financialnexus.ca

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number b0:04:07:29:6e:5a:64:a5:10:c6:32:c6:77:4a:f1:01 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=financialnexus.ca

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): b0:04:07:29:6e:5a:64:a5:10:c6:32:c6:77:4a:f1:01
Serial Number (int): 233965041704953851273798016250747220225
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): c2:3e:15:9e:e0:86:50:d7:5d:c8:0b:94:29:7d:5d:4e:6c:1a:43:28
Fingerprint (sha256): c6:d6:3d:2b:27:2e:64:cb:61:7a:11:93:d6:d1:c9:30:d0:df:c3:7e:c5:96:7f:72:6c:48:eb:19:8e:9d:f4:81

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/rReNeT7GHik
CRL Distribution Point: http://crls.pki.goog/gts1d4/xVMz_ej0Qc4.crl

Check the revocation status for certificate financialnexus.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for financialnexus.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

financialnexus.ca
studio.disruptive-technologies.com
app.myprism.co.za
www.mysticswordstudios.ca
wip.eternal-visions.com
dartmap.com
nagareyama-signage.alfalink-app.com
www.devdebut.com
charlielewiswrites.com
flutter-base.emmacanhelp.com
www.betterdrivingtheory.com
link.beamo.co
www.daunao.com
www.firelize.com
passwordreset.evertelapp.com
www.consciousthai.com
trainer.spbeu.ru
fc-me.com
eldercareval.foresitehealthcare.com
www.fsanal.com
fireauth.instanteat.it
claims-r.dev-ltl-xpo.com
www.connectedapp.com
www.trabeepocket.com
www.alexcocan.com
glm-productions.com
alt.pantes.no
www.gav0.com
www.fuzonmedia.com
reversi.itziks.com
jamesjdougherty.com
hongosbaires.com.uy
www.rodrigorosario.es
www.shape-club.com
stacks.jknerr.com
lifethegame.games235.com
share.graphy.com
www.greenskycleaners.com
www.laszlok.com
maalvarado.com
lonelygamer5th.com
www.gymlog-app.com
paulachris.com
muuuh.com
www.opinionmining.com
www.mint-teams.com
www.huaanwa.com
slides.hereforjesus.com
quiklogs.com
sansehmart.com
portfolioaudrey.com
modelright.com
samjarrah.com
spacex.moesalih.com
sunwest-trust.solerabank.com
beta.oneclickapp.com
aldasforras.hu
www.api.gonerocket.com
prosenote.com
dermatologia.prepmedrd.com
www.lautaroaguirre.com
attractionsupporttest.amero.dk.attraction1.ameroservices.dk
www.nexusongrand.com
www.app.casadiconti.com.br
mindlabor.dev
admin.jackaservice.com
padron.colegiodegestores.com.ar
www.mjhlaw.co.za
ontrapeeps.com
www.gophergo.dev
painel.axerweb.com
paavn.in
manageconnect.rentokil-initial.com
gurubargoa.in
igical.net
trackandact.totsguide.com
www.applied.digital
thrurealty.com
onlyjs.io
search.library.ethz.ch
jhtools.org
gjsentinel.enotice.io
equitystorytrader.equix.app
www.fashionfusion.cyou
liquidconceptpools.net
auth.qipu.com.br
www.xenon.digital
console.loyca.app
jsghossa.me
parame.ai
acredita.estudio-sandbox.app
qad.nl
www.ershub.in
compliance.bcb.group
www.grammatica.io
www.swellcheck.org
www.bitassociates.jp
database.ezhub.app
dev.morgansolar.xyz
grabolaser.com.co

Other certificates including the domain name financialnexus.ca

(limited to 100 certificates)
www.w-scores.com
app.speaklah.com
web.shelterapp.org
www.memestars.app
kazutoyoakihasblog.ameliaislandselect.com
www.littleops.io
games.2sgamix.com
www.firegize.com
auth.compeatperformance.com
www.degroen.solutions
live.spur.io
www.bingfolio.com
walkershuffle.sqwadhq.com
www.dralikurt.com
quiz.oskarnordgren.se
admin1046.estore.business
i10n.ogado.app
www.l-a-s.be
www.l-a-s.be
rebornagain.art
www.cablemagico.ec
walkershuffle.sqwadhq.com
fynmo.com
www.mcflyindustries.com
v0.mui.wertarbyte.com
apps.bruvi.com
ortahisar.zeplinx.com
www.gymlog-app.com
pulsomusic.com
financialnexus.ca
www.suite-elite.com
mr-mix.site
faq.whereiam.info
findtime.app
curio.llc
dl.gauss.club
paavn.in
omc.honsikdang.com
www.prestigeplus.pcalc.net
lolanano.com
www.destamutisya.com
tracktruck.app
app.smartchargecontroller.ch

Certificate

The complete raw certificate details for financialnexus.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 233965041704953851273798016250747220225
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 01:30:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 02:27:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'financialnexus.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/rReNeT7GHik'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialnexus.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.disruptive-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.myprism.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysticswordstudios.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wip.eternal-visions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dartmap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagareyama-signage.alfalink-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devdebut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlielewiswrites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutter-base.emmacanhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterdrivingtheory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.beamo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daunao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firelize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passwordreset.evertelapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consciousthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainer.spbeu.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fc-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldercareval.foresitehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireauth.instanteat.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims-r.dev-ltl-xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectedapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trabeepocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexcocan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glm-productions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.pantes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gav0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuzonmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reversi.itziks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesjdougherty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongosbaires.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rodrigorosario.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shape-club.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stacks.jknerr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifethegame.games235.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.graphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenskycleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laszlok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maalvarado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonelygamer5th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gymlog-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulachris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muuuh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opinionmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mint-teams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huaanwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slides.hereforjesus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiklogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sansehmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolioaudrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modelright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samjarrah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacex.moesalih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunwest-trust.solerabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.oneclickapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldasforras.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.gonerocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermatologia.prepmedrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lautaroaguirre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attractionsupporttest.amero.dk.attraction1.ameroservices.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nexusongrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.casadiconti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindlabor.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jackaservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padron.colegiodegestores.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mjhlaw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontrapeeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gophergo.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painel.axerweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paavn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manageconnect.rentokil-initial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurubargoa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igical.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackandact.totsguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applied.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrurealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyjs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.library.ethz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhtools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjsentinel.enotice.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equitystorytrader.equix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fashionfusion.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidconceptpools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.qipu.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xenon.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.loyca.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsghossa.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parame.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acredita.estudio-sandbox.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ershub.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.bcb.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammatica.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swellcheck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitassociates.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'database.ezhub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.morgansolar.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grabolaser.com.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/xVMz_ej0Qc4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f1316c0610000040300473045022100e7ef65a54f55010042b98cbdfd683a05c55ddeea255b13e0cc1ced8ce1166c1402201746c9517116123e324ce2cc9eca8e8756aa5de40fcba8b6f00e30ae7820879200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1316c0950000040300473045022100a5b51dc924ac2d8ebd3a93e1be2b71f8ea88701b693f70df6882e7f56499f857022057aed67e2115ab31785e1f5d325448817f285f9bd13b88975a6a5d89230d774a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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