lumagroup.it

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 58:9a:18:4c:ec:8d:fc:12:10:5f:3a:0f:19:fd:e8:91 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lumagroup.it

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:9a:18:4c:ec:8d:fc:12:10:5f:3a:0f:19:fd:e8:91
Serial Number (int): 117772170217667910222486450456718338193
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 20:5c:58:b7:10:37:13:17:1a:f8:a2:37:72:c6:3f:8a:70:2a:18:da
Fingerprint (sha256): b7:e2:01:4f:25:97:77:d9:ee:64:4b:9c:a3:b7:18:c2:e2:8e:61:7a:ac:8b:09:ff:92:e6:f1:71:29:a1:fd:6f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/x4DemSKCD2g
CRL Distribution Point: http://crls.pki.goog/gts1d4/DjrvjChw-PU.crl

Check the revocation status for certificate lumagroup.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lumagroup.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lumagroup.it
app.foxi.link
www.nugabest-gv.mk
www.halildogan.com
go.pazioapp.com
turbotodo.app
www.rafaelpadilha.com.br
www.shopscience.com.de
d20.zooz.cf
verify.redestatos.com.br
www.thehtmlcouple.com
titansoftwareapp.com
www.titansoftwareapp.com
www.nucleate.ai
flaschendrehen.jack-drillisch.de
appointment.dev.hairtect.jp
invite.watchapp.nl
amithgc.com
wlo-info.fr
donate.badermedical.org.sa
toothy.radisol.ee
auth.doceapp.com.br
bella.do
invite.trbu.app
www.hoopr.ai
emclearance.com
www.okto.store
protoss.eu.org
www.uwemagleni.at
classicbakerynsnacks.estore.business
go.urbanteam.app
www.chessclub.ch
fixarservice.com
www.podmap.ai
luxury.prosperme.in
admin.dadabase.com
f1statistic.com
www.wingding.dk
holeman.cc
recat-mdm-test.veronafiere.ozwol.tech
diodorushistory.com
www.ecamos.com
www.martuapangaribuanlawoffice.com
portfolio.xrcentral.tech
www.circuloopportunity.com
www.eliteprgroup.com
bravieimports.com
bdpnft.com
www.labewo.tk
links.ryvo.app
register.bangkit.academy
hugoposhmedical.com
app.hotelica.jp
www.kazuhiro.me
voorthuysenschool.trevvelroute.nl
javierascue.com
lagoonstudiola.com
www.jbxapp.co.za
internal.getlobee.com
www.ambarassed.art
www.pushups.no
www.biorganicol.com
admin.sp.volksbolsa.com.br
web.base.timwork.kr
test-vue-pwa.firepuma.com
www.domsmandsspillet.dk
www.taxirodriguez.com
www.survey.koco19.de
ryanedwards.dev
www.swarmop.com
m.mazdadegranby.com
www.ktwapps.com
www.staging-money.k-9apps.com
dev-wholesale-portal.shopthrilling.com
admin.harmonised.co.nz
publishingfun.com
ourdesh.com
www.bella.do
uniquehomecareinstallationsllc.com
strega.clau.io
copenhelp.dk
eventos.zonadeapuestas.com
juanan-y-ana.es
www.turokc.com
dinakara.in
e.resimmodern.com
rocketeer.fans
www.qration.me
stage-api.i-anna.com
apps.fxkanin.com
restaurantes.mewo.es
shroombits.io
app.sunvigo.de
www.meeslumane.com
blog.tanakamidnight.com
wisewaste.com.cy
bangalore.gq
callcenter.axptscout.de
learningjournal.online
luthervillelabpta.org

Other certificates including the domain name lumagroup.it

(limited to 100 certificates)
blabla.cam
run.photo
routelinks.io
manager.corroo.app
*.lumagroup.it
smclient.maxsold.com
*.lumagroup.it
tour.narimilwaukee.org
manager.corroo.app
run.photo
sullyswork.com
www.rvsexports.in
www.mofti.link
manager.corroo.app
manager.corroo.app
anderson.pesepay.com
lumagroup.it
mikha.ltd
www.ipure.be
blabla.cam
sauven6.inncoded.com
ashland.io
api.pastpay.io
lumagroup.it

Certificate

The complete raw certificate details for lumagroup.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117772170217667910222486450456718338193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 14:27:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 15:24:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lumagroup.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/x4DemSKCD2g'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2055 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumagroup.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.foxi.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nugabest-gv.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halildogan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.pazioapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotodo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rafaelpadilha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopscience.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd20.zooz.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.redestatos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehtmlcouple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titansoftwareapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titansoftwareapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nucleate.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaschendrehen.jack-drillisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appointment.dev.hairtect.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite.watchapp.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amithgc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlo-info.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.badermedical.org.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toothy.radisol.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.doceapp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bella.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite.trbu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoopr.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emclearance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okto.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protoss.eu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uwemagleni.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicbakerynsnacks.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.urbanteam.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chessclub.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixarservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.podmap.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxury.prosperme.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dadabase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1statistic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wingding.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holeman.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recat-mdm-test.veronafiere.ozwol.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diodorushistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecamos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martuapangaribuanlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.xrcentral.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circuloopportunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliteprgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravieimports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdpnft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labewo.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.ryvo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.bangkit.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugoposhmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.hotelica.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kazuhiro.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voorthuysenschool.trevvelroute.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javierascue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagoonstudiola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbxapp.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.getlobee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ambarassed.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pushups.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biorganicol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sp.volksbolsa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.base.timwork.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-vue-pwa.firepuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domsmandsspillet.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxirodriguez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.survey.koco19.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanedwards.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swarmop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mazdadegranby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ktwapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging-money.k-9apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-wholesale-portal.shopthrilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harmonised.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publishingfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourdesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bella.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniquehomecareinstallationsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strega.clau.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copenhelp.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.zonadeapuestas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juanan-y-ana.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turokc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinakara.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.resimmodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketeer.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qration.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-api.i-anna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.fxkanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantes.mewo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shroombits.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sunvigo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeslumane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.tanakamidnight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisewaste.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangalore.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callcenter.axptscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningjournal.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luthervillelabpta.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/DjrvjChw-PU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018adc67214c0000040300473045022100aba4ef8ca63b976f2c354073ffb0e7217f4fdcaabb675b993ebde866098dfcfb0220714ddb76167d05278b3deb3a143671d81e3cb5fa70cd5c0b30f8b31bb043e164007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018adc67212b0000040300473045022100f1c5a7100d17b39726c46a8e6fce33c6d559a6595148f667bbfe004d09ec9e1e0220128caff45cfd418f380297271ae69c7e5ea6411653815f13a3333042e1ec5bbb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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