www.onevest.co.za

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 31:bb:50:c9:9b:33:aa:8e:10:eb:4e:40:d0:d8:74:da was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.onevest.co.za

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 31:bb:50:c9:9b:33:aa:8e:10:eb:4e:40:d0:d8:74:da
Serial Number (int): 66104769871668485201655253060854248666
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 87:67:03:01:da:5f:9d:94:68:7f:67:c1:0c:8b:ee:2b:67:ef:0e:56
Fingerprint (sha256): c7:95:50:9f:2b:bf:90:0b:1c:d4:fa:1f:05:37:e8:bd:fb:24:5c:d1:9b:ad:e2:7f:64:39:cf:22:1b:6c:1a:11

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/X44tzoDx5Xg
CRL Distribution Point: http://crls.pki.goog/gts1d4/7v9OGI47N-I.crl

Check the revocation status for certificate www.onevest.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.onevest.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.onevest.co.za
claudiu-lazar.com
www.paraglidingweatherreno.com
store.tolmguate.org
parafia.ofiara.org
www.store.tolmguate.org
portfolio.plusclass-sports-incubation.co.jp
bluedom.tech
static.alphasigma.uk
freja.devel.agriopt.se
s.asig.uk
physics1sim001.wizes.co.th
m.freja.devel.agriopt.se
thesicilianshop.intravaiaezio.co.uk
www.brandonjackson.co.uk
goclub.uno
staging.cemento.ai
app.grams.vc
admin.dev.app.konch.ai
link-dev.wondar.ai
mideastsalsa.app
gymlogger.app
www.kelectric.app
muvrai.app
www.pretaskplan.app
juststream.com.au
fidelidadesotreq.com.br
empresa.doctorclin.com.br
website1078.estore.business
www.strengthcorp.app
clap.biz
xroad.app
www.lmjunho2021.com.br
dashboard.udcstaff.com.au
psypop.ca
sales.aegiscustody.com
arenafarm.com
www.agranibazaar.com
www.sensit.cloud
www.axiebets.com
calzy.com
admin.claimscalc.com
click4card.com
bubble.bubble-vr.com
www.livionaef.ch
www.click4card.com
dghs-cst.cmedhealth.com
www.datepainter.com
www.cowerkerz.com
crm.freegstinvoice.com
eficensit.flairtechno.com
frugivor.com
hotelreviews-th.com
devfest2018-beta.gdgnantes.com
app.dev.invoicenxt.com
chevxeron-advisors-stage-5.ischoolconnect.com
fce-mesh.jdahbur.com
face-rec.jdahbur.com
jedatu.com
admin.futurehealthspaces.com
link.lapture.com
learnable-app.com
lolli.com
mauerv.com
www.meethitch.com
www.mindofmatthew.com
www.kreaplace.com
lp-dev.musicplayce.com
namesforkid.com
login.mytesthero.com
frfirebase.moboreader.com
lab.nostics.com
my-assi.com
pachka-english.com
www.pchomedecor.com
ourafricansafari.com
app.pentabilities.com
quantumderail.com
scorecard.progressivemass.com
simpleappli.com
www.quantumderail.com
links.seambooks.com
stuartslist.com
williamdeangelis.com
strawberryshot.com
matthewtyson.dev
teste.lupi.delivery
www.splitit.dev
norstat.titop.fr
cloutengine.io
www.trinique.in
www.cloutengine.io
midas.usecorner.io
santa.usecorner.io
freee-for-kintone.freee-apps.jp
habet.me
www.costruzionidigisrl.it
hello.michaeljames.me
americansongcontest.kg
www.hargapedia.com.my

Other certificates including the domain name onevest.co.za

(limited to 100 certificates)
aws.janmir.app
irmelivaher.com
www.helixcry.com
portal.accodeing.app
staking.collectorcoin.com
onevest.co.za
bestow.app
www.lifecoin.ai
www.helixcry.com
www.kalpa.no
www.ogdenvalleyparks.com
goko.ml
www.taskeen.co
www.mrchanga.app
cooperdinamica.coop.br
glitzbd.com
cursuri.culturadata.ro
boysopon.com
dev.charge.evup.com.au
publify.app
links.integration.noprintz.si
jakeardoin.com
jane.pe.kr
byreveal.thelevel.ai
datamaster.itmlive.in
auth.visionzap.com
www.dannyyy-jimenez.xyz
jakeardoin.com
www.dannyyy-jimenez.xyz
ai-see-you.genielab.co
portal.accodeing.app
www.onevest.co.za
www.onevest.co.za
bestow.app
roxabo.com
www.gabrielveloz.com
jane.pe.kr
account.snappyxo.io
www.taskeen.co
onevest.co.za
abmed.sk
gavintipker.com

Certificate

The complete raw certificate details for www.onevest.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINjTCCDHWgAwIBAgIQMbtQyZszqo4Q605A0Nh02jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMjEyMTkxMTE0NTZaFw0yMzAzMTkx
MTE0NTVaMBwxGjAYBgNVBAMTEXd3dy5vbmV2ZXN0LmNvLnphMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwPDxRgbYO27ytZaZr4
8YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NFvqRmxWeQcamHH+Sk
LPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor1Edo701TqUuGcFXr
w85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE3m7cY7gNCOJwJmxw
W2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYRsEQinoxv3NiFhY1o
q+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22whrwIDAQABo4IKnzCC
CpswDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFGxwJEHEGf1Kbxqb1Y+iFE4mIRDIMB8GA1UdIwQYMBaA
FCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcw
AYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvWDQ0dHpvRHg1WGcwMQYI
KwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5kZXIw
gghABgNVHREEggg3MIIIM4IRd3d3Lm9uZXZlc3QuY28uemGCEWNsYXVkaXUtbGF6
YXIuY29tgh53d3cucGFyYWdsaWRpbmd3ZWF0aGVycmVuby5jb22CE3N0b3JlLnRv
bG1ndWF0ZS5vcmeCEnBhcmFmaWEub2ZpYXJhLm9yZ4IXd3d3LnN0b3JlLnRvbG1n
dWF0ZS5vcmeCK3BvcnRmb2xpby5wbHVzY2xhc3Mtc3BvcnRzLWluY3ViYXRpb24u
Y28uanCCDGJsdWVkb20udGVjaIIUc3RhdGljLmFscGhhc2lnbWEudWuCFmZyZWph
LmRldmVsLmFncmlvcHQuc2WCCXMuYXNpZy51a4IacGh5c2ljczFzaW0wMDEud2l6
ZXMuY28udGiCGG0uZnJlamEuZGV2ZWwuYWdyaW9wdC5zZYIjdGhlc2ljaWxpYW5z
aG9wLmludHJhdmFpYWV6aW8uY28udWuCGHd3dy5icmFuZG9uamFja3Nvbi5jby51
a4IKZ29jbHViLnVub4ISc3RhZ2luZy5jZW1lbnRvLmFpggxhcHAuZ3JhbXMudmOC
FmFkbWluLmRldi5hcHAua29uY2guYWmCEmxpbmstZGV2LndvbmRhci5haYIQbWlk
ZWFzdHNhbHNhLmFwcIINZ3ltbG9nZ2VyLmFwcIIRd3d3LmtlbGVjdHJpYy5hcHCC
Cm11dnJhaS5hcHCCE3d3dy5wcmV0YXNrcGxhbi5hcHCCEWp1c3RzdHJlYW0uY29t
LmF1ghdmaWRlbGlkYWRlc290cmVxLmNvbS5icoIZZW1wcmVzYS5kb2N0b3JjbGlu
LmNvbS5icoIbd2Vic2l0ZTEwNzguZXN0b3JlLmJ1c2luZXNzghR3d3cuc3RyZW5n
dGhjb3JwLmFwcIIIY2xhcC5iaXqCCXhyb2FkLmFwcIIWd3d3LmxtanVuaG8yMDIx
LmNvbS5icoIZZGFzaGJvYXJkLnVkY3N0YWZmLmNvbS5hdYIJcHN5cG9wLmNhghZz
YWxlcy5hZWdpc2N1c3RvZHkuY29tgg1hcmVuYWZhcm0uY29tghR3d3cuYWdyYW5p
YmF6YWFyLmNvbYIQd3d3LnNlbnNpdC5jbG91ZIIQd3d3LmF4aWViZXRzLmNvbYIJ
Y2FsenkuY29tghRhZG1pbi5jbGFpbXNjYWxjLmNvbYIOY2xpY2s0Y2FyZC5jb22C
FGJ1YmJsZS5idWJibGUtdnIuY29tghB3d3cubGl2aW9uYWVmLmNoghJ3d3cuY2xp
Y2s0Y2FyZC5jb22CF2RnaHMtY3N0LmNtZWRoZWFsdGguY29tghN3d3cuZGF0ZXBh
aW50ZXIuY29tghF3d3cuY293ZXJrZXJ6LmNvbYIWY3JtLmZyZWVnc3RpbnZvaWNl
LmNvbYIZZWZpY2Vuc2l0LmZsYWlydGVjaG5vLmNvbYIMZnJ1Z2l2b3IuY29tghNo
b3RlbHJldmlld3MtdGguY29tgh5kZXZmZXN0MjAxOC1iZXRhLmdkZ25hbnRlcy5j
b22CFmFwcC5kZXYuaW52b2ljZW54dC5jb22CLWNoZXZ4ZXJvbi1hZHZpc29ycy1z
dGFnZS01LmlzY2hvb2xjb25uZWN0LmNvbYIUZmNlLW1lc2guamRhaGJ1ci5jb22C
FGZhY2UtcmVjLmpkYWhidXIuY29tggpqZWRhdHUuY29tghxhZG1pbi5mdXR1cmVo
ZWFsdGhzcGFjZXMuY29tghBsaW5rLmxhcHR1cmUuY29tghFsZWFybmFibGUtYXBw
LmNvbYIJbG9sbGkuY29tggptYXVlcnYuY29tghF3d3cubWVldGhpdGNoLmNvbYIV
d3d3Lm1pbmRvZm1hdHRoZXcuY29tghF3d3cua3JlYXBsYWNlLmNvbYIWbHAtZGV2
Lm11c2ljcGxheWNlLmNvbYIPbmFtZXNmb3JraWQuY29tghRsb2dpbi5teXRlc3Ro
ZXJvLmNvbYIZZnJmaXJlYmFzZS5tb2JvcmVhZGVyLmNvbYIPbGFiLm5vc3RpY3Mu
Y29tggtteS1hc3NpLmNvbYIScGFjaGthLWVuZ2xpc2guY29tghN3d3cucGNob21l
ZGVjb3IuY29tghRvdXJhZnJpY2Fuc2FmYXJpLmNvbYIVYXBwLnBlbnRhYmlsaXRp
ZXMuY29tghFxdWFudHVtZGVyYWlsLmNvbYIdc2NvcmVjYXJkLnByb2dyZXNzaXZl
bWFzcy5jb22CD3NpbXBsZWFwcGxpLmNvbYIVd3d3LnF1YW50dW1kZXJhaWwuY29t
ghNsaW5rcy5zZWFtYm9va3MuY29tgg9zdHVhcnRzbGlzdC5jb22CFHdpbGxpYW1k
ZWFuZ2VsaXMuY29tghJzdHJhd2JlcnJ5c2hvdC5jb22CEG1hdHRoZXd0eXNvbi5k
ZXaCE3Rlc3RlLmx1cGkuZGVsaXZlcnmCD3d3dy5zcGxpdGl0LmRldoIQbm9yc3Rh
dC50aXRvcC5mcoIOY2xvdXRlbmdpbmUuaW+CD3d3dy50cmluaXF1ZS5pboISd3d3
LmNsb3V0ZW5naW5lLmlvghJtaWRhcy51c2Vjb3JuZXIuaW+CEnNhbnRhLnVzZWNv
cm5lci5pb4IfZnJlZWUtZm9yLWtpbnRvbmUuZnJlZWUtYXBwcy5qcIIIaGFiZXQu
bWWCGXd3dy5jb3N0cnV6aW9uaWRpZ2lzcmwuaXSCFWhlbGxvLm1pY2hhZWxqYW1l
cy5tZYIWYW1lcmljYW5zb25nY29udGVzdC5rZ4IVd3d3LmhhcmdhcGVkaWEuY29t
Lm15MCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUw
MzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0Lzd2OU9HSTQ3Ti1J
LmNybDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AOg+0No+9QY1MudXKLyJa8kD
08vREWvs62nhd31tBr1uAAABhSpQ2s8AAAQDAEcwRQIgNqSK/emyQ/P6ujJsDn0p
/bhxxlx07DCKk6KmMfm67FICIQCYLXXct6IWnoGyP0xjDqIvb4fxq6AxRNyPrvWw
3RZx4AB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhSpQ21EA
AAQDAEgwRgIhAP6RXz3UGZVkU8i4orswBKoRvBn4YlQG9vGUdXlxL808AiEA5RGK
vdc0MVy3BjkDWDZJoYubW6poJzO3wWN0aekVf20wDQYJKoZIhvcNAQELBQADggEB
AChxDzdlOTwfj2zdJJEDq8IIJ6ODvVCJ/YBaB/k8u8mKBv1lB76P5Yeva536TMQa
DrADXyMIV+BJVHga0OP90n5GUfq654dSV/E06pry/CAtc0wFdoOOUfplHUVvhXMW
oHj0uhpw2d1tzUrsWzhk5Ktk22NqTagvSLurLTHjnQXq7FGEO7ucg9+fP5hbWzO0
S5rtCP6UggM+kcphJz3Zo8MaUmwbA7gdq0kkdmOxFKCNcAgywgXQZkxCUy4d0e0t
Z1vBe0B7etu+aKiYVK1PgEIpRFfsCWELN/L+4Bbb3RSHuXTsV46bZZUtFF9bEq4p
mv6VTMnBLdMibu3AfHPXYjU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 66104769871668485201655253060854248666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 11:14:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 11:14:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.onevest.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/X44tzoDx5Xg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onevest.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claudiu-lazar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paraglidingweatherreno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.tolmguate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafia.ofiara.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.store.tolmguate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.plusclass-sports-incubation.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluedom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.alphasigma.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freja.devel.agriopt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.asig.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physics1sim001.wizes.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.freja.devel.agriopt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesicilianshop.intravaiaezio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandonjackson.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goclub.uno'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cemento.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.grams.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dev.app.konch.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-dev.wondar.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mideastsalsa.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gymlogger.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelectric.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muvrai.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretaskplan.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juststream.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelidadesotreq.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empresa.doctorclin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website1078.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strengthcorp.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clap.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xroad.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmjunho2021.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.udcstaff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psypop.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.aegiscustody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenafarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agranibazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sensit.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axiebets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calzy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.claimscalc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click4card.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubble.bubble-vr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livionaef.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.click4card.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dghs-cst.cmedhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datepainter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cowerkerz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.freegstinvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eficensit.flairtechno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frugivor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelreviews-th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfest2018-beta.gdgnantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.invoicenxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevxeron-advisors-stage-5.ischoolconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fce-mesh.jdahbur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'face-rec.jdahbur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jedatu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.futurehealthspaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.lapture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnable-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lolli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauerv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meethitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindofmatthew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kreaplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-dev.musicplayce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namesforkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mytesthero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frfirebase.moboreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.nostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-assi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pachka-english.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pchomedecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourafricansafari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pentabilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantumderail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.progressivemass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpleappli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quantumderail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.seambooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuartslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williamdeangelis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strawberryshot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewtyson.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teste.lupi.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitit.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norstat.titop.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloutengine.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinique.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloutengine.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midas.usecorner.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santa.usecorner.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freee-for-kintone.freee-apps.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habet.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costruzionidigisrl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.michaeljames.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americansongcontest.kg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hargapedia.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/7v9OGI47N-I.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001852a50dacf0000040300473045022036a48afde9b243f3faba326c0e7d29fdb871c65c74ec308a93a2a631f9baec52022100982d75dcb7a2169e81b23f4c630ea22f6f87f1aba03144dc8faef5b0dd1671e00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001852a50db510000040300483046022100fe915f3dd419956453c8b8a2bb3004aa11bc19f8625406f6f1947579712fcd3c022100e5118abdd734315cb7063903583649a18b9b5baa682733b7c1637469e9157f6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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