kov.legal.ee

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 60:9b:8a:ab:a8:15:a7:1a:12:cc:08:30:1f:71:f9:00 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kov.legal.ee

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 60:9b:8a:ab:a8:15:a7:1a:12:cc:08:30:1f:71:f9:00
Serial Number (int): 128413506180985574159278268430976940288
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): f1:86:4e:7d:69:ac:30:cc:f7:92:7c:fc:fc:82:01:81:2b:f5:66:fc
Fingerprint (sha256): ae:7d:e6:8a:52:a7:b9:ff:3c:1b:07:ef:dd:f8:3b:17:1e:18:fb:55:73:36:ab:62:e0:db:e3:f5:d2:fb:21:f9

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Yfpiat1zpxc
CRL Distribution Point: http://crls.pki.goog/gts1d4/Qy48cM8oVoU.crl

Check the revocation status for certificate kov.legal.ee

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kov.legal.ee

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kov.legal.ee
heartbit.dev
claywell.digital
tomato.merdin.dev
triplenature.in
eccc.adrianleung.dev
www.youhavegoals.com
mypatta.in
clock.simonlary.dev
ion-turcanu.net
photos.markwclancy.com
unitedbits.games
deeplink.adoc.co.kr
booking.totaltravel.io
www.inspectordetector.com.au
ozzon.in
ilita.info
auth.busy.no
admin.p1.stx.world
www.ozzon.in
riofintech.net
miku.games
anzu.one
datagorillas.fr
www.adrien-vdk.dev
plsreturn.me
misbares.javimena.es
hkvbs.timeline.click
blog.yukselcoding.net
area251.org
www.zenappz.com
saintjerome.kards.fr
www.sayantan.tech
sterling-ts.org
thrillseeker.info
fluidsolutions.in
www.tutoryou.net
navitrips.com
www.cysero.net
timesrecord.column.us
barryplumbinginc.com
dagonmetric.com
www.intra-staging.walkie-talkie.io
www.quicktourney.xyz
app.thekunggroup.com
links.onlinenotary.net
robstar.org
www.dr-neli-mihneva.com
www.lepin.co.za
easyweb.colella.tech
kb.koah.dk
madurai.yazhdroptaxi.com
loungebureau.xyz
signup.donorflow.net
app-staging-hot.zenport.io
exam.wecodelife.com
www.helpingcreator.com
encryptmyfiles.com
intern.monis.rent
links.evexiaapp.site
play.evilapples.com
www.auditorsville.com
www.nupav.com
eladanivip.com
dev.tutka.meteo.fi
sb.reach-dev.me
fortemchem.com
admin.getplanta.com
link.aykutasil.com
oftalmoapp.com
exco.ge
kairoshospitalitytrading.com
www.thebandana.co
www.alasascoalition.com
drktechinfo.com
www.playtolearn.academy
mktesp.com
jaysondave.com
www.imoveisriobelem.com
poomchak.com
ok.jimmont.com
yog-qa.yds.org
cartage-mgmt-i.dev-ltl-xpo.com
sheeter.kelivon.com
www.nemidis.com
www.tchalam.com
polpa.work
thx.to
www.shadowverse.cards
gara.sk
promo.zang.io
link.saraya-totalhealth.com
project.jimmont.com
www.seismic.tv
entekra.portal.plenadata.com
online.fambesdiagnostics.com
eventbuddy.squadops.gg
www.chantalfavager.com
dhanachal.in
saanpx.aimcomely.com

Other certificates including the domain name legal.ee

(limited to 100 certificates)
netdata.kpots.com
nxt.camp
www.rk.legal.ee
hey-firebase.indigen.com
links.autotext.mobi
tothe9slimos.com
kurzer.de
test.teylormade.com
edit.xinx.me
ingogo-traveller-test2.ingogodev.net
musicmausam.com
www.hollyjfitnessapp.com
www.legal.ee
app.ppenv-wekicards.com
kov.legal.ee
mploy.ai
www.tietheknot.tk
one-plus-two.com
www.marcjulian.de
tree-rings-art.com
prereg.percap.se
derneuenovak.at
gnista.app
windowseat.agency
www.centromueblescali.com
cybergine.com
www.fastvb.co
edubarbieri.com.br
www.hauzon.com.br
rk.legal.ee
classmate.fitness
unetlogic.com
taccess.lfv.jp
www.artinrez.com
leticiavalladares.me
www.goodcash.co
www.markhavas.com
edit.xinx.me
www.interviewdog.com
rhino.savannahpods.com
sanexa.ai
directorioagenciasdigitales.com
matchplay.ainsworth-goats.co.uk
dev.oneclickbid.com
prereg.percap.se
sskies.co
prominsa.com.do
trimurticonventschool.com
www.reviewduke.com
ferdaaetlan.fo
www.munshig.in
scubadivi.ng
www.institutoexito.com.br
www.davidedet.com
desingfloor.com.ar
schulte.game-cradle.com
abraki.com
mploy.ai
taccess.lfv.jp
kickin.app
medimynds.com
www.cyberbaires.com.ar
cgtconsultants.com
karanmann.ca
scubadivi.ng
www.lucienbevernagestraat5.be
www.winner-english.com
www.legal.ee
www.christmasjigsawpuzzle.com
camp.runrun.dk
webauthn.ngecamp.co.id
axesscleaners.com
www.secretagent.ai
admin.gymbook.in
www.zippinder.com
scrsvr.duongdev.me
boymarin.com
www.gispgestaosegura.com.br
app.ensaturno.com
www.klokisoft.hr
i.foxpay.vn
sanexa.ai
www.saindev.ru
golnk.cc
tree-rings-art.com
iptu.anapolis.go.gov.br
www.balticinternationalgroup.ee
app.ppenv-wekicards.com
cast.ovalcast.com
one-plus-two.com
averagejo.be
legal.ee
www.tweetsweep.app
staging.banknote.sa
kov.legal.ee
auth.thisflix.com
rebus.surv.in
cast.ovalcast.com
gdgkutahya.com
test.phamdac.ga

Certificate

The complete raw certificate details for kov.legal.ee in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM1DCCC7ygAwIBAgIQYJuKq6gVpxoSzAgwH3H5ADANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDA0MTIyMTUwMzhaFw0yNDA3MTEy
MjQ4MzVaMBcxFTATBgNVBAMTDGtvdi5sZWdhbC5lZTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBANIgOPnVCloDLHIwsHorMHoOPwNPLsa3xyjcBpwOv8/j
je2crVmgIL8fqvhEqoIH1TmOvGILBIk5x6A4aYIK1q2+tgn/xwXousw+MLiQAhUT
OCrUilhyBbI/Yy2GqmloiJvws+KH7OdcEgIsSPPZZYTAPafv1Imre192N52Ia38X
wUOCUU+o5+TvfHPKr9jLAlt2TU6G+VkelicQUtkFpP/7VTDIzk4YuvcGodd2yBXI
Jd6QZQ/8rkQtCffdU6llfQmIFdclNbbIePQhF2Q/No16rROFAlCdlUeBsK0YXKaG
sc3Dq4U8hD52JRy9i5xG0NiSSkXRjDnoDrFXZXN3voECAwEAAaOCCeswggnnMA4G
A1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBQGqdzZFD1Q9RuY7bbdEee9FrcM/DAfBgNVHSMEGDAWgBQl4hgO
sleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0
dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L1lmcGlhdDF6cHhjMDEGCCsGAQUF
BzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVyMIIHjwYD
VR0RBIIHhjCCB4KCDGtvdi5sZWdhbC5lZYIMaGVhcnRiaXQuZGV2ghBjbGF5d2Vs
bC5kaWdpdGFsghF0b21hdG8ubWVyZGluLmRldoIPdHJpcGxlbmF0dXJlLmlughRl
Y2NjLmFkcmlhbmxldW5nLmRldoIUd3d3LnlvdWhhdmVnb2Fscy5jb22CCm15cGF0
dGEuaW6CE2Nsb2NrLnNpbW9ubGFyeS5kZXaCD2lvbi10dXJjYW51Lm5ldIIWcGhv
dG9zLm1hcmt3Y2xhbmN5LmNvbYIQdW5pdGVkYml0cy5nYW1lc4ITZGVlcGxpbmsu
YWRvYy5jby5rcoIWYm9va2luZy50b3RhbHRyYXZlbC5pb4Icd3d3Lmluc3BlY3Rv
cmRldGVjdG9yLmNvbS5hdYIIb3p6b24uaW6CCmlsaXRhLmluZm+CDGF1dGguYnVz
eS5ub4ISYWRtaW4ucDEuc3R4Lndvcmxkggx3d3cub3p6b24uaW6CDnJpb2ZpbnRl
Y2gubmV0ggptaWt1LmdhbWVzgghhbnp1Lm9uZYIPZGF0YWdvcmlsbGFzLmZyghJ3
d3cuYWRyaWVuLXZkay5kZXaCDHBsc3JldHVybi5tZYIUbWlzYmFyZXMuamF2aW1l
bmEuZXOCFGhrdmJzLnRpbWVsaW5lLmNsaWNrghVibG9nLnl1a3NlbGNvZGluZy5u
ZXSCC2FyZWEyNTEub3Jngg93d3cuemVuYXBwei5jb22CFHNhaW50amVyb21lLmth
cmRzLmZyghF3d3cuc2F5YW50YW4udGVjaIIPc3RlcmxpbmctdHMub3JnghF0aHJp
bGxzZWVrZXIuaW5mb4IRZmx1aWRzb2x1dGlvbnMuaW6CEHd3dy50dXRvcnlvdS5u
ZXSCDW5hdml0cmlwcy5jb22CDnd3dy5jeXNlcm8ubmV0ghV0aW1lc3JlY29yZC5j
b2x1bW4udXOCFGJhcnJ5cGx1bWJpbmdpbmMuY29tgg9kYWdvbm1ldHJpYy5jb22C
Ind3dy5pbnRyYS1zdGFnaW5nLndhbGtpZS10YWxraWUuaW+CFHd3dy5xdWlja3Rv
dXJuZXkueHl6ghRhcHAudGhla3VuZ2dyb3VwLmNvbYIWbGlua3Mub25saW5lbm90
YXJ5Lm5ldIILcm9ic3Rhci5vcmeCF3d3dy5kci1uZWxpLW1paG5ldmEuY29tgg93
d3cubGVwaW4uY28uemGCFGVhc3l3ZWIuY29sZWxsYS50ZWNoggprYi5rb2FoLmRr
ghhtYWR1cmFpLnlhemhkcm9wdGF4aS5jb22CEGxvdW5nZWJ1cmVhdS54eXqCFHNp
Z251cC5kb25vcmZsb3cubmV0ghphcHAtc3RhZ2luZy1ob3QuemVucG9ydC5pb4IT
ZXhhbS53ZWNvZGVsaWZlLmNvbYIWd3d3LmhlbHBpbmdjcmVhdG9yLmNvbYISZW5j
cnlwdG15ZmlsZXMuY29tghFpbnRlcm4ubW9uaXMucmVudIIUbGlua3MuZXZleGlh
YXBwLnNpdGWCE3BsYXkuZXZpbGFwcGxlcy5jb22CFXd3dy5hdWRpdG9yc3ZpbGxl
LmNvbYINd3d3Lm51cGF2LmNvbYIOZWxhZGFuaXZpcC5jb22CEmRldi50dXRrYS5t
ZXRlby5maYIPc2IucmVhY2gtZGV2Lm1lgg5mb3J0ZW1jaGVtLmNvbYITYWRtaW4u
Z2V0cGxhbnRhLmNvbYISbGluay5heWt1dGFzaWwuY29tgg5vZnRhbG1vYXBwLmNv
bYIHZXhjby5nZYIca2Fpcm9zaG9zcGl0YWxpdHl0cmFkaW5nLmNvbYIRd3d3LnRo
ZWJhbmRhbmEuY2+CF3d3dy5hbGFzYXNjb2FsaXRpb24uY29tgg9kcmt0ZWNoaW5m
by5jb22CF3d3dy5wbGF5dG9sZWFybi5hY2FkZW15ggpta3Rlc3AuY29tgg5qYXlz
b25kYXZlLmNvbYIXd3d3Lmltb3ZlaXNyaW9iZWxlbS5jb22CDHBvb21jaGFrLmNv
bYIOb2suamltbW9udC5jb22CDnlvZy1xYS55ZHMub3Jngh5jYXJ0YWdlLW1nbXQt
aS5kZXYtbHRsLXhwby5jb22CE3NoZWV0ZXIua2VsaXZvbi5jb22CD3d3dy5uZW1p
ZGlzLmNvbYIPd3d3LnRjaGFsYW0uY29tggpwb2xwYS53b3JrggZ0aHgudG+CFXd3
dy5zaGFkb3d2ZXJzZS5jYXJkc4IHZ2FyYS5za4INcHJvbW8uemFuZy5pb4IbbGlu
ay5zYXJheWEtdG90YWxoZWFsdGguY29tghNwcm9qZWN0LmppbW1vbnQuY29tgg53
d3cuc2Vpc21pYy50doIcZW50ZWtyYS5wb3J0YWwucGxlbmFkYXRhLmNvbYIcb25s
aW5lLmZhbWJlc2RpYWdub3N0aWNzLmNvbYIWZXZlbnRidWRkeS5zcXVhZG9wcy5n
Z4IWd3d3LmNoYW50YWxmYXZhZ2VyLmNvbYIMZGhhbmFjaGFsLmlughRzYWFucHgu
YWltY29tZWx5LmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUD
MDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFkNC9R
eTQ4Y004b1ZvVS5jcmwwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQAZmBBxCfDW
Ui4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY7UgX7tAAAEAwBGMEQCIDkJkRuL
mJGsrQwEj/UlBYIv4Dy079w6zTSkDErc79nYAiAriDewOyS+St2YQVu85AReYAcB
Sqfmdh4WbJRibrbxVwB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb
AAABjtSBfoAAAAQDAEYwRAIgHrNpy3jdwNxb16N1MnCk+Q7EPhQChKipeYVFH4nO
QkcCIDC2uK0s71AeIgS1hviD7s9Mt3BNNQKufqQq5ArNYSU0MA0GCSqGSIb3DQEB
CwUAA4IBAQAdB9xnz70ykoOhXvTNP2/rRWdY0LVuIksyniDCx1mY5F1V8MNAKEJ/
AXFBYoJtlQz5L0FIyw5HgPrhldJLBUbzTpAk/4621A6D1emaAlSOTOsXxfLdmJ3g
O9a4hNHQUhVQ0+QZFFFaiTDmmJCQSB3GTQjuVfPbinRbLt0aINLFgK7GGjbPiCjD
qXwLCy1vL+e6dKOSsV56KNuoSZNVG2UvDGr/KLdyyv9E7IeEoBpyuMVDpSdwi9OB
FBBfhkX4G5ExMSyGA1y8dcGxJW+WRgk0XhO57xJ8/+AHdKi+6qpQHi8m4kedjSqV
QpJfztZNHQArrCHS19SIzgUgTl3nggpv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128413506180985574159278268430976940288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 21:50:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 22:48:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kov.legal.ee'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Yfpiat1zpxc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1926 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kov.legal.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartbit.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claywell.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomato.merdin.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triplenature.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eccc.adrianleung.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youhavegoals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypatta.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clock.simonlary.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ion-turcanu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.markwclancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedbits.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplink.adoc.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.totaltravel.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspectordetector.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozzon.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilita.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.busy.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.p1.stx.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozzon.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riofintech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miku.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anzu.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datagorillas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adrien-vdk.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plsreturn.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misbares.javimena.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkvbs.timeline.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.yukselcoding.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area251.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zenappz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjerome.kards.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sayantan.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterling-ts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrillseeker.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidsolutions.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutoryou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navitrips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cysero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesrecord.column.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barryplumbinginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dagonmetric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intra-staging.walkie-talkie.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quicktourney.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thekunggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.onlinenotary.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robstar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dr-neli-mihneva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lepin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyweb.colella.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.koah.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madurai.yazhdroptaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loungebureau.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.donorflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-staging-hot.zenport.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exam.wecodelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpingcreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encryptmyfiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intern.monis.rent'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.evexiaapp.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.evilapples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auditorsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nupav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eladanivip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tutka.meteo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb.reach-dev.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortemchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.getplanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.aykutasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oftalmoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kairoshospitalitytrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebandana.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alasascoalition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drktechinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playtolearn.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktesp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaysondave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoveisriobelem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poomchak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ok.jimmont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yog-qa.yds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartage-mgmt-i.dev-ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheeter.kelivon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nemidis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tchalam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polpa.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thx.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shadowverse.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gara.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.zang.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.saraya-totalhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.jimmont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seismic.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entekra.portal.plenadata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.fambesdiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventbuddy.squadops.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chantalfavager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhanachal.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saanpx.aimcomely.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Qy48cM8oVoU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ed4817eed000004030046304402203909911b8b9891acad0c048ff52505822fe03cb4efdc3acd34a40c4adcefd9d802202b8837b03b24be4add98415bbce4045e6007014aa7e6761e166c94626eb6f157007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ed4817e80000004030046304402201eb369cb78ddc0dc5bd7a3753270a4f90ec43e140284a8a97985451f89ce4247022030b6b8ad2cef501e2204b586f883eecf4cb7704d3502ae7ea42ae40acd612534
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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