www.efemes.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 56:e3:74:a5:5a:82:b5:66:12:12:a7:6b:81:cd:1f:6c was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.efemes.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 56:e3:74:a5:5a:82:b5:66:12:12:a7:6b:81:cd:1f:6c
Serial Number (int): 115494624884562677260463250891288158060
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b6:45:9a:59:70:e9:ef:0a:1c:60:31:d5:5d:1e:c7:7a:e5:b9:7d:7f
Fingerprint (sha256): d7:01:2b:ea:f0:2e:1f:f6:df:6b:c3:fd:a9:57:c3:4d:50:3e:a4:72:60:a3:3b:a4:5a:38:e9:d3:80:45:c5:79

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/wCQmmo_Z6xQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/LjtNmxrQfWE.crl

Check the revocation status for certificate www.efemes.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.efemes.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.efemes.de
terms-use.penguin.do
joinevent.ophoto.biz
my.adstock.io
play.raylearning.tuanle.nl
vietbs.com
materialescruz.kydsapp.com
www.ssh.dev
www.censys.co.za
www.app.gedu.it
programx.tech
www.1167madisonavenue.com
anahas.de
www.bist.mx
auth.plunda.co
crnvr.us
dashifi.app
instagram.stillfollowers.app
www.notjson.com
m.vendor-dev.1kmwine.com
statbox.org
vermilionformatter.org
erdoportal.sk
pages-stg.dadan.me
www.roska.app
vert.farm
rxn.chat
app.brickvester.com
create.beezer.com
conceptotecno.com
arrowheadapps.nz
slimgo.pl
go.heyyou.me
cowrybase.com
www.ludo-toitures.be
auto-verkopen-belgie.com
web.morumock.pnpl.com.np
medics.mithealth.app
darksiteid.eu.org
www.kushnir.education
www.awesomebritches.com
www.drnishantjain.com
development.your.remarkable.com
www.cocibolcasource.com
b2b-dashboard.dawsat.com
gujaratnrecoke.com
portabilidad.simtools.mx
go.gut-doc.com
www.renzitosbabys.com
rvz-test.m-catch.com
qadmfgpro.com
support.bizbuzzz.com
meals.dawsat.com
signage.boldlyforge.com
brazsale.martik.site
winteriscoming.agnalim.com
ideesys.com
www.seniorbankbr.com
www.ai1.ie
partner.bizbuzzz.com
micematters.com
pardiikidz.com
lottoplayhere.com
my-motion.bioracermotion.com
masterofone.com
notjson.com
onnutpethospital.com
neighborbaked.com
casino.martik.site
web-project.hyperfre.sh
mobile.dmgpro.com
sharelinkmaker.com
web-staff.hyperfre.sh
www.dergoegge.de
www.karafans.tk
www.mizan.app
app.youkno.ai
demo.toeicmentors.com
pendulumartstudio.db-braun.com
harshitsharma.in
geetaniketanvidyapeeth.in
komis.co.kr
mvlm.net
app.jimtime.it
sessionspace.net
syndet.in
app.sadokorganic.farm
swastiknetworks.in
southindiataxi.in
rohitbhute.in
login.trupedigikendra.com
universe.roboflow.com
shopkeeper.tahtaltalab.com
driver-qa.chowin.co.za
short.sw.com.mx
loserthovaobrazy.cz
wheredidiputmystuff.app
www.trackr.fitness
www.arcaids.me
activethings.app

Other certificates including the domain name efemes.de

(limited to 100 certificates)
xn--bjrnegrden-65a7t.no
efemes.com
kibo.trestlelabs.com
efemes.com
admin.explearning.co
www.bobestyrer.no
efemes.com
register.fishfacts.com
ekklesiaoradea.com
www.mootfinder.com
www.massimomarra.com
ryan.wtf
ryan.wtf
www.efemes.de
efemes.com
restaurant-dev.truphle.com
efemes.com
lovedimension.io
efemes.com
www.lonecesito.co
spacesapp.zang.io
www.petrovicz.com
www.raffl.in
full35.informationimages.net
efemes.com
link.upspeak.de
www.freshprojects.org
efemes.com
avukatyusufsahin.com
comunidade.mobills.com.br
tormap.org
painel-bancomaxima.aebroadcast.com.br
avfs.digifacilities.com
electometro.app
www.wapdidou.tech
kibo.trestlelabs.com
www.scavenger-hunt.co.uk
www.bobestyrer.no
painel-abraofilho.aebroadcast.com.br
www.theseasonpreneur.com
www.shoppingsite.live
ekklesiaoradea.com
efemes.com
www.nibgraphics.com
www.mootfinder.com
psychosatsujin.com
cheatsforhiguesswho.apptget.com
www.efemes.de
efemes.de
teasmade.89allport.co.uk
comunidade.mobills.com.br
myanmargita.com
editor.ppr.studio.atlantide.io
www.lonecesito.co
urooj.art
www.raffl.in

Certificate

The complete raw certificate details for www.efemes.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115494624884562677260463250891288158060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 01:05:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 02:02:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.efemes.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/wCQmmo_Z6xQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efemes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terms-use.penguin.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinevent.ophoto.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.adstock.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.raylearning.tuanle.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materialescruz.kydsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssh.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.censys.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.gedu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programx.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1167madisonavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anahas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bist.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.plunda.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crnvr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashifi.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instagram.stillfollowers.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notjson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.vendor-dev.1kmwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statbox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vermilionformatter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erdoportal.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages-stg.dadan.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roska.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vert.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxn.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.brickvester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'create.beezer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conceptotecno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowheadapps.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimgo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.heyyou.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowrybase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ludo-toitures.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-verkopen-belgie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.morumock.pnpl.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medics.mithealth.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darksiteid.eu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kushnir.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awesomebritches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drnishantjain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.your.remarkable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocibolcasource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-dashboard.dawsat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gujaratnrecoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portabilidad.simtools.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gut-doc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renzitosbabys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvz-test.m-catch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qadmfgpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bizbuzzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meals.dawsat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signage.boldlyforge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazsale.martik.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winteriscoming.agnalim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideesys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seniorbankbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ai1.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.bizbuzzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micematters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardiikidz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottoplayhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-motion.bioracermotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterofone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notjson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onnutpethospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborbaked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casino.martik.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-project.hyperfre.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.dmgpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharelinkmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-staff.hyperfre.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dergoegge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karafans.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mizan.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.youkno.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.toeicmentors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pendulumartstudio.db-braun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harshitsharma.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geetaniketanvidyapeeth.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komis.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvlm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.jimtime.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessionspace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndet.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sadokorganic.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swastiknetworks.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southindiataxi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rohitbhute.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.trupedigikendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universe.roboflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopkeeper.tahtaltalab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driver-qa.chowin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'short.sw.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loserthovaobrazy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheredidiputmystuff.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trackr.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcaids.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activethings.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/LjtNmxrQfWE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d6cb6e4450000040300473045022100d69bc0fd4982de6126378436e92e05e1b566458c98397c143f85aec824937dbf02207ae5cee1147390bd53ea74df9541df70257cdcb46fc82f12b79b395ce333941c00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d6cb6e43d00000403004730450220036ee2f65c8e10085851f88dc1895246762b924e97b646ec67453c3a520d7e81022100b4a9c61555130605612d6a4d512e403aaf67ae47a0dfea8b3e504285bc047ada
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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