www.okuafofoundation.org

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 77:ba:fd:0f:57:c3:e2:80:10:23:9f:40:71:2e:bd:af was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.okuafofoundation.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:ba:fd:0f:57:c3:e2:80:10:23:9f:40:71:2e:bd:af
Serial Number (int): 159149031379306634407495226919012449711
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 77:c0:58:ae:cd:ea:8d:f2:2e:28:c1:28:22:07:ce:35:73:1c:34:b9
Fingerprint (sha256): cb:93:5c:76:21:cb:7a:21:e3:ba:8e:2f:0b:ed:ee:77:38:b7:14:37:4a:96:48:64:2e:6c:89:9b:6f:72:f9:21

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/iXk9KDcApyI
CRL Distribution Point: http://crls.pki.goog/gts1d4/cirB1shjlHE.crl

Check the revocation status for certificate www.okuafofoundation.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.okuafofoundation.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.okuafofoundation.org
stratagem.com.pk
asddfase.development-nd.tokyo
indiavc.review
www.stratagem.com.pk
titan-dm.se
additivesynth.awakening.systems
braindr.us
www.certyfikat-najemcy.pl
www.mentoro.uk
www.mentoro.us
www.dedefakili.bel.tr
www.saraiva.co.uk
sidorakh.xyz
cornwallbuyslocal.app
tipsy-developer.xyz
trygrid.app
www.simpleasido.com.au
admin.traveltogether.app
rvlife.world
www.222.bike
onboard.resvu.com.au
cacahuete.dylan-g.be
code-once.com.ar
limaimobiliaria.com.br
luizpessetimoveis.com.br
ifeassessoria.com.br
painel.primeiracamara.com.br
www.nicolasvenne.ca
riveraburguer.com.br
gimmy.co
nacional.mipasion.co
www.playops.co
weekeat.co
www.abdul-samad.com
newadmin.aggressiveadvocacy.com
boardingpass.aveloair.com
onboard.safirasolar.com.br
english.comligo.com
beta.exchange.dexkit.com
digidealb2b.com
v1.edanra.com
accounts-stage.edzag.com
geooffering.geodb.com
gethabitual.com
simpledoc.jeripeier.ch
gsconsultingllc.com
review.hocngoainguhieuqua.com
service.home-energy-manager.com
huewing.com
www.heartinhills.com
rp.html5.emallstudio.com
app.invoicebillity.com
rdp.cas.itopia.com
cas-portal-beta.itopia.com
cas-auth.itopia.com
jamesdocherty.com
jasonandlane.com
app.leathertracer.com
store.kelcomvds.com
mehdikarim.com
mareah.com
www.invoiceseasy.com
yamen4b.com
dev.latinad.com
nexscio.com
link.ebay-kleinanzeigen.de
brunner-montage.de
bbuy.zajno.com
peasypicker.ssam.dev
www.enking.dev
efterskatt.eu
vitskuliiga.fi
a7pro.info
shop1.topwayenergy.in
beanlist.io
expat.sbarbeau.fr
hoili.io
w1ng.fun
advanscotedivoire.d6beta.rubyx.io
www.galvanize.me
storym.io
dev-s.teller.jp
www.w1ng.fun
www.funzionegrafica.it
mahoran-suginami.copotal-factory.jp
maintain.me
qzz.me
app.valoapp.io
www.provincianos.mx
uejosesalazar.codexplus.net
nazareth.codexplus.net
uemartinlutero.codexplus.net
www.medisinpluss.no
medisinpluss.no
www.jayprajapati.me
londen.felixxgroep.nl
thewordforum.org
uscarrom.org
www.fiveways.pizza

Other certificates including the domain name okuafofoundation.org

(limited to 100 certificates)
prod-aws.admin.playbook.vc
www.okuafofoundation.org
www.okuafofoundation.org

Certificate

The complete raw certificate details for www.okuafofoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159149031379306634407495226919012449711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-29 08:49:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-27 08:49:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.okuafofoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/iXk9KDcApyI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okuafofoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stratagem.com.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asddfase.development-nd.tokyo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiavc.review'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stratagem.com.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titan-dm.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'additivesynth.awakening.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braindr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certyfikat-najemcy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mentoro.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mentoro.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dedefakili.bel.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saraiva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidorakh.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallbuyslocal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipsy-developer.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trygrid.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simpleasido.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.traveltogether.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvlife.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.222.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboard.resvu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacahuete.dylan-g.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code-once.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limaimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luizpessetimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifeassessoria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painel.primeiracamara.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicolasvenne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riveraburguer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gimmy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacional.mipasion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playops.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekeat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abdul-samad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newadmin.aggressiveadvocacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardingpass.aveloair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboard.safirasolar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.comligo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.exchange.dexkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digidealb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.edanra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-stage.edzag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geooffering.geodb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gethabitual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpledoc.jeripeier.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsconsultingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.hocngoainguhieuqua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.home-energy-manager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartinhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rp.html5.emallstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.invoicebillity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdp.cas.itopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-portal-beta.itopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-auth.itopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesdocherty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasonandlane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.leathertracer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kelcomvds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehdikarim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mareah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invoiceseasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamen4b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.latinad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexscio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.ebay-kleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunner-montage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbuy.zajno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peasypicker.ssam.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enking.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efterskatt.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitskuliiga.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a7pro.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop1.topwayenergy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beanlist.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expat.sbarbeau.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoili.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w1ng.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanscotedivoire.d6beta.rubyx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galvanize.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storym.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-s.teller.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w1ng.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funzionegrafica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahoran-suginami.copotal-factory.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintain.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qzz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.valoapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provincianos.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uejosesalazar.codexplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazareth.codexplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uemartinlutero.codexplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medisinpluss.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medisinpluss.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jayprajapati.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londen.felixxgroep.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewordforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscarrom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiveways.pizza'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/cirB1shjlHE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000182e9035ac600000403004830460221009d2df1c4a26fcaa23f0763f9f60bf8d7b3c510725d7f0b0b172758eb38fb127e022100a8bcacaa9ba29e815319a732095934b0172e41c84c8d81ebf19e2e4c497f41b500760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000182e9035c350000040300473045022100822c956dbf8c6540c9a010bc1783860822d8704db1aef343230cdb2d56021a270220015b0acb14599142f65c96ea49e00eaf10bdad099a543c8e62fd79e8bec7d918
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0043f74a8cc6ccb7ca6992658c746f85d560a042a3ce18f3142771e20dcafde4b8b311942c71f0a6e9af7983e95bbcb42a5c8c83a30d29ba7612ab0eddfce187f42e1f04ec99d13d01c9821e620ded9463d664dd4bda8d3f35f6dea626a2196a6c24b696efbbe78479ae668722636b42524d1e04da955eca5c65cc7ba0231cfaeb45e5a8afb1c3edf99ec6cd51800288778cf37bf22bc73531d86a5877378b37e8b43a1db0a9aebdbfd257a9083916639a8caa7bec6a440a08dc387fced885b1358b6918806960455dc28385309e89dc7e1fb10db85e99cd6a45e2b048004d2de4dfb4332a1ac3d5cd04a52426153c16cd3ca3684d4f39c43dd9d564e50b463f9b