starsign.dk

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 85:c8:b1:74:42:64:53:06:0a:00:00:00:00:a5:6b:86 was issued on by Google Trust Services.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=starsign.dk

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 85:c8:b1:74:42:64:53:06:0a:00:00:00:00:a5:6b:86
Serial Number (int): 177829382008614769920229993814212045702
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): 63:1e:06:ca:98:4c:fe:9c:83:79:20:ad:cd:31:26:8a:50:f5:5e:fa
Fingerprint (sha256): ab:32:6c:89:29:c6:a1:54:da:bd:a1:0e:e3:a6:90:21:4a:a2:db:90:a8:44:61:54:73:38:89:d7:7b:8b:ef:e2

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate starsign.dk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for starsign.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

starsign.dk
dev.claw.games
my.adminmate.io
luminarity.io
edjohnson.info
money.cowtech.it
www.codingarena.io
www.shikdertech.io
whosin.io
lp.poster.ne.jp
mcsd.kr
shikdertech.io
www.karmaparty.love
menhera-senpai.love
www.whosin.io
destinyunban.me
www.mcsd.kr
dl.tagrewards.cardbiz.com.my
www.destinyunban.me
www.thewhittingtons.org
vastgoed.woningselector.nl
tijdschriftenaanbieding.nl
www.siberianlarchwood.co.nz
www.annarborbikemap.org
developerweekend.org
demo.sharemeals.org
youngest.video
links.roomy.pk
jumpstart.mediumra.re
lab3.uk
tablechamp.at
swiftcord.atzu.xyz
invoice-staging.tiime.app
jumpstart-staging.mediumra.re
barexam.camp
santaisabella.com.ar
www.hoop.bike
rankingplaz.dev.usp.center
www.maquicorp.com.br
www.acceller.com.br
welcome130.7bitcasino.com
kinetika.com.co
app.wegoo.com.co
pay.invoicehub.co
ropsten.etherpixels.co
event.stable.codes
www.adiktiv-technologies.com
survey.healthybud.co
damosaseawind.rentalpal.co
www.amorgoshealthcare.com
project-w2-alpha.2pxborder.com
www.apaladar.com
www.beacondrycleaners.com
designer.awoshe.com
www.akesoftwares.com
bikeroger.com
www.bagnoler.com
athenabrowser.com
balajitilesgoa.com
www.darkrosepole.com
splitapps.busuu.com
call.cannactrl.com
mail.fitbeat.com
meetings.kiehnlein.com
www.carolandleo.com
deviffy.com
office.ejartech.com
savemybio.com
garage.sekrab.com
www.shaktimaira.com
siropemedia.com
www.savemybio.com
www.supremeximp.com
smartdata-sa.com
track.tenderd.com
es.teresabarrueco.com
www.siropemedia.com
thrillersolutions.com
thecharacterconference.com
bookings.theasiacollective.com
www.teresiansisters.com
www.traveldevs.com
tsifriends.com
www.tupodologa.com
t.untilgone.com
web4w3.com
www.valentingavran.com
applink.woot.com
www.voguatecnica.com
www.tsifriends.com
zolotokrylin.com
www.yusrimathews.com
basketball-stats.de
privacy.alfred.cz
dressya.de
steuerberatung-plesa.fastdocs.de
www.dronaero.de
patek.cz
www.basketball-stats.de
labeling.hobutech.de

Other certificates including the domain name starsign.dk

(limited to 100 certificates)
www.bankalert.app
starsign.dk
doohanigains.com
www.starsign.dk
destinyunban.me
tablechamp.at
pesquisa.uiclap.com
www.galaxyinvestmentpartners.com
mobile.dev.extracker.co
operation.cognite.com
deepdate.app
www.peti-peti.com
www.uorder.com.br
www.adiktiv-technologies.com
www.raveseguros.com
skipt.app
www.tuturnord.com
go.kartlink.net
iliospub.cm
deic.dev.app.konch.ai
www.altfuckclean.com
the-flock.org
www.morenoise.it
nike-sales-tracker.jwbaart.dev
dashboard-staging.w11.dev
secretmessageforwhatsapp.com
jemaelectrical.co.uk
go.kartlink.net
kyleschwartz.ca
partypay.nl
www.galaxyinvestmentpartners.com
pollsy.co
innovate.nonprod.my.oldmutual.co.za
starsign.dk
intranet.starsign.dk
drawnbyvago.co.uk
koruke.com
starsign.dk
static.youplant.com
jemaelectrical.co.uk
desiderioalmansa.com
www.morenoise.it

Certificate

The complete raw certificate details for starsign.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 177829382008614769920229993814212045702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-13 14:21:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-14 14:21:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'starsign.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2041 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starsign.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.claw.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.adminmate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminarity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edjohnson.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'money.cowtech.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codingarena.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shikdertech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whosin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.poster.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcsd.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shikdertech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karmaparty.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menhera-senpai.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whosin.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinyunban.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcsd.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.tagrewards.cardbiz.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinyunban.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thewhittingtons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vastgoed.woningselector.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tijdschriftenaanbieding.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siberianlarchwood.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annarborbikemap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developerweekend.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.sharemeals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngest.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.roomy.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumpstart.mediumra.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab3.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablechamp.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swiftcord.atzu.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice-staging.tiime.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumpstart-staging.mediumra.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barexam.camp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santaisabella.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoop.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rankingplaz.dev.usp.center'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maquicorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acceller.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome130.7bitcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinetika.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.wegoo.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.invoicehub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ropsten.etherpixels.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.stable.codes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adiktiv-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.healthybud.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damosaseawind.rentalpal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amorgoshealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project-w2-alpha.2pxborder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apaladar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beacondrycleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designer.awoshe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akesoftwares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikeroger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bagnoler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenabrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balajitilesgoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darkrosepole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitapps.busuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'call.cannactrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fitbeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetings.kiehnlein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carolandleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deviffy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.ejartech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savemybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.sekrab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaktimaira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siropemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savemybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supremeximp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdata-sa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.tenderd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.teresabarrueco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siropemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrillersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecharacterconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.theasiacollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teresiansisters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traveldevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsifriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tupodologa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.untilgone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web4w3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valentingavran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink.woot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voguatecnica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsifriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zolotokrylin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yusrimathews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketball-stats.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.alfred.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dressya.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuerberatung-plesa.fastdocs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dronaero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patek.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketball-stats.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labeling.hobutech.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001779bfb82d200000403004730450221009fbdd59e40d8e6e6eb8d16f921658db5b5106b71a0c028c14d39512a453b6da902206fe6d74df760ace4c0164e867741abe89c2d4ef99dcdfac10645a03742061f10007700eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f9000001779bfb82f70000040300483046022100b33070b870729e319f995142f27498181fe9f6dc404a4ac36cecb35969c0da5b0221009e1b6c53c28e61bc90d6dbaa4826389a5447f066a9e5f1ff3223f3fb2205adb3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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