karenkerns.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a9:db:00:8a:47:7d:72:96:10:56:47:0e:df:06:30:7c was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=karenkerns.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a9:db:00:8a:47:7d:72:96:10:56:47:0e:df:06:30:7c
Serial Number (int): 225776655255281429282605352996628213884
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 80:40:37:6d:eb:de:54:37:17:6f:68:2d:ff:73:a4:9f:15:76:26:4b
Fingerprint (sha256): ce:bc:37:10:da:85:c7:1a:25:c3:5d:25:30:79:7e:0e:22:e2:75:6f:b1:2d:0d:dd:bd:bd:77:cd:bf:b2:f7:98

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/vmg7vN3m6gs
CRL Distribution Point: http://crls.pki.goog/gts1d4/X_lk8C31Vz0.crl

Check the revocation status for certificate karenkerns.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for karenkerns.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

karenkerns.com
jacquesleemans.com
loopcupcakes.com
hk.goop.ai
chiropracteur-paris14.fr
www.ekorau.com
www.gitlists.com
voices.ezturns.com
grubie.ltd
www.m-aura.abiinteriors.com.au
lexicola.com
www.gumuscay.bel.tr
link.getwardrobe.com
infinite.li
teameight.dev
www.internetteapot.com
www.awesomecontainer.com
app.undersports.club
www.okinari.dev
shuvi.seneal.dev
vicentsornosa.com
www.joinkopa.com
auth9.google.eitvcloud.com
play.hofsethbiocare.com
khodiyarchalisa.com
hiltonsoforlando.visitingmedia.com
yobot.co.nz
v1.dhruvkumarjha.com
link.tamdiem247.com
tanishanails.com
www.tamayodevelop.com
resfinex.com
www.syaau.com
www.sportlytics.com
www.volkproperties.com
laptopslifestyle.us
www.gocad.de
rhinooffice.com.au
link.clicnscores.fr
our-wedding-page.de
statics.infra.doorjames.com
pstproduction.com
widle.studio
pic-lottoquebec.mentor-na.neccton.com
widget.parkable.com
www.scholarlyai.com
mammouth-malin.ouihelp.fr
www.dnnestates.com
aana.live
support.fxr.to
kpis.tech
api.trivia.willfry.co.uk
d6.jbarr.io
beyogluenderun.com
www.qisparklingenergy.com
mvpenthouse.com
insider.works
chufsd.backpackfordrive.app
uniscooters.joyridecity.bike
www.playrummy-online.com
dev.mychro.io
www.humanitarianmaking.org
www.chip.studio
app.intecc.org
auth.wedew.my
www.wellmap.io
coffee.getorda.com
www.oriacsolutions.com
www.oyloo.com
pegasustransport.com.au
www.appxamine.com
feasibility.catalytic.28east.co.za
feedback.checkinn.co
password.simonolander.org
crispnow-orders-demo.crispnow.com
www.alisonhaines.ca
30wage.com
blushbit.com
www.wereport.work
cofcontests.com
kyt.cryptospace.com
casymymy.wibrand.asia
c.br.shopcall.io
heeraclinics.com
www.cordondeplata.com
d.xmed.uz
qrcode.cuisinewise.com
estudiarper.com
draftingbot.com
members.gritperformance.co
beta.highhairroom.fi
gochurn.com
sx.greenhousedex.com
magicamentecreativo.com
www.lihhatsov.com
juntosprotection.com.br
app.cozy-house.jp
botigaonline.panet.cat
mainlinecrafts.com
standwithukraine.chicksnft.art

Other certificates including the domain name karenkerns.com

(limited to 100 certificates)
digist.helperstudent.com
www.concretepours.com
www.limeyer.co
english.doodlelearning.com
www.bestotaxi.com
hitalama.com
www.cointh.com
beta.quantumfintech.group
serv.apaladar.com
teameight.dev
digist.helperstudent.com
order.thepalacemackay.com.au
www.cointh.com
nuvact.com
admin.oceanhotelsimages.com
crystal.d6.rubyx.io
kovomik.cz
karenkerns.com
assets.planmates.app
bauxeo.binstock24h.com
speedyconsulting.com.br
oauth.discaste.com
www.missiongivemn.com
www.concretepours.com
nader.tn
poker.redlemon.app
staging.sasta.app
www.easyhealth.com
tomasbelada.com
karenkerns.com
www.missiongivemn.com
www.concretepours.com
sciavo.com
www.teknogic.com
qwest.app
churchdiary.in
www.karenkerns.com
www.gutachter.work
poker.redlemon.app
support.easysignage.com
www.leichtgewicht.at
tecnetics.in
primary.glor-dev.com
angularmastery.academy
in1.ai
kovomik.cz
nangolijude.com
www.leichtgewicht.at
www.gutachter.work
www.nextgatecapital.com
karenkerns.com
www.thx1138-force.com
karenkerns.com
achiverscargo.com
karenkerns.com
www.concretepours.com
karenkerns.com
karenkerns.com
in1.ai
akhousing.in
www.bestotaxi.com
console.cloudleft.ie
www.chihuahuas-in-texas.com

Certificate

The complete raw certificate details for karenkerns.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 225776655255281429282605352996628213884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 17:37:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 18:34:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'karenkerns.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/vmg7vN3m6gs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2066 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karenkerns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacquesleemans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loopcupcakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.goop.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiropracteur-paris14.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ekorau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gitlists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voices.ezturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grubie.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-aura.abiinteriors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexicola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gumuscay.bel.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.getwardrobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinite.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teameight.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetteapot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awesomecontainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.undersports.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okinari.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuvi.seneal.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicentsornosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joinkopa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth9.google.eitvcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.hofsethbiocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khodiyarchalisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiltonsoforlando.visitingmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yobot.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.dhruvkumarjha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.tamdiem247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanishanails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamayodevelop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resfinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syaau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportlytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volkproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laptopslifestyle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gocad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhinooffice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.clicnscores.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'our-wedding-page.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics.infra.doorjames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pstproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widle.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pic-lottoquebec.mentor-na.neccton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.parkable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scholarlyai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammouth-malin.ouihelp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnnestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aana.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fxr.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpis.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.trivia.willfry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd6.jbarr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyogluenderun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qisparklingenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvpenthouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chufsd.backpackfordrive.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniscooters.joyridecity.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playrummy-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mychro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humanitarianmaking.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chip.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.intecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.wedew.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmap.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffee.getorda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oriacsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oyloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegasustransport.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appxamine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feasibility.catalytic.28east.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.checkinn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'password.simonolander.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crispnow-orders-demo.crispnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alisonhaines.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '30wage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blushbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wereport.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofcontests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyt.cryptospace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casymymy.wibrand.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.br.shopcall.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heeraclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cordondeplata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.xmed.uz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode.cuisinewise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estudiarper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draftingbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.gritperformance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.highhairroom.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gochurn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sx.greenhousedex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicamentecreativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lihhatsov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juntosprotection.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cozy-house.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botigaonline.panet.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlinecrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standwithukraine.chicksnft.art'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/X_lk8C31Vz0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d1ddd0cc60000040300473045022100f128aa870dafc23d521dae6eb315a6f287c7d9d540cceb0d7193b060a507b6a4022014bd04480d1e46a64dea8bfd3e73197ca543ebd2bb4a8f0d091dae6d393a770e00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1ddd0cea0000040300463044022033bdf9bfaf5e733f16a27e5a48c0585d3ebc9765eda4cb35d7cff2e57479ccea02206ebf216f9aaf3dc06be64d9e9c5f811a87bbcd63ace6b5e1612b252a207c7e05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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