:d5:46:70:d2:3c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/JKj8YmGRZsE
CRL Distribution Point: http://crls.pki.goog/gts1d4/S9vTJcWMVR0.crl

Check the revocation status for certificate thisbit.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thisbit.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thisbit.ch
ansa35.anfitriones.mx
www.superpizzaman.com
twirp.ai
administratu.uy
link.busykid.com
www.beta.juniorhighgame.com
fidelitymortgagebrokers.com
juggle.gschall.ch
administrativo.giross.com.br
happy.ronne.dev
cse.gw2-strm-sds.com
scmicwisconsin.com
app.samyata.com
competition.s2pafrica.com
www.ais-tim.com
thornzfitness.com
alphaswap.coinmerge.io
www.jbglassworld.com
clearchannel.fiksuruoka.fi
wt.bytecolony.com
tetheryo.com
daisyh.dev
yogadrishtii.com.au
greenfingers.dk
industrialehub.com
www.spliffyworldwide.com
diavac.lfv.jp
www.conversordolarblue.com
yell-toyama.jp
thebookpundits.com
www.gumblmail.de
gaijin.guide
get.trbu.app
static.palladiumboots.com
app.ooomaker.com
last.francesiteweb.fr
get.unlimitedbiking.com
beta.ejsa.space
www.can.do
app.avada.io
www.bn-official.com
doc.nixt.banpunext.dev
app.eliud.io
alcantaras.itransparencia.com.br
yoko-yoko.net
mana-tea.jp
workersense.console.staging.appabrik.jp
yallego.com.mx
app.dev.claimscalc.com
nft.tipichain.com
stage.game
day-job.io
promo-uat.stylishop.store
www.afscompliance.com
www.hetworks.fr
www.randomdraftleague.com
jdl.game084.com
links.knowable.fyi
www.funlearnpro.com
staging.app.finicalportal.com
app.zemely.com
renovattio.mobi
nascitadolce.it
drpdrw.me
checkout.thesafeway.com.br
teacher.mobilemind.io
goiascontadores.com.br
unites.io
datallium.com
admin.innobyte.pe
www.taxiassociations.co.za
www.dessertnyc.net
www.volli.com
rubikwallet.com
cdnstaticinvestors.cam.tv
api.lokalebon.nl
www.owl.gift
dev.link.healthcarewings.com
v3.centre.lavenirapps.co
www.sadaqahjaryah.com
www.ordredubitard.fr
img.preguntaz.com
mychoiceapp.benefitsolver.com
p903i.ikuzaki.jp
shop.planet4.life
www.sunriseinteriors.co.in
console.getmemo.co.za
www.sandspringsdental.com
hvch.stx.world
beta.kipinto.ch
mathsnyana.co.za
www.sobiech.co.uk
www.renovattio.mobi
kuwatazaitaku.com
app.eqip.no
epilazione.2gbeautycom.com
tummouroriginal.com
web.edds-technology.be
www.vallecer.org

Other certificates including the domain name thisbit.ch

(limited to 100 certificates)
spinanico.com
feed.marksmen.nl
webfame.xivis.com
blog.pluser.net
www.paylessiraq.com
sunandsnow.mysmarthotel.com
www.muyazul.com
dungeon-mobile.com
app.generative.photos
www.vectorpsi.com
silalebanon.com
fingerflow.app
thisbit.ch
api.thisbit.ch
mezur.io
www.paylessiraq.com
dungeon-mobile.com
fulcro.todo.keigo.io
thisbit.ch
www.cryptocups.net
silalebanon.com
spinanico.com
dotshub.jincongho.com
thisbit.ch
feed.marksmen.nl
tera.cf
heisenbergscomedystop.com
postcovidasia.eventxtra.com
fun-hnguyen.eta.ai
totask.tk
share.thisbit.ch
fun-hnguyen.eta.ai
postcovidasia.eventxtra.com
thisbit.ch
www.unreal.marketing
guiquental.com.br
vanguard.gg
my.zallantis.online
swipewrap.com
demo.itpcc.net
tera.cf
www.volli.com
app.generative.photos
www.barcode-keyboard.eu

Certificate

The complete raw certificate details for thisbit.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINTDCCDDSgAwIBAgIRAN+cJzkqGLBTClFqw7l+l9IwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMxMDE5MDQyNzU5WhcNMjQwMTE3
MDUyNTAxWjAVMRMwEQYDVQQDEwp0aGlzYml0LmNoMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisweg4/A08uxrfHKNwGnA6/z+ON
7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrWrb62Cf/HBei6zD4wuJACFRM4
KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89llhMA9p+/Uiat7X3Y3nYhrfxfB
Q4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk//tVMMjOThi69wah13bIFcgl
3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82jXqtE4UCUJ2VR4GwrRhcpoax
zcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+gQIDAQABo4IKZDCCCmAwDgYD
VR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFAap3NkUPVD1G5jttt0R570Wtwz8MB8GA1UdIwQYMBaAFCXiGA6y
V5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYpaHR0
cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvSktqOFltR1Jac0UwMQYIKwYBBQUH
MAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5kZXIwgggGBgNV
HREEggf9MIIH+YIKdGhpc2JpdC5jaIIVYW5zYTM1LmFuZml0cmlvbmVzLm14ghV3
d3cuc3VwZXJwaXp6YW1hbi5jb22CCHR3aXJwLmFpgg9hZG1pbmlzdHJhdHUudXmC
EGxpbmsuYnVzeWtpZC5jb22CG3d3dy5iZXRhLmp1bmlvcmhpZ2hnYW1lLmNvbYIb
ZmlkZWxpdHltb3J0Z2FnZWJyb2tlcnMuY29tghFqdWdnbGUuZ3NjaGFsbC5jaIIc
YWRtaW5pc3RyYXRpdm8uZ2lyb3NzLmNvbS5icoIPaGFwcHkucm9ubmUuZGV2ghRj
c2UuZ3cyLXN0cm0tc2RzLmNvbYISc2NtaWN3aXNjb25zaW4uY29tgg9hcHAuc2Ft
eWF0YS5jb22CGWNvbXBldGl0aW9uLnMycGFmcmljYS5jb22CD3d3dy5haXMtdGlt
LmNvbYIRdGhvcm56Zml0bmVzcy5jb22CFmFscGhhc3dhcC5jb2lubWVyZ2UuaW+C
FHd3dy5qYmdsYXNzd29ybGQuY29tghpjbGVhcmNoYW5uZWwuZmlrc3VydW9rYS5m
aYIRd3QuYnl0ZWNvbG9ueS5jb22CDHRldGhlcnlvLmNvbYIKZGFpc3loLmRldoIT
eW9nYWRyaXNodGlpLmNvbS5hdYIPZ3JlZW5maW5nZXJzLmRrghJpbmR1c3RyaWFs
ZWh1Yi5jb22CGHd3dy5zcGxpZmZ5d29ybGR3aWRlLmNvbYINZGlhdmFjLmxmdi5q
cIIad3d3LmNvbnZlcnNvcmRvbGFyYmx1ZS5jb22CDnllbGwtdG95YW1hLmpwghJ0
aGVib29rcHVuZGl0cy5jb22CEHd3dy5ndW1ibG1haWwuZGWCDGdhaWppbi5ndWlk
ZYIMZ2V0LnRyYnUuYXBwghlzdGF0aWMucGFsbGFkaXVtYm9vdHMuY29tghBhcHAu
b29vbWFrZXIuY29tghVsYXN0LmZyYW5jZXNpdGV3ZWIuZnKCF2dldC51bmxpbWl0
ZWRiaWtpbmcuY29tgg9iZXRhLmVqc2Euc3BhY2WCCnd3dy5jYW4uZG+CDGFwcC5h
dmFkYS5pb4ITd3d3LmJuLW9mZmljaWFsLmNvbYIWZG9jLm5peHQuYmFucHVuZXh0
LmRldoIMYXBwLmVsaXVkLmlvgiBhbGNhbnRhcmFzLml0cmFuc3BhcmVuY2lhLmNv
bS5icoINeW9rby15b2tvLm5ldIILbWFuYS10ZWEuanCCJ3dvcmtlcnNlbnNlLmNv
bnNvbGUuc3RhZ2luZy5hcHBhYnJpay5qcIIOeWFsbGVnby5jb20ubXiCFmFwcC5k
ZXYuY2xhaW1zY2FsYy5jb22CEW5mdC50aXBpY2hhaW4uY29tggpzdGFnZS5nYW1l
ggpkYXktam9iLmlvghlwcm9tby11YXQuc3R5bGlzaG9wLnN0b3JlghV3d3cuYWZz
Y29tcGxpYW5jZS5jb22CD3d3dy5oZXR3b3Jrcy5mcoIZd3d3LnJhbmRvbWRyYWZ0
bGVhZ3VlLmNvbYIPamRsLmdhbWUwODQuY29tghJsaW5rcy5rbm93YWJsZS5meWmC
E3d3dy5mdW5sZWFybnByby5jb22CHXN0YWdpbmcuYXBwLmZpbmljYWxwb3J0YWwu
Y29tgg5hcHAuemVtZWx5LmNvbYIPcmVub3ZhdHRpby5tb2Jpgg9uYXNjaXRhZG9s
Y2UuaXSCCWRycGRydy5tZYIaY2hlY2tvdXQudGhlc2FmZXdheS5jb20uYnKCFXRl
YWNoZXIubW9iaWxlbWluZC5pb4IWZ29pYXNjb250YWRvcmVzLmNvbS5icoIJdW5p
dGVzLmlvgg1kYXRhbGxpdW0uY29tghFhZG1pbi5pbm5vYnl0ZS5wZYIad3d3LnRh
eGlhc3NvY2lhdGlvbnMuY28uemGCEnd3dy5kZXNzZXJ0bnljLm5ldIINd3d3LnZv
bGxpLmNvbYIPcnViaWt3YWxsZXQuY29tghljZG5zdGF0aWNpbnZlc3RvcnMuY2Ft
LnR2ghBhcGkubG9rYWxlYm9uLm5sggx3d3cub3dsLmdpZnSCHGRldi5saW5rLmhl
YWx0aGNhcmV3aW5ncy5jb22CGHYzLmNlbnRyZS5sYXZlbmlyYXBwcy5jb4IVd3d3
LnNhZGFxYWhqYXJ5YWguY29tghR3d3cub3JkcmVkdWJpdGFyZC5mcoIRaW1nLnBy
ZWd1bnRhei5jb22CHW15Y2hvaWNlYXBwLmJlbmVmaXRzb2x2ZXIuY29tghBwOTAz
aS5pa3V6YWtpLmpwghFzaG9wLnBsYW5ldDQubGlmZYIad3d3LnN1bnJpc2VpbnRl
cmlvcnMuY28uaW6CFWNvbnNvbGUuZ2V0bWVtby5jby56YYIZd3d3LnNhbmRzcHJp
bmdzZGVudGFsLmNvbYIOaHZjaC5zdHgud29ybGSCD2JldGEua2lwaW50by5jaIIQ
bWF0aHNueWFuYS5jby56YYIRd3d3LnNvYmllY2guY28udWuCE3d3dy5yZW5vdmF0
dGlvLm1vYmmCEWt1d2F0YXphaXRha3UuY29tggthcHAuZXFpcC5ub4IaZXBpbGF6
aW9uZS4yZ2JlYXV0eWNvbS5jb22CE3R1bW1vdXJvcmlnaW5hbC5jb22CFndlYi5l
ZGRzLXRlY2hub2xvZ3kuYmWCEHd3dy52YWxsZWNlci5vcmcwIQYDVR0gBBowGDAI
BgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8v
Y3Jscy5wa2kuZ29vZy9ndHMxZDQvUzl2VEpjV01WUjAuY3JsMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA
AAGLRmeo5gAABAMARzBFAiBWPd8ae8bfBX/G7nBCdhX/mlBP7UNC8S7H5GCWsJjk
SAIhAKmpTGeVafsllOc/YytZvUPQ/QkhZJ7SGK5HiMvLelVzAHYASLDja9qmRzQP
5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGLRmepDgAABAMARzBFAiEA7vzEkgFP
YWyPMh/TFbac7BRS/ed9IpduFVdWemvs89cCICrgOCu6A5A0fxFuRMh4Pas14SYr
9Ck9M0Fpc9iMnr2HMA0GCSqGSIb3DQEBCwUAA4IBAQBRoaEPFvdVBHln7abvDtY2
he+vkcOkt/fBVaqCrbBTlxUr0Aso5wCHJzztc7gsI22mzoTA2FInzAFFvGfTphxO
Vln3IQfuB56JQ6B6kDtgWUjaqPG66akV/AKwlYu0Ij5uskrX1M2jv1BY/Nbz1LOf
9yAq97cQo9/ZOI7c3J6j6/M6dbgrWcQu1wVxQoG/4jyH93eS6QqYypQNGVP0Xx44
sNCngL4Nyn2d9nCZ3RbWQOoOISaZkqfGgYlQOP2KOu5K5dsWzL/EAHhUDQh90d9y
nlEY+Go+i13Y91RS6qtMUUutmX5k61EIjzvvwrxbv995zJfKrX6QP1cY7zLdJbhA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297228636912975695796304988609120737234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 04:27:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 05:25:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thisbit.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/JKj8YmGRZsE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2045 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisbit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ansa35.anfitriones.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superpizzaman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twirp.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administratu.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.busykid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta.juniorhighgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelitymortgagebrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juggle.gschall.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administrativo.giross.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happy.ronne.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cse.gw2-strm-sds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scmicwisconsin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.samyata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'competition.s2pafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ais-tim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thornzfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphaswap.coinmerge.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbglassworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearchannel.fiksuruoka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wt.bytecolony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tetheryo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daisyh.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogadrishtii.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfingers.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrialehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spliffyworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diavac.lfv.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conversordolarblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yell-toyama.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebookpundits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gumblmail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaijin.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.trbu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.palladiumboots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ooomaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'last.francesiteweb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.unlimitedbiking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.ejsa.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.can.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.avada.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bn-official.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.nixt.banpunext.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.eliud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcantaras.itransparencia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoko-yoko.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mana-tea.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workersense.console.staging.appabrik.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yallego.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.claimscalc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nft.tipichain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.game'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'day-job.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo-uat.stylishop.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afscompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hetworks.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randomdraftleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdl.game084.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.knowable.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funlearnpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.app.finicalportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.zemely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovattio.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nascitadolce.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drpdrw.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.thesafeway.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher.mobilemind.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goiascontadores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unites.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datallium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.innobyte.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxiassociations.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dessertnyc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubikwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnstaticinvestors.cam.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lokalebon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.owl.gift'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.link.healthcarewings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v3.centre.lavenirapps.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sadaqahjaryah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordredubitard.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.preguntaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychoiceapp.benefitsolver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p903i.ikuzaki.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.planet4.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunriseinteriors.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.getmemo.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandspringsdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvch.stx.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.kipinto.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathsnyana.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sobiech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renovattio.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuwatazaitaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.eqip.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epilazione.2gbeautycom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tummouroriginal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.edds-technology.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vallecer.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/S9vTJcWMVR0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b4667a8e600000403004730450220563ddf1a7bc6df057fc6ee70427615ff9a504fed4342f12ec7e46096b098e448022100a9a94c679569fb2594e73f632b59bd43d0fd0921649ed218ae4788cbcb7a557300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b4667a90e0000040300473045022100eefcc492014f616c8f321fd315b69cec1452fde77d22976e1557567a6becf3d702202ae0382bba0390347f116e44c8783dab35e1262bf4293d33416973d88c9ebd87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0051a1a10f16f755047967eda6ef0ed63685efaf91c3a4b7f7c155aa82adb05397152bd00b28e70087273ced73b82c236da6ce84c0d85227cc0145bc67d3a61c4e5659f72107ee079e8943a07a903b605948daa8f1bae9a915fc02b0958bb4223e6eb24ad7d4cda3bf5058fcd6f3d4b39ff7202af7b710a3dfd9388edcdc9ea3ebf33a75b82b59c42ed705714281bfe23c87f77792e90a98ca940d1953f45f1e38b0d0a780be0dca7d9df67099dd16d640ea0e21269992a7c681895038fd8a3aee4ae5db16ccbfc40078540d087dd1df729e5118f86a3e8b5dd8f75452eaab4c514bad997e64eb51088f3befc2bc5bbfdf79cc97caad7e903f5718ef32dd25b840