www.pontik.ca

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number f9:1b:23:c0:e5:81:0d:c2:10:4d:3a:7c:de:6b:4a:2d was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.pontik.ca

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f9:1b:23:c0:e5:81:0d:c2:10:4d:3a:7c:de:6b:4a:2d
Serial Number (int): 331118688132795906896661532417276463661
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 13:3b:ea:99:51:5f:76:17:4a:e6:48:be:54:0d:ee:89:cb:af:ed:a8
Fingerprint (sha256): b5:3b:6e:83:f8:9e:7c:a2:23:72:16:ea:4a:46:8c:a0:ce:81:db:e7:f5:6c:c9:5a:73:6c:99:60:56:ef:8b:d0

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/jHrTt_myX2k
CRL Distribution Point: http://crls.pki.goog/gts1d4/H62TMptl96E.crl

Check the revocation status for certificate www.pontik.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pontik.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pontik.ca
saatanaan.fi
advise.loopcv.com
brickwise.org
toddonly.com
ukuleletrex.com
sch04-orders.waiterpro.com
akiyamasho.com
www.umashiba.dev
alonasky.com
distributedacademy.org
www.nexusi8.com
app.awesome-table.com
evento.infogab.com.br
www.saemmosae.com
staging.createfoundations.com
patriotelitewrestlingclub.com
www.wowpassport.com
www.workandtimemanager.com
app.darndimples.com
katandharrywedding.com
adminconsole.giggi.io
lakewoodgrill.online
habitparty.app
tienganh.app
www.alzahraaalahlyah.com
apdealershare.autoplac.pl
mflearning.in
sentimeant.help
www.piubellastudio.com.mx
story.101rpt.in
tool.fellesverktoy.no
returncalc.tdizz.biz
projectcapsule.me
bottari.com.au
bryngwyn.horseriding.app
career.codehindi.com
ego.joyridecity.bike
thecountdown.app
wi-charsheet.oldgeese.net
play.ax
skordesign.net
wp-api.travizory.com
kitchen.digitalbluefoam.com
farid-gulahmadov.work
www.keymo.org
network.agrevolution.in
www.myclearestate.com
nuraksworld.com
www.tellme.studio
mining.instaclaim.ai
insiders.excalibre.app
www.fslawpc.com
go.getwombat.io
foodyie.ca
adamcastell.com
quickpass.app
yannickbedard.me
prod.carlosalonsofisioterapia.es
havemycar.com
applink-beta.sportshi.io
adamleis.com
www.setlist.games
feedback.mvh.group
www.clickzi.me
www.passwordsgenerator.online
acsc.asia
afipayments.com
akws1.com
www.adiktiv-technologies.ca
exoev.com
t1.cns.net.tw
nrmn.ca
kyawmoenaing.com
www.promotition.com
profissionais.famyle.com
jbr-health.com
karrbs.com
minivation.zacharyhandshoe.com
staging.layer.team
sales.coara.xyz
logandeveloper.com
mstn.com
www.adamcastell.com
lasclases.com
noobor.com
verify.bronid.com
smartfixvoghera.it
breathemongolia.org
www.dmetrak.com
haidarzxc.com
automatecommerce.com
hp.harkpodcasts.com
inti.spaziosp.it
brightidiaz.com
prataplus.com
carnellcustoms.com
highcrestprep.com
dashboard.max-index.com
development-collectionmanager.sampleassist.com

Other certificates including the domain name pontik.ca

(limited to 100 certificates)
mesbees.app
mesbees.app
beta.adify.lv
app.pontik.ca
durellsmith.com
rainbowcloud.ml
www.cascadia.exchange
www.lines-game.ru
docs.crabjs.com
www.evfs.ca
childcareon.app
kiwitherapy.app
app.pontik.ca
beta.asenda.org
www.cascadia.exchange
allimmo.at
blichstudio.com
prosumer.com.ar
www.pontik.ca
staff.dzqls.tk
memo-de-vie.info
gartenplaner.orly.app
dotit.app
stagingweb.midtown.id
multiprofesionales.com
dev.ichbingastgeber.de
www.universidadedesbravadores.com.br
burgerbuilder.riecks.io
tabella.ro
www.textkit.xyz
alchemyx.io
snowclub.in
www.dragonport.se
stars.edmond.ai
www.pontik.ca
capbreaker.cf
liberate.ai
chat.reachinfopoints.com
www.pontik.ca
familywisdom.com.au
simple-finance.co
www.travel-time.co
app.unibit.in
megamind.bot
nlp.cothema.com
dotit.app
stars.edmond.ai
www.lines-game.ru
www.gustavobritez.com
snowclub.in
beta.adify.lv
p3qas.buddyrecruit.ai
p3qas.buddyrecruit.ai
stars.edmond.ai
oslund.no

Certificate

The complete raw certificate details for www.pontik.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331118688132795906896661532417276463661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 23:39:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 00:36:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pontik.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/jHrTt_myX2k'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1990 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pontik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saatanaan.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advise.loopcv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brickwise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toddonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukuleletrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sch04-orders.waiterpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akiyamasho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umashiba.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alonasky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distributedacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nexusi8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.awesome-table.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evento.infogab.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saemmosae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.createfoundations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriotelitewrestlingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wowpassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workandtimemanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.darndimples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katandharrywedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminconsole.giggi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakewoodgrill.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitparty.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienganh.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alzahraaalahlyah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apdealershare.autoplac.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mflearning.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentimeant.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piubellastudio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'story.101rpt.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tool.fellesverktoy.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returncalc.tdizz.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectcapsule.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottari.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryngwyn.horseriding.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.codehindi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ego.joyridecity.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecountdown.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wi-charsheet.oldgeese.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.ax'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skordesign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-api.travizory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen.digitalbluefoam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farid-gulahmadov.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keymo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'network.agrevolution.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myclearestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuraksworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tellme.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mining.instaclaim.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insiders.excalibre.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fslawpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.getwombat.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodyie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamcastell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickpass.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yannickbedard.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.carlosalonsofisioterapia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havemycar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink-beta.sportshi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamleis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setlist.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.mvh.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clickzi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passwordsgenerator.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsc.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afipayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akws1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adiktiv-technologies.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exoev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.cns.net.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrmn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyawmoenaing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profissionais.famyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbr-health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karrbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minivation.zacharyhandshoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.layer.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.coara.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logandeveloper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adamcastell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasclases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noobor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.bronid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartfixvoghera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breathemongolia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmetrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haidarzxc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automatecommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hp.harkpodcasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inti.spaziosp.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightidiaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prataplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnellcustoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highcrestprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.max-index.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development-collectionmanager.sampleassist.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/H62TMptl96E.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c03eb20cb000004030046304402203db9ba3b0b746088b15a7509e81d9bfcd0d987a162251bb643641256a63cbb6402206c317d24b2a99afcb39396cdf0fff9c537b65b570f0d5f0cb8de4425dfcda83b007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c03eb204f0000040300473045022100df5689baca7a09301a2a026bbca3604f4311a7ecba72a0005a56e0a941447b0b02200352e94360b9c858bf77100f6e97a9f711a7c3fe3d7eb47f07de8052191ed8d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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