geoffspielman.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e2:4e:8b:3f:76:2c:b4:7b:09:b1:5d:af:b4:6d:8c:54 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geoffspielman.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): e2:4e:8b:3f:76:2c:b4:7b:09:b1:5d:af:b4:6d:8c:54
Serial Number (int): 300813350485239126002724613220306095188
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 0e:3d:30:79:bb:fd:6a:2d:dc:93:53:c6:3d:6a:42:da:b6:63:29:98
Fingerprint (sha256): b8:44:f1:e4:d7:67:4c:d4:dd:38:51:9a:2d:46:82:af:d8:7f:55:9f:37:a0:36:da:0c:c9:9c:11:73:25:d1:b9

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/6_QLW5VBBaU
CRL Distribution Point: http://crls.pki.goog/gts1d4/nthzw86Oe4c.crl

Check the revocation status for certificate geoffspielman.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geoffspielman.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geoffspielman.com
www.waterqoswimmingpools.com
www.arnoldcodes.com
www.fictionsoftware.com
www.coowner-calculator.com
youtbe-th.com
farrokh-mansouri.com
www.creatoradar.com
rcloud.radwag.com
app.briskery.io
www.nykenshinkai.com
nineseven.de
www.vikstrom.me
dreambugsoftware.com
speedbird.highlander.cloud
twter-th.com
app.udejm.com
www.professordeequitacao.com.br
fh1.okutaro.com
admin-tools.acelr8.com
sentensplit.coolespace.com
devmarg.com
foundry.kelfecilstales.com
winkpass.com
app.thepetnest.com
admin.othellonia.com
www.lukefaupel.com
da.jasero.se
www.webharmony.dev
nod3.dev
time-tracker.niklas-hauschel.de
laurens.trevvelroute.nl
www.aviad.dev
www.rainbowonewaycabs.in
benjaminwalker.info
gatheround-internal.dev.gatheround.dev
app.badminton.mkcarl.com
admin.globalstarmhs.com
www.farmersmatchapp.com
www.combinativ.com
badesee.info
totem-architecture.com
www.stocksfront.com
site-dock.kaizenplatform.net
grepoview.nl
olliolliworld.live
link.genflix.co.id
smynd.net
links.sakenomy.jp
www.apycem.mx
mow.protostargames.com
www.onkeypress.io
blessed.quest
storytrain.org
verifyemail.live
web.kiey.com
sk.kuramaturita.eu
www.inhousemed.io
ranger.us.remy.mx
trace.hunitro.com
2020-annual-survey.essilen-research.com
api.thesmartq.in
www.celnor.com.br
alfa.nfe.io
jakew.tech
kaneda.family
two-truth-one-lie-dev.letsdive.io
beta.mikmak.tv
www.carrotlabs.io
www.webrotary.com
doctorcasa.xyz
harshal.chaudhari.info
expgroup.us
liveorder.botio.io
ruf.us
app.ascensorsvalls.cat
merstongallery.co.uk
link.sainyam.me
beolab.us
beyond.impakt.nl
www.hennabyreena.nl
udemy.carlosmendoza.tech
www.gutterguys.co.nz
morris-meadows.ovh.org.uk
nicebyte.io
link.farmstore.co.kr
www.gabineteonline.app.br
rsg.partner.felporgetve.hu
app.vicmow.com
www.blduo.mus.br
www.idproductions.co.za
fototool.alfa1.com
acceptance.veewar.nl
www.migtel.net.ve
www.riksnelders.nl
app.lostandfoundhotel.it
www.viewee.ee
www.punti.com.br
www.arosteknik.dk
admin.mtransit.iot.com.ph

Other certificates including the domain name geoffspielman.com

(limited to 100 certificates)
myfarm.seetree.ai
admin.xrii.io
kdvinhlong.xbot.com.vn
www.kasem.dev
www.deathisreal.com
whatslink.me
link.infolink.website
link.dkn.uz
nerd.zmcguckin.com
4drec.com
teachange.studiossolution.com
bonanzahotel.menuaddis.com
junction.social
hslpalettebuilder.com
dev.knapsack-app.com
www.kasem.dev
terfansky.com
api.juanasotelo.com
www.creativenerd.nl
pegawai.sulutprov.com
2021.cruzhacks.com
dashboard.ellipsishealth.net
thetransmission.xyz
sni.cloudflaressl.com
www.psikodiyetlife.com
www.torneostenismesa.ga
debtonator.app
tranhairdesign.com
www.workwireless.com.au
4drec.com
admin1037.estore.business
doesroverlive.com
geoffspielman.com
www.lamurguitadelsur.com.ar
noriwang.com
isalsu.com
requests.ml
sni.cloudflaressl.com
api.juanasotelo.com
itcnologia.com
cadfidc.ceresagrobank.com
flashpedidos.com
portfolio.httky.app
snm-tech.com

Certificate

The complete raw certificate details for geoffspielman.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINXDCCDESgAwIBAgIRAOJOiz92LLR7CbFdr7RtjFQwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwNTEzMTc0ODU0WhcNMjQwODEx
MTg0NjM3WjAcMRowGAYDVQQDExFnZW9mZnNwaWVsbWFuLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAKx8yW5NaPbYQgz5/BAcDw8UYG2Dtu8rWWma
+PGKkQV1xSswYe8aJNbhn6zj4i+FvWQErDH3nKFvAXCkS+uzRb6kZsVnkHGphx/k
pCz7ov5SqZ9tgCYABWP66xWjIyPRdeFuytuLBcRsd/XsHMFKK9RHaO9NU6lLhnBV
68POSCrAyJ891xGmypH0ST2Rsqy0IiJHo+klWMEPAfTNQTrzhN5u3GO4DQjicCZs
cFtm+21P+N1qydg0bm0kC8rZBu9fXrB+KeAI1YmvjmYhIMKWEbBEIp6Mb9zYhYWN
aKvg1NgUyY0njOmmWEL1byF/+U/bXWq6bWAzW4kFKMk609tsIa8CAwEAAaOCCm0w
ggppMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBRscCRBxBn9Sm8am9WPohROJiEQyDAfBgNVHSMEGDAW
gBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUH
MAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0LzZfUUxXNVZCQmFVMDEG
CCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVy
MIIIDwYDVR0RBIIIBjCCCAKCEWdlb2Zmc3BpZWxtYW4uY29tghx3d3cud2F0ZXJx
b3N3aW1taW5ncG9vbHMuY29tghN3d3cuYXJub2xkY29kZXMuY29tghd3d3cuZmlj
dGlvbnNvZnR3YXJlLmNvbYIad3d3LmNvb3duZXItY2FsY3VsYXRvci5jb22CDXlv
dXRiZS10aC5jb22CFGZhcnJva2gtbWFuc291cmkuY29tghN3d3cuY3JlYXRvcmFk
YXIuY29tghFyY2xvdWQucmFkd2FnLmNvbYIPYXBwLmJyaXNrZXJ5LmlvghR3d3cu
bnlrZW5zaGlua2FpLmNvbYIMbmluZXNldmVuLmRlgg93d3cudmlrc3Ryb20ubWWC
FGRyZWFtYnVnc29mdHdhcmUuY29tghpzcGVlZGJpcmQuaGlnaGxhbmRlci5jbG91
ZIIMdHd0ZXItdGguY29tgg1hcHAudWRlam0uY29tgh93d3cucHJvZmVzc29yZGVl
cXVpdGFjYW8uY29tLmJygg9maDEub2t1dGFyby5jb22CFmFkbWluLXRvb2xzLmFj
ZWxyOC5jb22CGnNlbnRlbnNwbGl0LmNvb2xlc3BhY2UuY29tggtkZXZtYXJnLmNv
bYIaZm91bmRyeS5rZWxmZWNpbHN0YWxlcy5jb22CDHdpbmtwYXNzLmNvbYISYXBw
LnRoZXBldG5lc3QuY29tghRhZG1pbi5vdGhlbGxvbmlhLmNvbYISd3d3Lmx1a2Vm
YXVwZWwuY29tggxkYS5qYXNlcm8uc2WCEnd3dy53ZWJoYXJtb255LmRldoIIbm9k
My5kZXaCH3RpbWUtdHJhY2tlci5uaWtsYXMtaGF1c2NoZWwuZGWCF2xhdXJlbnMu
dHJldnZlbHJvdXRlLm5sgg13d3cuYXZpYWQuZGV2ghh3d3cucmFpbmJvd29uZXdh
eWNhYnMuaW6CE2JlbmphbWlud2Fsa2VyLmluZm+CJmdhdGhlcm91bmQtaW50ZXJu
YWwuZGV2LmdhdGhlcm91bmQuZGV2ghhhcHAuYmFkbWludG9uLm1rY2FybC5jb22C
F2FkbWluLmdsb2JhbHN0YXJtaHMuY29tghd3d3cuZmFybWVyc21hdGNoYXBwLmNv
bYISd3d3LmNvbWJpbmF0aXYuY29tggxiYWRlc2VlLmluZm+CFnRvdGVtLWFyY2hp
dGVjdHVyZS5jb22CE3d3dy5zdG9ja3Nmcm9udC5jb22CHHNpdGUtZG9jay5rYWl6
ZW5wbGF0Zm9ybS5uZXSCDGdyZXBvdmlldy5ubIISb2xsaW9sbGl3b3JsZC5saXZl
ghJsaW5rLmdlbmZsaXguY28uaWSCCXNteW5kLm5ldIIRbGlua3Muc2FrZW5vbXku
anCCDXd3dy5hcHljZW0ubXiCFm1vdy5wcm90b3N0YXJnYW1lcy5jb22CEXd3dy5v
bmtleXByZXNzLmlvgg1ibGVzc2VkLnF1ZXN0gg5zdG9yeXRyYWluLm9yZ4IQdmVy
aWZ5ZW1haWwubGl2ZYIMd2ViLmtpZXkuY29tghJzay5rdXJhbWF0dXJpdGEuZXWC
EXd3dy5pbmhvdXNlbWVkLmlvghFyYW5nZXIudXMucmVteS5teIIRdHJhY2UuaHVu
aXRyby5jb22CJzIwMjAtYW5udWFsLXN1cnZleS5lc3NpbGVuLXJlc2VhcmNoLmNv
bYIQYXBpLnRoZXNtYXJ0cS5pboIRd3d3LmNlbG5vci5jb20uYnKCC2FsZmEubmZl
LmlvggpqYWtldy50ZWNogg1rYW5lZGEuZmFtaWx5giF0d28tdHJ1dGgtb25lLWxp
ZS1kZXYubGV0c2RpdmUuaW+CDmJldGEubWlrbWFrLnR2ghF3d3cuY2Fycm90bGFi
cy5pb4IRd3d3LndlYnJvdGFyeS5jb22CDmRvY3RvcmNhc2EueHl6ghZoYXJzaGFs
LmNoYXVkaGFyaS5pbmZvggtleHBncm91cC51c4ISbGl2ZW9yZGVyLmJvdGlvLmlv
ggZydWYudXOCFmFwcC5hc2NlbnNvcnN2YWxscy5jYXSCFG1lcnN0b25nYWxsZXJ5
LmNvLnVrgg9saW5rLnNhaW55YW0ubWWCCWJlb2xhYi51c4IQYmV5b25kLmltcGFr
dC5ubIITd3d3Lmhlbm5hYnlyZWVuYS5ubIIYdWRlbXkuY2FybG9zbWVuZG96YS50
ZWNoghR3d3cuZ3V0dGVyZ3V5cy5jby5ueoIZbW9ycmlzLW1lYWRvd3Mub3ZoLm9y
Zy51a4ILbmljZWJ5dGUuaW+CFGxpbmsuZmFybXN0b3JlLmNvLmtyghl3d3cuZ2Fi
aW5ldGVvbmxpbmUuYXBwLmJyghpyc2cucGFydG5lci5mZWxwb3JnZXR2ZS5odYIO
YXBwLnZpY21vdy5jb22CEHd3dy5ibGR1by5tdXMuYnKCF3d3dy5pZHByb2R1Y3Rp
b25zLmNvLnphghJmb3RvdG9vbC5hbGZhMS5jb22CFGFjY2VwdGFuY2UudmVld2Fy
Lm5sghF3d3cubWlndGVsLm5ldC52ZYISd3d3LnJpa3NuZWxkZXJzLm5sghhhcHAu
bG9zdGFuZGZvdW5kaG90ZWwuaXSCDXd3dy52aWV3ZWUuZWWCEHd3dy5wdW50aS5j
b20uYnKCEXd3dy5hcm9zdGVrbmlrLmRrghlhZG1pbi5tdHJhbnNpdC5pb3QuY29t
LnBoMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUw
MzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0L250aHp3ODZPZTRj
LmNybDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ANq2v2s/tbYin5vCu1xr6HCR
cWy7UYSFNL2kPTBI1/urAAABj3NJV6UAAAQDAEcwRQIgfWGbZYnmJoQ3y0C0+Ghn
mhRlNOMs4LWWejJe0IuyWX0CIQDqN3QcI3jE02RhqgeMV8ADRUo1Buv6dNbbXM4y
nvHBSAB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABj3NJV0sA
AAQDAEcwRQIhANlC9ID4Ycc7R4db1zVYctw5p8PkuTlgwv3de5IB6LaXAiBWCj7s
H48NfJjMAWmo0jMebv1J0uNUVcb2r6T3Ti8bdDANBgkqhkiG9w0BAQsFAAOCAQEA
A3ru+ZaJ5mpr9/Qq2Si60xEK4qymzXLDBN85az7gpIEdeGRzEShtSMa8js6oUHFv
hm2xfP48Vesn9cvg1TRrl/L049lhVXU5ERKFWdDz1X+5HQ5QG1J0VsruufNw1tv5
q+Y7xvz5G0oK9jy/zhwNqa5ZreqA6N55GaEwyJEm4aRpte6KRCGcZFPH+Zu4P0Jc
p3h3rZz9NRvdl47CGN1/A9XV4qUaijpFxQuezNT5HJnnyCZJft29Y4+KKjNt3RNt
8ttaVCytl5PxJpluo4F0yGaB3S1iR9wSC2HYCFGjV7z6R1l4K4KzJy+5SapaDemb
ILfmv1k7HuHJPQfeCSYICA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300813350485239126002724613220306095188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 17:48:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-11 18:46:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geoffspielman.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/6_QLW5VBBaU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoffspielman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterqoswimmingpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arnoldcodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fictionsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coowner-calculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtbe-th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farrokh-mansouri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creatoradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcloud.radwag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.briskery.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nykenshinkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nineseven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikstrom.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreambugsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedbird.highlander.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twter-th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.udejm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professordeequitacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh1.okutaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-tools.acelr8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentensplit.coolespace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devmarg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundry.kelfecilstales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winkpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.thepetnest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.othellonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lukefaupel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da.jasero.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webharmony.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nod3.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time-tracker.niklas-hauschel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurens.trevvelroute.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviad.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rainbowonewaycabs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminwalker.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatheround-internal.dev.gatheround.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.badminton.mkcarl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.globalstarmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmersmatchapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.combinativ.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badesee.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totem-architecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stocksfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site-dock.kaizenplatform.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grepoview.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olliolliworld.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.genflix.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smynd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.sakenomy.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apycem.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mow.protostargames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onkeypress.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessed.quest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storytrain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifyemail.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.kiey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk.kuramaturita.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inhousemed.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranger.us.remy.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trace.hunitro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020-annual-survey.essilen-research.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.thesmartq.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celnor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfa.nfe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jakew.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaneda.family'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'two-truth-one-lie-dev.letsdive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.mikmak.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrotlabs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webrotary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorcasa.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harshal.chaudhari.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expgroup.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveorder.botio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ascensorsvalls.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merstongallery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.sainyam.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beolab.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyond.impakt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hennabyreena.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udemy.carlosmendoza.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gutterguys.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morris-meadows.ovh.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicebyte.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.farmstore.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabineteonline.app.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsg.partner.felporgetve.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vicmow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blduo.mus.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idproductions.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fototool.alfa1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptance.veewar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.migtel.net.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riksnelders.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lostandfoundhotel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewee.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arosteknik.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mtransit.iot.com.ph'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/nthzw86Oe4c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f734957a5000004030047304502207d619b6589e6268437cb40b4f868679a146534e32ce0b5967a325ed08bb2597d022100ea37741c2378c4d36461aa078c57c003454a3506ebfa74d6db5cce329ef1c14800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f7349574b0000040300473045022100d942f480f861c73b47875bd7355872dc39a7c3e4b93960c2fddd7b9201e8b6970220560a3eec1f8f0d7c98cc0169a8d2331e6efd49d2e35455c6f6afa4f74e2f1b74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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