www.nikolay.is

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ea:cf:82:e5:00:ef:f8:95:0a:26:20:00:f4:c3:67:71 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.nikolay.is

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ea:cf:82:e5:00:ef:f8:95:0a:26:20:00:f4:c3:67:71
Serial Number (int): 312116811320174821229356909115444782961
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 3d:32:f0:0f:be:bf:2f:09:7b:09:51:33:f8:02:96:bf:e4:ee:72:d3
Fingerprint (sha256): c4:c1:63:4b:8e:00:82:77:87:2b:6e:97:14:94:e5:0e:96:cc:af:fc:3c:28:2f:fc:d7:e5:12:46:d5:43:84:25

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/sXCSzVLY18I
CRL Distribution Point: http://crls.pki.goog/gts1d4/ojYC_5uDD5U.crl

Check the revocation status for certificate www.nikolay.is

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nikolay.is

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nikolay.is
thegoatgroceries.com
connect-ng-carrier-registration.rxoconnectperf.rxo.com
celestialq.com
homem-extraordinario.11editora.com.br
connect-ng-routes.rxoconnectperf.rxo.com
lvmhcomplianceescape.com
pre-prod.meetshepherd.com
connect-ng-quotes.rxoconnectdev.rxo.com
pongo.is
connect-ng-user-profile.rxoconnectdev.rxo.com
connect-ng-widgets.rxoconnectdev.rxo.com
acti-froid33.com
supermarket.gq
app.isedone.com
connect-ng-purchase-orders.rxoconnectperf.rxo.com
cabral.hrtech.com.br
horoscope.gq
drifters.com.tw
preprod.placeshaker.fr
probot.octomerge.com
santacaterina.snowitup.com
www.seeds-archery.com
www.coockee.net
dev.driverone.org
www.sablecrm.net
app.vveplantage.nl
app.tortija.de
www.opusmobilus.fr
www.on-sen.jp
www.relitex.in
preview5.fm.stage.voiapp.io
dev.hone.rest
resume.nilsr.me
fetchem.it
links.kanime.fr
preprod.maka-bane.com
taikhoanpremiumfreee.tk
link.drivelah.sg
movable-house.jp
develop.admin.shopinn.tw
energiebalansplanner.stateless.nl
admin.landit.co.jp
kirimin-chan.site
help-desk.cf
cao-sabic-lbv.appdashboard.nl
aceiteasy.es
shopz.gq
ofertascopalibertadores.canaturperu.org
develop.app.allarmemeteo.ch
nl103.grepoview.nl
www.vlconsulting.cz
admin.dosbrosegypt.anyware.software
admin.lift.lt.partners
app.dev.clevertrack.dk
widgets.eventlapse.io
borker-staete.maklr.nl
kingcrossmarcelin.online
condomi-dev.zetaone.com.br
navigator.ibilly.co
delivery.menuti.com.br
app.garasitekno.com
bookingsync.torinosweethome.com
www.sailingsaluna.be
www.isthisascam.co.za
repositor.cunhadistribuidora.com
freelance-direct.app
yumeeco.com
firebase.urrevs.com
lashthingsbyjas.app
redbubble.com.de
www.villalewis.lk
akipizzaria.lupi.delivery
jonathanysp.com
www.wplanassociates.com
www.digispeaker.com
www.frompersona.com
batzu.dev
myui.app
test-links.yourgolftravel.com
www.kurisaki-en.com
bo.ozzen.tech
marketing.calligraphy.org
www.redbubble.com.de
www.frangofrito.lupi.delivery
www.whiskeypickletroy.com
lc39.org
www.powerscents.app
www.lashthingsbyjas.app
seegym.com
taxaf.com.mx
www.massimobaldacci.it
frangofrito.lupi.delivery
zappaquiz.com
chatshop.app
jeongseok.net
davidbisbal.perceptionface.com
joelwfisher.com
ryanlecours.com
nganime.girhe.com

Other certificates including the domain name nikolay.is

(limited to 100 certificates)
www.midcenturymodernmusic.com
borker-staete.maklr.nl
officers.tallyj.com
ionex-es.noodoe.com
ionex-es.noodoe.com
schlusseldienstmitte.de
connect-ng-carrier-payments.rxoconnectdev.rxo.com
app.isedone.com
connect-ng-purchase-orders.rxoconnectdemo.rxo.com
www.nikolay.is
www.sstream.app
www.nikolay.is
links.gouldcs.com
ms.laurent-wattieaux.com

Certificate

The complete raw certificate details for www.nikolay.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312116811320174821229356909115444782961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 21:47:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 22:44:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nikolay.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/sXCSzVLY18I'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikolay.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoatgroceries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-carrier-registration.rxoconnectperf.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celestialq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homem-extraordinario.11editora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-routes.rxoconnectperf.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvmhcomplianceescape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-prod.meetshepherd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-quotes.rxoconnectdev.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pongo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-user-profile.rxoconnectdev.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-widgets.rxoconnectdev.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acti-froid33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermarket.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.isedone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-ng-purchase-orders.rxoconnectperf.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabral.hrtech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horoscope.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drifters.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.placeshaker.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'probot.octomerge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santacaterina.snowitup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seeds-archery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coockee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.driverone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sablecrm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vveplantage.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tortija.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opusmobilus.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.on-sen.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.relitex.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview5.fm.stage.voiapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hone.rest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resume.nilsr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetchem.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.kanime.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.maka-bane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taikhoanpremiumfreee.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.drivelah.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movable-house.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.admin.shopinn.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiebalansplanner.stateless.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.landit.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirimin-chan.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help-desk.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cao-sabic-lbv.appdashboard.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceiteasy.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopz.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofertascopalibertadores.canaturperu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.app.allarmemeteo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl103.grepoview.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vlconsulting.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dosbrosegypt.anyware.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lift.lt.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.clevertrack.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.eventlapse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borker-staete.maklr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingcrossmarcelin.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condomi-dev.zetaone.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigator.ibilly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.menuti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.garasitekno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookingsync.torinosweethome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailingsaluna.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isthisascam.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repositor.cunhadistribuidora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelance-direct.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumeeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.urrevs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lashthingsbyjas.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbubble.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villalewis.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akipizzaria.lupi.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonathanysp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wplanassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digispeaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frompersona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batzu.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myui.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-links.yourgolftravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kurisaki-en.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.ozzen.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.calligraphy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redbubble.com.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frangofrito.lupi.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whiskeypickletroy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lc39.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerscents.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lashthingsbyjas.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seegym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxaf.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massimobaldacci.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frangofrito.lupi.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zappaquiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatshop.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeongseok.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidbisbal.perceptionface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joelwfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanlecours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nganime.girhe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/ojYC_5uDD5U.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ad8d357ca0000040300463044022025c2baaf77971b686acf2871b2ec2e1d63d87bcbbe1414d50a604c1f380e1701022053000f23a825dd8dcb9356d678f973aa173a89bdc81b8b9e3d227d34dcf0e9fb007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad8d357a40000040300483046022100937ea2c3c0f9f8e791add994c852cb684a43aee30bf4f305fa5e20c92b85e2ad022100fc065a6c9eb9caf449f0f2872c016df8147cc1cd4369005e4b23efdac46f343b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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