markusraulf.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number b5:20:07:35:f1:e2:5c:17:10:d8:81:1f:ac:a6:84:fb was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=markusraulf.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b5:20:07:35:f1:e2:5c:17:10:d8:81:1f:ac:a6:84:fb
Serial Number (int): 240756566987362265782787381413317870843
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 3d:97:f8:5f:1b:e1:9f:b6:8e:11:ba:80:b9:75:06:6b:16:79:84:4e
Fingerprint (sha256): c8:3e:94:0e:9a:15:35:3e:33:eb:ed:d2:6a:d4:4a:99:d6:a2:4a:d3:87:f4:0f:27:44:17:60:77:6c:08:5e:87

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/zF2xYzRguZk
CRL Distribution Point: http://crls.pki.goog/gts1d4/X1CPcaEwA08.crl

Check the revocation status for certificate markusraulf.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markusraulf.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

markusraulf.de
web.despo.com.br
anlac.jp
www.sarmaru.ro
team.wakeflow.io
shopsmall2020-takeoutme.com
konsys.co
aidia.it
demo.task.prestoexpress.co.uk
www.nlishop.co.za
qrdesign.se
hitachienergy.parkalot.io
app.geometric.anagraph.io
www.cabinet.ovnlogistics.com
4dimco.ma
account.stage.kqed.org
www.shapelabs.se
beta.nearby.ws
iims.thirdworks.co.kr
s.monotalk.xyz
www.accesscapital.ro
campinas.chuteboxediegolima.com.br
www.alexandrerelvas.com.br
dev.enjoylocal.travel
brand.rethela.com
www.solgenomix.com
cadastro.medassure.com.br
odfjellterminalssouthamerica.com
www.laurabinotto.it
www.easy-assignment.online
718.roox.tk
www.blmachinery.co.in
www.teamradar.katalysatorduravermeer.nl
gasirea.cl
llmwdis.com
reliablemonitoringhomeservices.com
linkage-tech.com
www.angryjoesbbq.ca
todo.kodrick.com
hello.memz.app
www.jaskirat.xyz
www.extolachivers.com
viral-event.com
verifymyapi.com
silenthium.com
www.joypetsitting.com
www.itressources.xyz
www.happysunshinefilm.club
steveasthana.com
angielee.dev
elbichodelosdibujos.com
droneairgear.com
www.angielee.dev
www.greentekenergy.co.uk
imaginacaoativa.com.br
storeus.in
737.roox.tk
haydenvac.com
varan.lk
www.badbaadoambulance.com
www.contactoempresarialec.com
oxitec-firebase.sandbox-dev.co.uk
zingtr.com
801.roox.tk
www.kozelkaelectric.com
www.cottagesvi.com
ralice.net
moussaharkous.com
iamcarlosdaniel.com
www.daredevil.red
kozelkaelectric.com
risewithdata.com
www.economiagenuinamassey.com
auth.betterment.cyberhaven.io
natevanbonn.com
www.saadmazhar.com
wity.it
stemclusive.com
txtconverter.dinf.dev
safemicrosoft.com
www.infinity.letslead.in
chat.xmbengineering.com
www.vendingexperts.net
www.actuallysedz.com
reception.visity.io
www.tailoanbroker.com
secure.echo-lake.org
teakstweaks.com
yault.krozt.dev
brimarias.com
www.jipsthoughts.com
pxsouls.xyz
www.kdolistes.fr
www.avocadic.io
ndsnails.com
www.flonex.me
progressovertimesettlement.com
dev.taxhelper.io
catsaspell.com
ourfinancehustle.com

Other certificates including the domain name markusraulf.de

(limited to 100 certificates)
juliusbrasil.com.br
www.markusraulf.de
markusraulf.de
www.rentalsub.com
app.staging.roboflow.ai
kengo-akimto-private-todo.ga
alcisproject.com
app.loveisvenus.com
www.naas.fans
hayaipharma.com
wipe.city
www.slipity.com
sabel.xyz
hashmedia.info
app.plan-play.com
www.justiceconnect.org
www.petersappliance.com
app.arbalo.dev
dashboard.miracl.at
stronggorilla.ro
www.macronti.com
consultora.eubellanet.com.br
www.nitro.lol
dev.timur.codes
foo.fb.weja.us
old.pack744.com
www.markusraulf.de
socialchoice.nuphilosophy.com
fincs.com.br
admin.dev.drone-roofer.com
topicdna.com
upblight.com
my.live.felix.com
lancaste.dev
protechtl.com
meteorwebsitedesign.com
app.serverl3ss.com
cleverlydisguisedfern.com
dltjewel.com
app.pipezz.io
beta.blog.timothyjordan.com
markusraulf.de
www.afterpaydealfinder.com.au
applinks.landglide.com
test.redbricksolution.com
app.lenarge.com.br
qkfeedback.com
install.raceone.com
socialchoice.nuphilosophy.com
www.crosstripper.com
www.merf.co
markusraulf.de
www.rentalsub.com

Certificate

The complete raw certificate details for markusraulf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 240756566987362265782787381413317870843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 16:27:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 17:26:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markusraulf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/zF2xYzRguZk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2052 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markusraulf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.despo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anlac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarmaru.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.wakeflow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopsmall2020-takeoutme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konsys.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.task.prestoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nlishop.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrdesign.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitachienergy.parkalot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.geometric.anagraph.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabinet.ovnlogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dimco.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.stage.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shapelabs.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.nearby.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iims.thirdworks.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.monotalk.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accesscapital.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campinas.chuteboxediegolima.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexandrerelvas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.enjoylocal.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.rethela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solgenomix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadastro.medassure.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odfjellterminalssouthamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurabinotto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy-assignment.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '718.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blmachinery.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamradar.katalysatorduravermeer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gasirea.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llmwdis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reliablemonitoringhomeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkage-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angryjoesbbq.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todo.kodrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.memz.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaskirat.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extolachivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viral-event.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifymyapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silenthium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joypetsitting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itressources.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happysunshinefilm.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steveasthana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angielee.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbichodelosdibujos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'droneairgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angielee.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greentekenergy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaginacaoativa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '737.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haydenvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varan.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badbaadoambulance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contactoempresarialec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxitec-firebase.sandbox-dev.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zingtr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '801.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kozelkaelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottagesvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moussaharkous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamcarlosdaniel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daredevil.red'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kozelkaelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risewithdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economiagenuinamassey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.betterment.cyberhaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natevanbonn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saadmazhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wity.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemclusive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txtconverter.dinf.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safemicrosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infinity.letslead.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.xmbengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vendingexperts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actuallysedz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reception.visity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tailoanbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.echo-lake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teakstweaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yault.krozt.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brimarias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jipsthoughts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxsouls.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdolistes.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avocadic.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndsnails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flonex.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressovertimesettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.taxhelper.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catsaspell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourfinancehustle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/X1CPcaEwA08.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b586deee5000004030047304502210092770e6108e03fa9d87fc92219604426db2659ea39078b6d2c80b9f0ad45130702201e5447675dc58b8d023789cc382332df0f7d751243cae68fbdb8e79efee865fb00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b586deee40000040300483046022100e336faa2a0a7dd895a66ed8eccbe4f862b8c8bc50939b57a9da05db916edf8700221008693a6037718a40d4c5e416752854f77c2152736793332148b3d593130852de4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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