halle.baugeruest.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a7:82:cf:c2:e5:59:11:8e:0a:c0:36:8f:1a:4a:4f:11 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=halle.baugeruest.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a7:82:cf:c2:e5:59:11:8e:0a:c0:36:8f:1a:4a:4f:11
Serial Number (int): 222660287787721706577180262927564427025
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 2c:e8:bc:a1:66:54:c0:00:61:6a:91:95:ee:d3:3b:50:e0:c0:06:fd
Fingerprint (sha256): b6:03:c4:73:67:cf:53:da:38:61:ee:ae:44:9d:4c:01:f6:0a:91:f2:09:91:47:57:c0:80:42:65:b7:52:7e:24

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/y2HRtSt1kP8
CRL Distribution Point: http://crls.pki.goog/gts1d4/J6sORPg1FFM.crl

Check the revocation status for certificate halle.baugeruest.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for halle.baugeruest.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

halle.baugeruest.de
cajyothsna.in
a.othercooked.com
www.bahaliud.store
donemate.app
dth4.com
staging.sonomai.com
debeshmandal.co.uk
kevin-haustein.de
kiarx.com
web.aggregator.pnpl.com.np
www.cranleighhomecare.com
bintech.in
belleplainenews.column.us
cleareyetest.io
mapa.arco.org.br
wedding.kynd.dev
automotiondashboard.com
syedhamzahoda.me
psilabs.io
app2-link.gipl.io
app.rentor.ru
www.detyra.de
admin-test.palette.pnp.tools
download.dietbox.jp
mapa-develop.arco.org.br
knightshospitallerint.org
urdumanzil.com
missouri2021events.org
wt2.tech
www.werewolfvalley.com
test.myndlift.com
storybook.wharft.app
playlist.tools
intuitive.chapterme.co
odioloscarros.net
kentand.co
leapstep.org
marcodcarini.com
moover.ca
lenhamafra.pt
www.mystry.io
biometra.org
allthechildrentrust.org
bernardobernal.com
distribution.mprocesses.com
sino.wtf
www.wakanda-market.com
www.kevin-haustein.de
bigbangvarejo.com.br
www.hypotenuse.io
link.staging.part2.link
avashyakam-parent.sngmyhome.com
buildadusandiego.com
www.logik41.dev.br
www.aidatapipes.com
labs-review.gamebench.net
glassdoor.neoufitness.com
www.karimamer.com
www.koneko.pro
lupalike.com.br
physioarm.com
link.dev.adorilabs.com
volkscompras.com.br
auth.lovers14.com
www.mokancode.com
www.japanintro.com
corsifly.com
www.chimptyphoon.com
link.box24x7.com
quincedream.com
infacted-game.com
munchiesbeta.heychao.com
www.clinicframework.com
app.opago.co
fischerpack.com
q3-mycollections.dpd.co.uk
deep.cenoa.com
hml.paperon.app
app.knallah.com
www.kuwaitbinary.com
app.tradematics.com
cgshgmart.com
speakerequityassessor.com
lovelyartapps.com
www.popcorntales.com
chal2lie.com
mapcss.miyauchi.dev
firebase.justtempo.com
app.truster.io
app.relion.dk
test.oceanweed.com.au
designer-bosyu.togetter.dev
app.vithas.es
wecoffeetalk.com
www.thedicebot.com
adminp1x.pix888.net
topofthehouse.co.uk
wultschner-photography.de
test-mentors.codingninjas.in

Other certificates including the domain name baugeruest.de

(limited to 100 certificates)
adminx.development.spur.io
tallythings.com
api.kinderling.co
pay.snacklips.com
dazhboard.io
mytechsite.co.uk
dev.esg-rating.edekabank-portal.de
tafmekrandomizer.onclearning.com
bristoldanceexperience.co.uk
verify.iitmparadox.org
material.angularjs.org
gm.vet
www.tleilax.com
co.ebizfile.com
app.detecht.se
www.senakayasu.com
privacy.blocer.app
selfservice.prepaidplus.co.bw
www.casadelvoltosanto.it
www.menuaddis.com
www.3bbos.com
marcodcarini.com
dev.cityscour.app
blockyboard.com
duelingground.swingteam6.com
thenext.vip
www.royalreelz.com
ru.vybeerai.com
www.cube.danrcohen.com
www.betonopoliravimas.lt
corretores24horas.com
course.emipd.tw
api.kinderling.co
caring2cleaning.se
links.unscriptedposingapp.com
raspersonal.sogafit.net
streetfood.network
www.apporad.com
app.detecht.se
tvmovie.isnottv.com
iwiz.in
halle.baugeruest.de
powersales2-test-fe.signorprestito.com
app.engage.wdsra.voyagernetz.us
sandbox.narongsak.dev
read.deep.news
www.casadelvoltosanto.it
rnishanth.com
pewallet.in
menke01.baugeruest.de
reelsfiz.com
admin.khetix.com
auth.tweetingmonk.com
www.rooftoplabs.io
offsetusinagem.com

Certificate

The complete raw certificate details for halle.baugeruest.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 222660287787721706577180262927564427025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 13:04:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 14:01:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'halle.baugeruest.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/y2HRtSt1kP8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1989 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halle.baugeruest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cajyothsna.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.othercooked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bahaliud.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donemate.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dth4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sonomai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debeshmandal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevin-haustein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiarx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.aggregator.pnpl.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cranleighhomecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bintech.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belleplainenews.column.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleareyetest.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapa.arco.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedding.kynd.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automotiondashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syedhamzahoda.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psilabs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2-link.gipl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rentor.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detyra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-test.palette.pnp.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.dietbox.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapa-develop.arco.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knightshospitallerint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urdumanzil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missouri2021events.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wt2.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werewolfvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.myndlift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook.wharft.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playlist.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitive.chapterme.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odioloscarros.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapstep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcodcarini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moover.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenhamafra.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystry.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biometra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allthechildrentrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernardobernal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribution.mprocesses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sino.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakanda-market.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevin-haustein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbangvarejo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypotenuse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.staging.part2.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avashyakam-parent.sngmyhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildadusandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logik41.dev.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aidatapipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs-review.gamebench.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassdoor.neoufitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karimamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koneko.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupalike.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physioarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.dev.adorilabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volkscompras.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lovers14.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mokancode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.japanintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsifly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chimptyphoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.box24x7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quincedream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infacted-game.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munchiesbeta.heychao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clinicframework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.opago.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fischerpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q3-mycollections.dpd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep.cenoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hml.paperon.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.knallah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuwaitbinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tradematics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgshgmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speakerequityassessor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovelyartapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popcorntales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chal2lie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapcss.miyauchi.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.justtempo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.truster.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.relion.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.oceanweed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designer-bosyu.togetter.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vithas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wecoffeetalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedicebot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminp1x.pix888.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topofthehouse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wultschner-photography.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mentors.codingninjas.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/J6sORPg1FFM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d317ce65b0000040300473045022100d93afd6a4fe2f711b9e02c4572143ce76f96fac1408901d7bb59e5c563e1022402200fe182c25b2a08afe30d8fd9c176135a0676912deb0bb9196ca611373628ba47007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d317ce666000004030046304402207d10cf442125dd4ccce4447cc1cc918835f6ba80f9cfc9d6df9ac33550521b0a0220640925a8f7919ae523130304577b0fb3e629669c37fe4900e1db3ed54f4a4be7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ef135023ca86e85144fcecf45719b8abadf86f517568273f6db10b3b84623ec52eac1188fdabb0bbfd4adafb2e815b30f8da10ead6f3aaaf75c0011e59485c85e14b26bfdaab99fe8cec7e87b166150d626cbc3d390775428bfab5bc8968e9b0e1257f37712de4308d3856d634e64f87d9f9e479f0dec3e60eab2e7ec8ea3d3df4fba1fb679d4fb0dcfd78cd1017a6e23b65cf22c07d43f47406e0d5d5ba8c186396fb57458f1ba31d75b28e8ceea8043f5b66e5868d20ef94083dfc0ffa093e775837292cfdbffda2effbf69784ef1d5f2c057c0d43b329e2bf105d1d1dd2b5c89641d1da9bde66c02be584a4f20ec6fffcab6c20f6ab8c88077d249e9afa8