www.santoespiritu.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 71:e8:78:bb:81:c8:97:58:0a:17:05:e4:80:43:51:e3 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.santoespiritu.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:e8:78:bb:81:c8:97:58:0a:17:05:e4:80:43:51:e3
Serial Number (int): 151409825139860468148087164470043038179
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 1b:e3:d3:c6:25:77:49:71:32:3e:71:65:19:ec:64:21:40:14:0e:54
Fingerprint (sha256): d8:d3:fb:b8:c4:67:88:ef:04:8a:e1:00:a6:c0:4e:92:66:77:e3:9d:b5:10:28:8e:d2:32:5a:8d:26:99:98:be

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/sxyVHM5-TFY
CRL Distribution Point: http://crls.pki.goog/gts1d4/KS3or9pF2-o.crl

Check the revocation status for certificate www.santoespiritu.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.santoespiritu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.santoespiritu.com
perrylogan.ca
jgovh-menu-admin.kards.fr
www.eurldavidlouis.fr
link.tahado.app
admin.piti.app
www.solnotes.app
catzboatclub.co.uk
sander-jederzeit.com
www.latd.ai
daviddalbusco.ch
thehappytherapist.com.au
fr.artboxy.com
www.thestartupreneur.co
photio.cl
staging.brizzly.com
arrentalcar.com
calisthenics-counter.com
appointmentsone.com
www.androidflavors.com
bobsizoo.com
www.alexeystashin.com
kismet-app.com
bitchbarometer.com
quarantinepuritytest.com
events.agrar-landtechnik.ch
myfavoriteprithvi.com
videoconsulta.sofiasalud.com
www.turnsheet.com
rebar.binni.co
admin.sweetupsell.com
demos.webspellchecker.com
www.tanukitech.dev
coordinator.zichron.org
mistro.io
www.krtechs.dev
sistema.mmantovaniconstrutora.com.br
lawcoin.prachakij.com
www.vaibhavwaterworld.com
uberlog.idoroseman.com
www.crbempreendimentosimobiliarios.com
www.woodyforcouncil.com
www.softtouchpainting.com
webd1xv23.perf2.betcloud.io
checkin.dev.your.vet
www.bitesilove.co.uk
amandineetanthosemarient.fr
minedrop.io
www.se-calculator.com
www.vendue.com.au
www.homebrewfactory.ca
krypton.life
www.profiakvaria.cz
www.notarug.xyz
www.springphysics.org
panoskin.powerproleasing.com
www.maadeals.com
team-test2.goodhuman.me
www.magoleen.com.br
harvest.a-vision.software
culturaecor.com.br
bezpecnykod.cz
selent.me
gocovid.issara.in.th
sylvari.it
lifescience.stockholm.studentnode.com
www.tmcup.live
www.mongodb.gq
my.vsolpacs.com
magusa.uat.go-donate.uk
revisited.fr
inksoft-tools.ltcloud.io
andersensoftware.no
award.shiftlab.tech
ggarden.game.rifzki.my.id
www.nibblerguru.com
sle.siapco.com.mx
www.impact500.nl
auth.paranormal.place
sougoleiro.com.br
lp.mon-art.art
app.napak.fi
lawfirmshub.com
www.makershive.io
tanari.jedlik.hu
www.casaarriazu.com
drikk.majatestad.no
short.solutions.beclm.com
n12kidnappedembed.rabbicdn.com
www.slapdefi.io
auth.kozlekedotomeg.hu
cervantestrescruces.uy
nwzer.com
dev.lineofsight.28east.co.za
open.mypersonaltutor.app
www.jpmusic.com.br
link.be-cube.jp
admin.joaidee.co.th
www.system.ukmee.com
www.orgnr.io

Other certificates including the domain name santoespiritu.com

(limited to 100 certificates)
link.vpngate-connector.com
ghaines.net
www.betatrifecta.com
link.tokoin.co
seario.org
www.accessiblesurveys.com
www.accessiblesurveys.com
www.wewod.app
academy.gohacking.com.br
developers.kinetik.care
www.bootstraptechnology.com
clearaccess.28east.co.za
simpleclothdiaper.com
www.santoespiritu.com
friedenson.portal.bringo.me
app.artorgtool.com
dailycoding.de
sasitest.vetagenix.com

Certificate

The complete raw certificate details for www.santoespiritu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINsDCCDJigAwIBAgIQceh4u4HIl1gKFwXkgENR4zANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzEyMjkxMjE3MjFaFw0yNDAzMjgx
MzE2MDRaMCAxHjAcBgNVBAMTFXd3dy5zYW50b2VzcGlyaXR1LmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKrbNMni4A1i6VxvLEQdokPCI988xC3Z
+g+hMQkCJFBxgr+h7sJfUPDyCF7ImcmrfokkL0IQWfcEh2GLmBVr1w7dSsY9QDTi
hVg5Flr4gvc1nYXWij3ZWM7QiXnDfpwK6xj5+iR6KYzxq6aAsjauTh1zcpxRgbX7
9Gh3z5t+9WP3lK2lDnRAQzJV97aDnMoSC5WZ40IehpXRFfTbBnc+QD0Pxc8J8I76
beGjyR1T2ghfQBpANJeGDvqqu+yfLb6vnfw1y7HQ87v8x4cmaxciA2vAucfnMIfD
9qIbQ3OWLy4OCYZxsqSI2P78TOOmTpYatQXRCJBePS0GyVlg+V5VVFUCAwEAAaOC
Cr4wggq6MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBQhRcI7rEws62tPtefJ4sNq0b2zwjAfBgNVHSME
GDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYB
BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L3N4eVZITTUtVEZZ
MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQu
ZGVyMIIIYgYDVR0RBIIIWTCCCFWCFXd3dy5zYW50b2VzcGlyaXR1LmNvbYINcGVy
cnlsb2dhbi5jYYIZamdvdmgtbWVudS1hZG1pbi5rYXJkcy5mcoIVd3d3LmV1cmxk
YXZpZGxvdWlzLmZygg9saW5rLnRhaGFkby5hcHCCDmFkbWluLnBpdGkuYXBwghB3
d3cuc29sbm90ZXMuYXBwghJjYXR6Ym9hdGNsdWIuY28udWuCFHNhbmRlci1qZWRl
cnplaXQuY29tggt3d3cubGF0ZC5haYIQZGF2aWRkYWxidXNjby5jaIIYdGhlaGFw
cHl0aGVyYXBpc3QuY29tLmF1gg5mci5hcnRib3h5LmNvbYIXd3d3LnRoZXN0YXJ0
dXByZW5ldXIuY2+CCXBob3Rpby5jbIITc3RhZ2luZy5icml6emx5LmNvbYIPYXJy
ZW50YWxjYXIuY29tghhjYWxpc3RoZW5pY3MtY291bnRlci5jb22CE2FwcG9pbnRt
ZW50c29uZS5jb22CFnd3dy5hbmRyb2lkZmxhdm9ycy5jb22CDGJvYnNpem9vLmNv
bYIVd3d3LmFsZXhleXN0YXNoaW4uY29tgg5raXNtZXQtYXBwLmNvbYISYml0Y2hi
YXJvbWV0ZXIuY29tghhxdWFyYW50aW5lcHVyaXR5dGVzdC5jb22CG2V2ZW50cy5h
Z3Jhci1sYW5kdGVjaG5pay5jaIIVbXlmYXZvcml0ZXByaXRodmkuY29tghx2aWRl
b2NvbnN1bHRhLnNvZmlhc2FsdWQuY29tghF3d3cudHVybnNoZWV0LmNvbYIOcmVi
YXIuYmlubmkuY2+CFWFkbWluLnN3ZWV0dXBzZWxsLmNvbYIZZGVtb3Mud2Vic3Bl
bGxjaGVja2VyLmNvbYISd3d3LnRhbnVraXRlY2guZGV2ghdjb29yZGluYXRvci56
aWNocm9uLm9yZ4IJbWlzdHJvLmlvgg93d3cua3J0ZWNocy5kZXaCJHNpc3RlbWEu
bW1hbnRvdmFuaWNvbnN0cnV0b3JhLmNvbS5icoIVbGF3Y29pbi5wcmFjaGFraWou
Y29tghl3d3cudmFpYmhhdndhdGVyd29ybGQuY29tghZ1YmVybG9nLmlkb3Jvc2Vt
YW4uY29tgiZ3d3cuY3JiZW1wcmVlbmRpbWVudG9zaW1vYmlsaWFyaW9zLmNvbYIX
d3d3Lndvb2R5Zm9yY291bmNpbC5jb22CGXd3dy5zb2Z0dG91Y2hwYWludGluZy5j
b22CG3dlYmQxeHYyMy5wZXJmMi5iZXRjbG91ZC5pb4IUY2hlY2tpbi5kZXYueW91
ci52ZXSCFHd3dy5iaXRlc2lsb3ZlLmNvLnVrghthbWFuZGluZWV0YW50aG9zZW1h
cmllbnQuZnKCC21pbmVkcm9wLmlvghV3d3cuc2UtY2FsY3VsYXRvci5jb22CEXd3
dy52ZW5kdWUuY29tLmF1ghZ3d3cuaG9tZWJyZXdmYWN0b3J5LmNhggxrcnlwdG9u
LmxpZmWCE3d3dy5wcm9maWFrdmFyaWEuY3qCD3d3dy5ub3RhcnVnLnh5eoIVd3d3
LnNwcmluZ3BoeXNpY3Mub3JnghxwYW5vc2tpbi5wb3dlcnByb2xlYXNpbmcuY29t
ghB3d3cubWFhZGVhbHMuY29tghd0ZWFtLXRlc3QyLmdvb2RodW1hbi5tZYITd3d3
Lm1hZ29sZWVuLmNvbS5icoIZaGFydmVzdC5hLXZpc2lvbi5zb2Z0d2FyZYISY3Vs
dHVyYWVjb3IuY29tLmJygg5iZXpwZWNueWtvZC5jeoIJc2VsZW50Lm1lghRnb2Nv
dmlkLmlzc2FyYS5pbi50aIIKc3lsdmFyaS5pdIIlbGlmZXNjaWVuY2Uuc3RvY2to
b2xtLnN0dWRlbnRub2RlLmNvbYIOd3d3LnRtY3VwLmxpdmWCDnd3dy5tb25nb2Ri
Lmdxgg9teS52c29scGFjcy5jb22CF21hZ3VzYS51YXQuZ28tZG9uYXRlLnVrggxy
ZXZpc2l0ZWQuZnKCGGlua3NvZnQtdG9vbHMubHRjbG91ZC5pb4ITYW5kZXJzZW5z
b2Z0d2FyZS5ub4ITYXdhcmQuc2hpZnRsYWIudGVjaIIZZ2dhcmRlbi5nYW1lLnJp
ZnpraS5teS5pZIITd3d3Lm5pYmJsZXJndXJ1LmNvbYIRc2xlLnNpYXBjby5jb20u
bXiCEHd3dy5pbXBhY3Q1MDAubmyCFWF1dGgucGFyYW5vcm1hbC5wbGFjZYIRc291
Z29sZWlyby5jb20uYnKCDmxwLm1vbi1hcnQuYXJ0ggxhcHAubmFwYWsuZmmCD2xh
d2Zpcm1zaHViLmNvbYIRd3d3Lm1ha2Vyc2hpdmUuaW+CEHRhbmFyaS5qZWRsaWsu
aHWCE3d3dy5jYXNhYXJyaWF6dS5jb22CE2RyaWtrLm1hamF0ZXN0YWQubm+CGXNo
b3J0LnNvbHV0aW9ucy5iZWNsbS5jb22CHm4xMmtpZG5hcHBlZGVtYmVkLnJhYmJp
Y2RuLmNvbYIPd3d3LnNsYXBkZWZpLmlvghZhdXRoLmtvemxla2Vkb3RvbWVnLmh1
ghZjZXJ2YW50ZXN0cmVzY3J1Y2VzLnV5gglud3plci5jb22CHGRldi5saW5lb2Zz
aWdodC4yOGVhc3QuY28uemGCGG9wZW4ubXlwZXJzb25hbHR1dG9yLmFwcIISd3d3
LmpwbXVzaWMuY29tLmJygg9saW5rLmJlLWN1YmUuanCCE2FkbWluLmpvYWlkZWUu
Y28udGiCFHd3dy5zeXN0ZW0udWttZWUuY29tggx3d3cub3JnbnIuaW8wIQYDVR0g
BBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6Athito
dHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxZDQvS1Mzb3I5cEYyLW8uY3JsMIIBAgYK
KwYBBAHWeQIEAgSB8wSB8ADuAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/m
Z0xaOnQAAAGMtbjk7AAABAMARjBEAiB1uWoivYTEcz35prDSUczBp7gXwGescU0P
uF/02JqDUQIgWh4hJ76I9rd2GFAU+y/W9IEqw8e/ogWJgggqGHodHRgAdQBIsONr
2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYy1uOTgAAAEAwBGMEQCIErj
lXWeO7ikUW+w65h9QEdr75OgLPdDhdINhjLg/wGnAiBvN9NK1IwLc2V1eBnmlFXz
l/ybk6jJ5flUwa9jHMZvTjANBgkqhkiG9w0BAQsFAAOCAQEALVocnYKr5bZ0pMGq
vCwvSh7eATno87W5kFhYdfIdaqaqbchomIKCav05vzORd0844sX0JCJwYWT5nn7T
7KCNSOMrp2IcNHSLrkCNuZVa30kGQw1nBh2cfXm/XAoHu+FjUO5Yvs6OSslflTpP
BWknwjhNv3S5j5zVAwQmzCIxSg5AidolPGVaWXINce2NeqGbvhK7kQ1+1RSaD/bd
ff+z3zf5phRI/7ooqBDhPvTdgOb01gZ3uyHuKuFESXJvHRjqQq6HfJjuolyZabD1
8KJ0vnDI+8DB4Yg4VFuJnw+ZdyLNtWM+7aYQeX/IacXBcZzk0nSjcUnMlgGtc6k+
9FyAdg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151409825139860468148087164470043038179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 12:17:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 13:16:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.santoespiritu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/sxyVHM5-TFY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santoespiritu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrylogan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jgovh-menu-admin.kards.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eurldavidlouis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.tahado.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.piti.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solnotes.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catzboatclub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sander-jederzeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latd.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daviddalbusco.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehappytherapist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.artboxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestartupreneur.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photio.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.brizzly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrentalcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calisthenics-counter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appointmentsone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.androidflavors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobsizoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexeystashin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kismet-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitchbarometer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quarantinepuritytest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.agrar-landtechnik.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfavoriteprithvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoconsulta.sofiasalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turnsheet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebar.binni.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sweetupsell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demos.webspellchecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tanukitech.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coordinator.zichron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krtechs.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistema.mmantovaniconstrutora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawcoin.prachakij.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaibhavwaterworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberlog.idoroseman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crbempreendimentosimobiliarios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodyforcouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softtouchpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webd1xv23.perf2.betcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin.dev.your.vet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitesilove.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amandineetanthosemarient.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minedrop.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.se-calculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vendue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homebrewfactory.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krypton.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.profiakvaria.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notarug.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springphysics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panoskin.powerproleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maadeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-test2.goodhuman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magoleen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvest.a-vision.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturaecor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bezpecnykod.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selent.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gocovid.issara.in.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvari.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifescience.stockholm.studentnode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmcup.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mongodb.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.vsolpacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magusa.uat.go-donate.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revisited.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inksoft-tools.ltcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersensoftware.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'award.shiftlab.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggarden.game.rifzki.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nibblerguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sle.siapco.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impact500.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.paranormal.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sougoleiro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.mon-art.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.napak.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawfirmshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makershive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanari.jedlik.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casaarriazu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drikk.majatestad.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'short.solutions.beclm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n12kidnappedembed.rabbicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slapdefi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.kozlekedotomeg.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cervantestrescruces.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.lineofsight.28east.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.mypersonaltutor.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpmusic.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.be-cube.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.joaidee.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.system.ukmee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgnr.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/KS3or9pF2-o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cb5b8e4ec0000040300463044022075b96a22bd84c4733df9a6b0d251ccc1a7b817c067ac714d0fb85ff4d89a835102205a1e2127be88f6b776185014fb2fd6f4812ac3c7bfa2058982082a187a1d1d1800750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb5b8e4e0000004030046304402204ae395759e3bb8a4516fb0eb987d40476bef93a02cf74385d20d8632e0ff01a702206f37d34ad48c0b7365757819e69455f397fc9b93a8c9e5f954c1af631cc66f4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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