www.kronfelt.org

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a8:89:4a:a3:30:7a:bf:33:0a:a1:b7:07:3f:83:75:72 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kronfelt.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a8:89:4a:a3:30:7a:bf:33:0a:a1:b7:07:3f:83:75:72
Serial Number (int): 224023161788989970416612482541374633330
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 4c:f9:8b:ca:52:30:72:6c:71:94:f4:97:59:f5:c1:dc:8f:33:d0:c3
Fingerprint (sha256): b3:4c:40:b2:2e:45:23:2b:46:38:de:65:1a:46:dc:c0:80:51:db:82:d6:80:09:03:7a:16:57:28:d9:28:2c:0e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/TrEoXAhujoI
CRL Distribution Point: http://crls.pki.goog/gts1d4/_75fQoxNWvM.crl

Check the revocation status for certificate www.kronfelt.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kronfelt.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kronfelt.org
theiropen.page
www.openteam.space
auth.google.snews.tv
login.saga.einride.dev
mart3.io
ocsadmin.blastitallchicago.com
resgatar.noirpodcast.com.br
wavesalescorporation.ml
www.josh-davis.dev
demo.vx-events.com
www.lindener.it
inter.mx
www.robocare.co.in
hichemtech.works
join.myfy.shop
sadata.ws
grupovenados.ceropapel.mx
volvamosaimprimir.com.mx
headspace-ewa-prod.ellipsishealth.net
optimumonline.se
mms.recruiting-solutions.org
zingo.avlmanager.mx
tr3b.us
app.duluman.ro
app.wandb.ai
hoadon.hosodientu.vn
trys2.us
www.eventforge.io
en.didrik.tech
reportes.tecint.mx
natumon.dak.vn
hasznos.altalanos.info
klamaifairoo.edvisory.co.th
www.codifier.xyz
static.mockingbird.studio
potto.app
www.bregjeadvies.nl
indoorbar.app
www.visioncrypto.app
cortisol.app
eksagono.com
trui4.us
william-scholder.ch
dt.agrotopus.com.br
estimates.smudge.app
ingogo-traveller-staging.ingogodev.net
agente.poderegularizar.com.br
heilpraktiker-heitersheim.ivlivs.dev
db.alile.us
nestorcafe.com.br
videos.fidelizzare.app
www.people.af
aiu.zebull.in
it-admin.mysodexo.app
vogel.com.bo
lig-demo.picol.app
oceomusic.com
www.riskfi.network
bettercode.ml
www.mediapp.ml
app.mytorahkids.com
pingenerator.com
piotoolkit.app
telestroke-doctor.sevaro.com
invoice.piedevelopers.com
www.pixielity.com
telestroke-hospital.sevaro.com
tipocosa.it
www.paddyb.com
www.lyricsart.website
shoharab.com
gerrenseow.com
www.whiteboxprop.com
www.aztecshields.net
marvelous.shoesprays.com
consaltex.de
talento.programavalentina.com
www.bleepbloop.app
wemote.xgoogler.de
www.yeekee4d.com
powerhousebotten.se
www.hardcorn.ml
app.mysundayteam.com
www.myvirtkick.com
staging.penguin.pharmacy.ishealth.app
www.killerid-kr.netkiller.com
www.yllaslodge.com
archivo.transparenciasonora.org
dashboard.analyzee.io
www.reecewalter.com
dev.audiomob.io
moraviaimoveis.com.br
lordismyshepherd.in
e2e-domain2.enotice.io
sparklect.com
smudge.dev
links.amineware.net
link.quii-app.de
app.staging.voicepop.de

Other certificates including the domain name kronfelt.org

(limited to 100 certificates)
mart3.io
www.michaeladams.me
www.kronfelt.org
fgchq.com
partenaires.reseau-sphere.com
mac.sbd.tools
bills-manager.app
get.kiliaro.com

Certificate

The complete raw certificate details for www.kronfelt.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 224023161788989970416612482541374633330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-21 18:01:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-21 18:59:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kronfelt.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/TrEoXAhujoI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2063 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kronfelt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theiropen.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openteam.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.google.snews.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.saga.einride.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mart3.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsadmin.blastitallchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resgatar.noirpodcast.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavesalescorporation.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.josh-davis.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.vx-events.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lindener.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inter.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robocare.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hichemtech.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.myfy.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadata.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupovenados.ceropapel.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvamosaimprimir.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headspace-ewa-prod.ellipsishealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimumonline.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.recruiting-solutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zingo.avlmanager.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr3b.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.duluman.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.wandb.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoadon.hosodientu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trys2.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventforge.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.didrik.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportes.tecint.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natumon.dak.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasznos.altalanos.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klamaifairoo.edvisory.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codifier.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.mockingbird.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potto.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bregjeadvies.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indoorbar.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visioncrypto.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortisol.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eksagono.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trui4.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'william-scholder.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dt.agrotopus.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estimates.smudge.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingogo-traveller-staging.ingogodev.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agente.poderegularizar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heilpraktiker-heitersheim.ivlivs.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.alile.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestorcafe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.fidelizzare.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.people.af'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiu.zebull.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-admin.mysodexo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogel.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lig-demo.picol.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceomusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskfi.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettercode.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediapp.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mytorahkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pingenerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piotoolkit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telestroke-doctor.sevaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoice.piedevelopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pixielity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telestroke-hospital.sevaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipocosa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paddyb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyricsart.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoharab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerrenseow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whiteboxprop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aztecshields.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvelous.shoesprays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consaltex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talento.programavalentina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bleepbloop.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wemote.xgoogler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yeekee4d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerhousebotten.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hardcorn.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mysundayteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvirtkick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.penguin.pharmacy.ishealth.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.killerid-kr.netkiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yllaslodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivo.transparenciasonora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.analyzee.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reecewalter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.audiomob.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moraviaimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lordismyshepherd.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2e-domain2.enotice.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparklect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smudge.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.amineware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.quii-app.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staging.voicepop.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/_75fQoxNWvM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185d5b4b930000004030047304502202626a9ec09326e85b5e76bade4a1d4f9de237eea79c228bb1521f5bf4787bc7a022100c9609c14555eaa527ad8e211d991c284ba21410cb67277464b713a83674773b70077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185d5b4b92a0000040300483046022100adaa2be555b2f98efccc6fb4a0cfe9bdbf0239a91e408fe2f3da22584d1d5b21022100dc8085e094f549c94174cfb0fa588a272a89bf72e5e29d460406badc3329e572
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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