l.staging-secure.rakuna.co

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 93:05:3b:52:32:54:fa:26:09:bb:5e:e7:20:af:13:c4 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=l.staging-secure.rakuna.co

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 93:05:3b:52:32:54:fa:26:09:bb:5e:e7:20:af:13:c4
Serial Number (int): 195423680039128230626446118914232357828
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): c3:7d:04:2b:42:2f:7e:f7:79:66:3b:ff:da:2e:9c:6f:f1:cc:b0:67
Fingerprint (sha256): b4:0c:0b:6e:b6:19:51:3d:0b:9a:a3:d8:2d:4c:0c:c4:a7:fb:da:fe:29:87:3d:11:b4:66:76:3e:ca:10:66:61

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/RM93gRgbgZw
CRL Distribution Point: http://crls.pki.goog/gts1d4/cHI0ljmmIvQ.crl

Check the revocation status for certificate l.staging-secure.rakuna.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for l.staging-secure.rakuna.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

l.staging-secure.rakuna.co
www.midmoon.org
www.alexbaas.com
chapeletperpetuel.com
gomagoma.mx
dni.ng
www.chathomebase.com
swiss8.com.au
www.nino.app
gismatrix.co
blog.balintcsala.com
rallymarshals.uk
fit4future.net
pje.com.sg
sunnybanana.co.za
houseoftramp.it
a.matrix.abinbevefes.app
store.rapo.app
bieplaycloud.com
staging.bigordr.com
www.swacanada.ca
lbi-abr.aws.whitelabel.com.br
hoteldanini.com
notyourcity.nyc
app.flash-hunter.io
auckland.foodworks.online
cartermackenzieinternational.3diq.com
tool.awareness-gym.com
dev.app.bnn.network
j0ey.co
www.adumavar.news
www.irondome.app
backoffice.utizie.com
dsc.queliga.com
headclickers.com
theblackbird.in
finetunemarine.com
www.curvirbiotech.com
gym.whoskelos.es
adminpejuang.neovasi.com
chiropractorgb.com
www.somewheretorun.app
www.dropthepuck.ca
portal.hackyear.io
www.jadeocr.com
newpravda.com
warikan.masf.me
bluegoatlabs.com
dev.deals.trytaste.app
fb.community.guidelines1000315.com
qa-fundep.prompt-pitang.com
inreuma.telemedicina.drtis.com.br
www.findeck.link
pos.paas.mx
albertocerasini.com
r01.dev
syntezza.vizo.dev
itjobbtrender.no
www.aswingers.com
supportisle.com
www.finetunemarine.com
www.wealthzland.com
creator.rawmag.in
e3.io
ssc.clau.io
meetaghosh.in
thelocalkirana.com
auth.r3n.cyberhaven.io
www.kkoning.net
privacy.done.co.il
www.alawwahouseplans.com
www.stamina-technology.com
auth.alpha.cosmos.video
www.greybearddevs.com
harrison.turnout.events
fbcf1.squadle.com
uninstall-survey.tab-suspender.com
jgf.app
paidifitz.com
www.jagdnet.app
www.striv3.app
persica.app
ggz.cao.app
nippon.zip
conectasaojosedobonfim.com.br
paciente.nuuphealth.com
admin1099.estore.business
mrburns.world
backyardcollective.us
www.captur3dprints.com
www.grupojarat.com
www.nesoyonspasraisonnables.fr
techlenders.ca
opm.phar.umich.edu
dev.app.vatworx.cloud
jumpstarts.thomasrob.in
aacarcondicionado.appshare.com.br
onlytap.proatek.com
www.clix.app
trykardo.app

Other certificates including the domain name rakuna.co

(limited to 100 certificates)
feedback.rakuna.co
rakuna.co
rakuna.co
demo.rakuna.co
rakuna.co
rakuna.co
xfagaaaaqq.okooptyka.pl
www.gohere.tech
static.rakuna.co
feedback.rakuna.co
app.rakuna.co
staging-secure.rakuna.co
static.rakuna.co
help.rakuna.co
help.rakuna.co
demo.rakuna.co
profiling.penhaligons.com
institucional.nicbrain.com.br
superchargedtechnology.co.uk
www.ibeck.me
eu.assets.cloud.acurable.com
rakuna.co
staging-feedback.rakuna.co
mwiphpropertyexpo2021.vx-events.com
app.rakuna.co
storm.sqwadhq.com
rakuna.co
l.rakuna.co
ux.jennifernip.com
sense-app.prod.appliedautonomy.no
snipeit.rakuna.co
rakuna.co
www.rakuna.co
rakuna.co
tangosoft.co
app.downloadrave.com
previ.coleta.relatoweb.com.br
app.rakuna.co
health-dev.iatros.dev
rakuna.co
secure.rakuna.co
rakuna.co
demo.rakuna.co
rakuna.co
l.staging-secure.rakuna.co
staging-secure.rakuna.co
secure.rakuna.co
rakuna.co
app.rakuna.co
help.rakuna.co
www.rakuna.co
static.rakuna.co
language-chat.is-awesome.dev
staging-feedback.rakuna.co
rakuna.co
www.ondeliverz.com
www.rakuna.co
rakuna.co
embellashstudios.com
demo.rakuna.co
demo.rakuna.co
demo.rakuna.co
rakuna.co
static.rakuna.co
demo.rakuna.co
help.rakuna.co
app.rakuna.co
snipeit.rakuna.co
rakuna.co

Certificate

The complete raw certificate details for l.staging-secure.rakuna.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 195423680039128230626446118914232357828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 06:52:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 07:50:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'l.staging-secure.rakuna.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/RM93gRgbgZw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2015 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.staging-secure.rakuna.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midmoon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexbaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapeletperpetuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gomagoma.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dni.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chathomebase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swiss8.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nino.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gismatrix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.balintcsala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallymarshals.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fit4future.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pje.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnybanana.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseoftramp.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.matrix.abinbevefes.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rapo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bieplaycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bigordr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swacanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbi-abr.aws.whitelabel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteldanini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notyourcity.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.flash-hunter.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auckland.foodworks.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartermackenzieinternational.3diq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tool.awareness-gym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.app.bnn.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'j0ey.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adumavar.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irondome.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.utizie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsc.queliga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headclickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theblackbird.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finetunemarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curvirbiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gym.whoskelos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminpejuang.neovasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiropractorgb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somewheretorun.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dropthepuck.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.hackyear.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jadeocr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newpravda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warikan.masf.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluegoatlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.deals.trytaste.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.community.guidelines1000315.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-fundep.prompt-pitang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inreuma.telemedicina.drtis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findeck.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos.paas.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albertocerasini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r01.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syntezza.vizo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itjobbtrender.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswingers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportisle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finetunemarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wealthzland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creator.rawmag.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e3.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssc.clau.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetaghosh.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelocalkirana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.r3n.cyberhaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kkoning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.done.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alawwahouseplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stamina-technology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.alpha.cosmos.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greybearddevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrison.turnout.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbcf1.squadle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uninstall-survey.tab-suspender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jgf.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paidifitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jagdnet.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.striv3.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persica.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggz.cao.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nippon.zip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conectasaojosedobonfim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paciente.nuuphealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin1099.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrburns.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backyardcollective.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.captur3dprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupojarat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nesoyonspasraisonnables.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techlenders.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opm.phar.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.app.vatworx.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumpstarts.thomasrob.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aacarcondicionado.appshare.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlytap.proatek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trykardo.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/cHI0ljmmIvQ.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b7f9236290000040300473045022100d83877391a69de2f39f22088f1340c2d3fbdc43353fa017e3f89263dd6a92d4a02207a9eb527c8de0b7ff5b4cd2fb5c8265cc6bf6c41008844c59ad845e9366a663100750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b7f923620000004030046304402205401621138698226ead7a509fd60d641736e659ef447b37ecf982ab6110c03f0022057a9ae91f36bef700dd4278117054d7c5ac88c7f4905ef191018f1ebfde51a8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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