citic.fundman.ai

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 5c:97:d9:26:07:b0:4a:42:09:ee:0f:e2:dd:fc:bd:72 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=citic.fundman.ai

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:97:d9:26:07:b0:4a:42:09:ee:0f:e2:dd:fc:bd:72
Serial Number (int): 123077416733784703919907137891960929650
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 92:a8:2b:9e:ab:c9:0b:e0:50:be:13:53:4e:68:bc:ce:ca:08:bf:0e
Fingerprint (sha256): af:11:e0:b5:b8:e4:62:3c:a8:32:0e:14:b2:ba:16:37:30:50:41:42:c4:c8:5b:5b:87:c2:e8:fc:ca:fa:ce:47

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/6juWg37TjAM
CRL Distribution Point: http://crls.pki.goog/gts1d4/J2j3RCiEy04.crl

Check the revocation status for certificate citic.fundman.ai

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citic.fundman.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citic.fundman.ai
okapia.land
firepress-dev.ultimateshred.co.uk
auth.capsule.guru
www.kofiboy.com
tsunami.nz
kapadokyaninmerkezi.com
globeone.org
fitness.okuyan.me
test.kikoto.es
www.vksportsacademy.in
wansudon.site
unsubscribe.link.litta.co
www.amritdhakal.com.np
festodunantul.hu
visualization.atil.io
www.myholo.io
104.tw
patrickgrey.co.uk
latest.llc
rjmgdev.mobi
pay.projectyou.melbourne
www.flowpodcast.com.br
www.nursecall.co.id
appliedsentience.ai
www.iceboxstudios.com
nerdlk.biz
medrie.bce.dev
notes.bedr.me
www.stwvoyager.app
webpofol.com
nkw.harisumiran.org
www.bibi.it
www.headsup.hockey
www.latest.llc
www.tastematch.app
dev.barbago.app
martinez.ai
get-uniq.com
www.scrollcase.co
stwvoyager.app
www.app-dev.getpilot.ai
www.gs-immoservice.com
www.hydropony.pl
andwhatof.com
live.binora.com.ua
future.showroom.app
www.joinvillehostel.com.br
www.rufiguty.com.br
daigostudio.com
api.tanto.app
book.tanto.app
andrewstunts.com
admin-panel.colorffy.com
jcruat2.console.aigens.com
account.tanto.app
davidmals.com
thenithreads.estore.business
alcazarhospitality.com
www.albaseguros.mx
www.auramob.fr
citrusbrewing.com
latushparestaurantes.com
msf-api.appyfurious.com
fasttrack.rothbury.co.nz
empresas.carbee.com.br
link.winwalk.app
app.blauwdrukbouw.nl
www.aceroofingeb.com
www.colorpop.studio
flightlinevr.com
fiorgo.com
completemore.com
www.alphatech.com.pe
app.immersiv.io
www.carmenandattilio.com
www.isdesoosopen.nl
atoasttonyc.com
rawmoonstudio.com
www.masquerade-brooklyn.com
hotelbnight.com
app.recall.wiki
www.dose.management
link.mealdj.com
msf365.com
app.meetlib.com
liveombre.com
demo.minimal-lp.com
driver.heliot-dev.com
www.aviron-simulations.com
truckingservice.studiossolution.com
www.opread.com
alpha.mossworkspace.com
dl.mccoyapp.com
nzsapps.com
austech.dev
roller.mseefelder.com
chokomemo.zunchiki.com
plantavirtual.cl
scheduler.advancedhealthmedicalcenters.com

Other certificates including the domain name fundman.ai

(limited to 100 certificates)
phx.ninja
mdr-order.emon.club
junoway.com
www.helm.tk
rfbcevents.com
skywatchers.in
eoctherapyservices.com
csm-vrchlabi.cz
eventsearch.sahajmarg.org
webapp.flaner.com
staposetiti.com
call.telesastho.com
www.room22.studio
haavun.in
saarthieducation.trustin.app
hangseng.fundman.ai
reunion.creativecommunity.fr
www.38enterprisegloballimited.com
web.mediapam.tv
kevin-leach.com
admin.yathit.com
webapp.flaner.com
launchboard.app
topplip-admin.dev
reservas.wokiapp.com
nopurchasenecessary.goldenticket.app
kre8.tv
flipit.me
onty.chat
links.eurekasurveys.com
alcanon.com
www.conamer.io
jonathan-dennis.co.uk
test.glitchanimation.com
queue-coworker-prod.digitalse.ikea.com
writer.comsubsc.com
github-issue-viewer.gcrozariol.me
crm.axwhite.com
m1-admin.m1studio.co
link.makana.plazah.com
backoffice.autovio.de
www.referral24.in
www.wordgraph.io
artgravina.com
cmonbet.me
instahollymodels.meander.media
overlay-experify-dev.experify.io
wreckroomentertainment.com
byselfies.com
me.pokymon.ml
mamagallinasitters.com
www.noahhayes.com
pansophiclabs.com
linkup.page
www.joinfluffydeveloper.co.uk
www.consulting.robot-valley.com
app.dev.progi.com
harikunj.estore.business
phx.ninja
www.denxer.com
applinks.efteling.com
app.boomerangapi.com
wonderplace.info
dev-01.hipaasap.com
dev.wandellint.nl
dibbery.co.uk
share.stage.oxygean.com
www.closedirt.com
acrofactoryelche.com
www.chepex.com
iot.krate.app
www.restylesoft.com
app.boomerangapi.com
app.pefoma.com
saarthieducation.trustin.app
mettle.studio
share.stage.oxygean.com
fromthisdayforth.ie
www.dddeurope.com
drvidyasagarc.com
www.wearemarmota.com
www.eth.cafe
yyoga.me
vistadamuri.it
www.stylohome.cam
www.taurasolucoes.com.br
adminsite.avfireworks.com
citic.fundman.ai
priority-app.oz-tms.com
app9corthodontics.com
www.clenmo.com
lifeorg.app
manemedi.co.za
tog.systemdesign.no
buraqautomate.pk
hostedassets.ovo.com
www.link.test.shoofti.com
www.ln-training.com
www.spendgroup.app
www.c3l.io

Certificate

The complete raw certificate details for citic.fundman.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123077416733784703919907137891960929650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 15:55:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 16:53:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citic.fundman.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/6juWg37TjAM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1988 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citic.fundman.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okapia.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firepress-dev.ultimateshred.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.capsule.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kofiboy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsunami.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapadokyaninmerkezi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globeone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitness.okuyan.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.kikoto.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vksportsacademy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wansudon.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsubscribe.link.litta.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amritdhakal.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festodunantul.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualization.atil.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myholo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '104.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrickgrey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latest.llc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjmgdev.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.projectyou.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flowpodcast.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nursecall.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliedsentience.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iceboxstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerdlk.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medrie.bce.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notes.bedr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stwvoyager.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpofol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkw.harisumiran.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bibi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headsup.hockey'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latest.llc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tastematch.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.barbago.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinez.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get-uniq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrollcase.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stwvoyager.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app-dev.getpilot.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs-immoservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydropony.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andwhatof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.binora.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'future.showroom.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinvillehostel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rufiguty.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daigostudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.tanto.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.tanto.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewstunts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-panel.colorffy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcruat2.console.aigens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.tanto.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidmals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenithreads.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcazarhospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albaseguros.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auramob.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrusbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latushparestaurantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msf-api.appyfurious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasttrack.rothbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empresas.carbee.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.winwalk.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.blauwdrukbouw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aceroofingeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colorpop.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightlinevr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiorgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completemore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphatech.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.immersiv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmenandattilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isdesoosopen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atoasttonyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawmoonstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masquerade-brooklyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelbnight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.recall.wiki'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dose.management'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.mealdj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msf365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.meetlib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveombre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.minimal-lp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driver.heliot-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviron-simulations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckingservice.studiossolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.mossworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.mccoyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austech.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roller.mseefelder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chokomemo.zunchiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantavirtual.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.advancedhealthmedicalcenters.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/J2j3RCiEy04.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c54a7c5f100000403004730450221008db435cdce4f9932522ea3a6fed8b96095d0e2a26b44d66d685afa6aab163abd022061aa030a17a980d49ecc2262c5df8e8b6f3829200bfa62a5ad30a67bf45c3f060076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018c54a7c5dc00000403004730450221009efab25c02b157f18b9b3ebef031691cbdc27354db3a93bdc33281bd917afe1102200470de6807243582464f8883c94dcc877fa810eea4a219706b088ab3c351f3bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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