ipo-rakupo-stg.knz-c.com

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 24:59:ba:df:5e:5d:a4:23:0a:00:00:00:00:c3:84:41 was issued on by Google Trust Services.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ipo-rakupo-stg.knz-c.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:59:ba:df:5e:5d:a4:23:0a:00:00:00:00:c3:84:41
Serial Number (int): 48318112493937887114012812007851656257
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): a5:81:4a:ef:9d:e8:4b:2d:b8:a6:94:0e:63:ae:12:1a:61:7d:70:16
Fingerprint (sha256): cb:db:45:6e:1f:e1:7e:0c:bb:34:0b:02:4d:ec:10:49:0f:ac:c6:79:c8:60:70:60:ef:0a:97:fa:19:47:76:99

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crls.pki.goog/gts1d2/hKm8Z-XvuwI.crl

Check the revocation status for certificate ipo-rakupo-stg.knz-c.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ipo-rakupo-stg.knz-c.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ipo-rakupo-stg.knz-c.com
mortar-labs.com
nunoventuradesousa.com
partner.myfreshbasket.com
exploration.orbitist.com
ostbay.com
rooms.oaks-lab.com
phenom-ideas.com
phuketsoftevent.com
ardoi.porcelanosapartners.com
planetventura.com
linet.safe-balance.com
www.phuketsoftevent.com
www.scholarshipjunkies.com
dev-cloudda.shipsfocus.com
www.planetventura.com
configuratorplus.southwire.com
brand.sparkamplify.com
spectatest.spectaflow.com
stickheap.com
tennisscoresheet.com
www.thepipecat.com
link.twidpay.com
www.tryapollo.com
xgamedev.com
www.topsilex.com
voyagergroupre.com
www.bauunternehmen-wardenburg.de
zpodsclub.com
app.gymtelligence.de
www.aparthotelevora.cv
www.voyagergroupre.com
www.trestni-oznameni.cz
www.baerbel-panther.de
regente.eu
www.benhonda.dev
www.schuldenhilfe-zentrale.de
betaorionis.dev
www.giangza.dev
matchbox.inprod.dev
j-ko.dev
ryanerskine.dev
talipcesur.fr
admin.medicalpoint.in
www.optimusiot.in
nfrost.dev
mobbit.prexto.mx
ujung.botio.io
cybermind.io
latawiec.net
wiscom.io
nj.land
bitcoinrock.net
www.grupostandard.org
www.cybermind.io
www.wiscom.io
www.tejedoresdevida.org
www.sykes.tech
link.rentable.pk
www.welshwellbeing.co.uk
www.12fish.co.uk
www.gotsize.ru
hotdraw.co.uk
www.roccasecca.co.uk
sandos.us
www.sandos.us
kmaa.impactwrap.com
vivid-pool.info
www.mytimesheet-app.com
uxinsights.cataliza.co
dl.gedweb.com.br
www.hairpilot.net
mytimesheet-app.com
messenger-manager.cataliza.co
windzyboy.com
rs-studio.lv
when2meet.ru
ddoozy.com
www.cryptocollective.co.uk
m.satmm.es
widget.clickconnector.app
www.when2meet.ru
www.super-driver.net
www.atlasphoto.co
sahakar-group.com
cryptocollective.co.uk
dashboard.publifiec.com
jamesmwallacejr.com
hireright.app
storealms.com
indedsolution.com
www.redmedia.com
ashutoshkrbhargava.com
ysm.storymate.net
www.vivid-pool.info
www.linkki.xyz
www.amohastore.com
resin.genshin.chikach.net
www.boafarina.com
www.formerly373.com

Other certificates including the domain name knz-c.com

(limited to 100 certificates)
dl.gedweb.com.br
cadastro-develop.taniafruchi.com.br
git.mcnaveen.com
dl.gedweb.com.br
leofashion.piticommerce.com
www.towerwatch.gg
sharptools.io
www.fantasize-technology.com
git.mcnaveen.com
ipo-rakupo-stg.knz-c.com
budzreherb.com
www.apachi.app
limitless.turnosweb.app
aire-madrid.lobelia.earth
viinikanlahti-by-winter.weup.city
www.cvonthemove.co.za
takeactionforblacklives.com
aire-madrid.lobelia.earth
simon.lindner.day
app.mobilization.market
stepstonehospitality.visitingmedia.com
www.accordle.fr
www.ledalliance.biz
pathinvestimentos.com.br
uat.vs.ccreatorx.com
nealwadhwa.com
rakupo.knz-c.com
www.leapped.com
www.dosha.uz
enforce.mpla.io
boteria.xlab.work
www.thequizbattle.com
www.disismarketa.com
techheralds.in
socialiseyou.tk
joecorp.dev
www.app.feta.ai
chandiradev.ml
sharptools.io
www.nantucketselfstore.com
app.heylo.co
ios.nicolasschotten.com
bankiwi.io
socialiseyou.tk
enforce.mpla.io
rishtpusht.org
zastucreative.com
tutel.no
simon.lindner.day
open.moving.so
ipo-rakupo-stg.knz-c.com
www.thx1138-force.com
ipo-rakupo-stg.knz-c.com
bankiwi.io
fitbud.me
csa.apoio.tech
khetivalah.com
www.zenreki.network
bankit.mikelkamel.com
www.ledalliance.biz
bookoff-auto-purchase.app.knz-c.com
einreg.org
browsandyou.ca

Certificate

The complete raw certificate details for ipo-rakupo-stg.knz-c.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48318112493937887114012812007851656257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-13 21:05:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-12 21:05:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipo-rakupo-stg.knz-c.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1999 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipo-rakupo-stg.knz-c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortar-labs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nunoventuradesousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.myfreshbasket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploration.orbitist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rooms.oaks-lab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phenom-ideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phuketsoftevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardoi.porcelanosapartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetventura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linet.safe-balance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phuketsoftevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scholarshipjunkies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cloudda.shipsfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetventura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configuratorplus.southwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.sparkamplify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectatest.spectaflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stickheap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennisscoresheet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thepipecat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.twidpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tryapollo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xgamedev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topsilex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyagergroupre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bauunternehmen-wardenburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zpodsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gymtelligence.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aparthotelevora.cv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voyagergroupre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trestni-oznameni.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baerbel-panther.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regente.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benhonda.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schuldenhilfe-zentrale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betaorionis.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giangza.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchbox.inprod.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'j-ko.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanerskine.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talipcesur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.medicalpoint.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optimusiot.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfrost.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobbit.prexto.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujung.botio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybermind.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latawiec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiscom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nj.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinrock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grupostandard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybermind.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiscom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tejedoresdevida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sykes.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.rentable.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welshwellbeing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12fish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotsize.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotdraw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roccasecca.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandos.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandos.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmaa.impactwrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivid-pool.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mytimesheet-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxinsights.cataliza.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.gedweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hairpilot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytimesheet-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger-manager.cataliza.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windzyboy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs-studio.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'when2meet.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddoozy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptocollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.satmm.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.clickconnector.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.when2meet.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.super-driver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlasphoto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahakar-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocollective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.publifiec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesmwallacejr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hireright.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storealms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indedsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashutoshkrbhargava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysm.storymate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivid-pool.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linkki.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amohastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resin.genshin.chikach.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boafarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.formerly373.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d2/hKm8Z-XvuwI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009d71b920c26e901f0065f8a01fa9edff805b7d09ccdb60a448b043f87c2650cacc2e7ddda2fcd4da71164d2be5e76fc07a812fcddddd627bc1d7d3d54374d29107d00eaeb2cc90ce590fa5bb91f67e9ab5adc55a250e83b6d4d8e438cdb11331d6cf021f5ba0fb02977f73ed1c9e09cf62d3599a54564bb7bc60270101d041832f5f5c2a5c8560e41b16d760c810b714a52564e17f79d184186c06e0b2912f42f70cbffa0a5d7ea031e6c49ebae49e60cf384712418aeaa03c712acc1a968e41aa80f875396f68a63eb0eab22169b4952750c8bdbb00278a4704bf792590baec08bb34f1822be53156711c81dbc614abf7a817755c2393f36e9246fb7c361c54