offgen.net

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number c5:2b:3e:75:71:72:d9:7a:12:2c:e6:bb:9b:d0:2a:55 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=offgen.net

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c5:2b:3e:75:71:72:d9:7a:12:2c:e6:bb:9b:d0:2a:55
Serial Number (int): 262082450748746515781157880874105055829
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b6:7a:3a:a5:e7:4b:47:9e:6a:75:6d:e3:3c:d0:93:2b:cc:92:22:06
Fingerprint (sha256): b2:19:49:5e:1d:00:d7:4d:c6:9b:c2:b9:37:49:8e:87:cf:02:87:3b:3f:b9:af:29:b4:79:98:8f:35:50:f3:11

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/_un2uT5ZRrQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/1r9z6nVly_E.crl

Check the revocation status for certificate offgen.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for offgen.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

offgen.net
www.scottlinenberger.com
dev.mozzazcare.com
crsdemo.aghedgedesk.com
moore-acres.com
stagingdarkhorseapp.com
dev.stores.duit.io
app.getoverwatch.in
m.wickedcampers.com.au
whatisbitcoinworth.com
letsplant.app
www.onwe.fr
www.palle.app
dev-crd.bms.vision
carlosplayground.io
npex.link
cyberneticfitness.app
payments.universalathletic.com
www.lukeharwood.dev
l.mydojotime.com
nymarivadavia.turnosweb.app
www.userelish.com
dev.tictacfit.fr
tictactoe.zzpdavid2.com
www.pasteque.app
carpediem.hypnero.com
testing.wl.titanbay.com
www.pdocuments.com
www.studmane.com
fbgralpaz.turnosweb.app
twittersplitter.webfussel.de
www.vaihde.io
digitalarms.net
jokisch-fluids-kalkulator.enra.app
nymacapital.turnosweb.app
1918media.com
portal.maisindependente.com.br
invite.hitract.se
maestriaimoveis.com.br
www.elearningipev.com
admin.nageswarmatrimony.com
wwqw.divshot.com
builder-gen.smartimob.io
esptapi.gogawi.net
couchclimbs.com
www.ilearnswe.io
dev-dynamic-link.soundadvice.ai
www.lasermark.pl
ads-demo.maia.global
tournament.troves.gg
dashboard.unyte.com
bride-cams.com
app.doubletwist.com
marrarware.com
www.naxam.net
app.fluctusapp.com
filmempireapp.com
jondavie.com
youthlead.mn
pay.bkn.outmatic.pl
auth.announce.today
proteum.digital
nationsburgerstation.com
plantilla.9-9.be
fb.swayam2.ac.in
inukso.com
unicorntemple.com
assets.fluoretto.com
mobile-dev.stoick.io
vitaminds.nu
tidsrapportering.internetport.com
www.matthiastrilsbach.com
sirt6apps.com
rexrothdev.com
www.casco.in
app.buy-gadgets.com
festivalesnauticosmx.com
auth.demo.next-audit.de
fincadonguelo.com
ctms-dev.hu-care.com
mukuwemoyoengineering.co.za
www.jcysu.com
vmi.speakylink.com
uptightchill.com
app.alinekaehler.com
vmi-app.speakylink.com
gagpro.fr
www.brightanalyst.com
mt410-driverapp.itf-as.com
admin.univacity.com
cpland.originsme.com
firebase.sharehows.com
missiondmatuf.com
www.markcabanero.com
www.hackydeals.com
auth.countingsheep.app
ellagal.com
www.lefsilver.com
notas.carpinteriapako.es
www.slideuplink.com

Other certificates including the domain name offgen.net

(limited to 100 certificates)
racistcops.com
tapsakuvaa.com
dreamignitor.com
talvi.com.ar
antrian.w3aset.com
northtamericatestdec2021.kanto.co
carbonfootprint.dev
www.delf.com.br
www.bd365-management.com
kidsup.net
manaveiculos.com.br
dracarsys.com
rtro.co
sabletta.com
pledger.fig.org
clarx.com.au
www.offgen.net
br6cricket.com
aiducation-uat.pulsar-sd.com
clarx.com.au
www.karelhaerens.be
login.stage.weje.io
blob.chat
www.cloudindus.com
www.gateinteriors.com
dashboard.djhealth.com.au
entry-control.iframes.connfair.com
textalissa.elitebodysculpture.com
budget.wbrawner.com
www.joegracephoto.com
umatec.pe
beat.exposed
mobileapp.canopytax.com
offgen.net
api.zap.pw
capitalflux.app
www.sendflash.com
admin.ceremoney.co.za
mylittleshop.trade
thekigali.com
offgen.net
mylittleshop.trade
www.hiaham.com
riekehelmers.com
www.betting-companion.com
www.leviesrasi.hu
members.pickupguitar.club
garciatech.com
vendeme.app
riekehelmers.com
www.ahmadkadhim.com
healthyhabits.racgp.org.au
arpitgandhi.dev
www.re-mind.app
app.texponential.com
www.hungerzkart.com
racistcops.com
cpaira.com
afifnass.com

Certificate

The complete raw certificate details for offgen.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262082450748746515781157880874105055829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 20:01:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 20:58:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'offgen.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/_un2uT5ZRrQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2095 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offgen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scottlinenberger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mozzazcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crsdemo.aghedgedesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moore-acres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingdarkhorseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.stores.duit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.getoverwatch.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.wickedcampers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatisbitcoinworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsplant.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onwe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palle.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-crd.bms.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlosplayground.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npex.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberneticfitness.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.universalathletic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lukeharwood.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.mydojotime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymarivadavia.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.userelish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tictacfit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tictactoe.zzpdavid2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pasteque.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpediem.hypnero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.wl.titanbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdocuments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studmane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbgralpaz.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twittersplitter.webfussel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaihde.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalarms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokisch-fluids-kalkulator.enra.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymacapital.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1918media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.maisindependente.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite.hitract.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maestriaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elearningipev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nageswarmatrimony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwqw.divshot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'builder-gen.smartimob.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esptapi.gogawi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couchclimbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilearnswe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-dynamic-link.soundadvice.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lasermark.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads-demo.maia.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tournament.troves.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.unyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bride-cams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.doubletwist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marrarware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naxam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fluctusapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmempireapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jondavie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youthlead.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.bkn.outmatic.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.announce.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proteum.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationsburgerstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantilla.9-9.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.swayam2.ac.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inukso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicorntemple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.fluoretto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-dev.stoick.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminds.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tidsrapportering.internetport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matthiastrilsbach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirt6apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexrothdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casco.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.buy-gadgets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festivalesnauticosmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.demo.next-audit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fincadonguelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctms-dev.hu-care.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mukuwemoyoengineering.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcysu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmi.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptightchill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.alinekaehler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmi-app.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gagpro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightanalyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt410-driverapp.itf-as.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.univacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpland.originsme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.sharehows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missiondmatuf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markcabanero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hackydeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.countingsheep.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellagal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefsilver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notas.carpinteriapako.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slideuplink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/1r9z6nVly_E.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c4b3c51b60000040300463044022030337350f0630e09538a33964e3d34425a9c74573ea1428bcac7448879bf1ffc022004027840bfe4c02ac88fef458da432d4d46e6c7e73017c3266d2829625442a5500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c4b3c51c80000040300473045022100de23c1a3b2b75035ff512d9e9f44111fbb4ad4263e75676378159119d45cf02f02202a4e5c578b0b28b1338743c56efa126cbdcb53d55f7cb9556b00cd87d2a57259
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fdf4dcbe499a663130c61c7c52ef59205c93391aad51578ecc21a890f14a25d38fef59ecc89ba0b0f7a91be349113bbbc368d69b2253473ad91b8c565639a042f992c8b504f11a883fca38fa025d219f1f481b19be68402c8995c6da36cbd36e83b83ed7e0bb2b54dc74d750c155c3adb96b9e9253c7b30325ae98efeb025a0f4742888d7ba5eb600e8394a0a4bc8e81b734800c559d89116c75828948f8ef3b0affd43bd77b0a82ab0d7b2c2c77acb2cb1072bf7b57b14324a0fea2bc552511c844feee37de285d2b776bf57cfb6e4b2cc2d5ecfdd35ce7cd35a7f4e3dbe2bb4604c1b43414293a49bc93d9cebe8819b990e37e5ea2fa4380fdea2af2ba61c