www.crai.no

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 95:62:15:5d:f0:d2:34:c9:10:bf:ad:74:db:cb:60:16 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.crai.no

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 95:62:15:5d:f0:d2:34:c9:10:bf:ad:74:db:cb:60:16
Serial Number (int): 198564249837440194733226970314279968790
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): a6:15:8d:49:93:32:44:9f:b8:41:24:e2:e1:8e:b1:73:13:5f:3b:79
Fingerprint (sha256): d8:d7:09:79:d0:e6:c0:53:53:f9:a6:47:05:2e:d7:c7:3d:02:4f:75:e7:b7:68:00:54:94:8d:de:b0:fc:f7:ea

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/cSdb_B5P-Nk
CRL Distribution Point: http://crls.pki.goog/gts1d4/Rc7g7RF2uGw.crl

Check the revocation status for certificate www.crai.no

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.crai.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.crai.no
lightaccess.lightkey.es
www.hi.fi
lanos.abluemer.de
openmachine.ai
dustin.ooo
kiosk.newtown.clinic1.one
ssa5.eestec.ro
preprod.prepa.io
boztepe2.zeplinx.com
hochzeit.kordondev.de
pildemo.eu
www.ethanshowe.com
datediff.xyz
www.buildingsafetymap.co.uk
www.molekular.mbitgames.cloud
auth.gamepadviewer.com
nmh.ec3.tech
www.quilworks.com
morsenode.com
tsumugi.lilacwells.com
preprod.secretsanta.mattpeskett.com
ontheoriginofcircles.com
www.havensofhope.com
teuto.abluemer.de
app.chartpro.net
rocknsur.com
app.vacation-requests.g-workplace.com
stylerpcweb.com
www.imma-france.com
www.vanitygroup.com
me-dating.com
spacexnoticias.com
www.uzmez.co
www.hivefab.com
thomas-lloyd.com
www.lch-mfi.com
www.lykiq.com
connect.canuapp.com
naveensd.com
meraki-apps.com
5thwrcsymposium.liveevent.co.za
neelwires.com
2020.devfestindia.com
www.ideas.sparks.dating
tidyfork.com
admin.festivaldocafe.com
my.batimetre.fr
chat.karimz.com
blind-law.org
fotos.portaria.condlink.com.br
fpos.karimz.com
business.buyu.it
rao-employmentexchange.com
www.myquantumwater.com
app.lodienabled.com
webgumsolutions.com
fortum.lv
staging-admin.lovejunk.com
www.thinkinsure.com
www.sommpad.com
www.funkypeachlife.com
www.choir.cards
www.produvar.be
www.sieuthihangcongnghe.com
www.ladycontreras.com
customizer.melzo.com
marshallmutualinsurance.com
masat.dev
www.koruq.com
clima-hotfix.farmacare.dev
maharshpatel.dev
yordanov-art.com
liquidminers.com
lotteryslickpick.com
www.learnalgorithm.com
woodpeckersindia.com
lokot2fa.com
mathaminfotech.com
loveladida.com
org.oct.im
signup.loveyourstride.com
adtvnetwork.ae
www.jesses.cloud
alloutinteractive.com
links.manybuild.app
www.doctorbythebay.com
www.anarijo.com.br
demo-app.fix4.com
www.frisq.co
novaxon.com
prototype-plant-master.n-haruka.dev
sua.glambox.com.br
inscrivere.com
nextdev.vn
beyondmarketing.co.kr
app.ioniaregistry.com
www.kamalfarms.com
regulus.jp
www.lidoriviera.it

Other certificates including the domain name crai.no

(limited to 100 certificates)
microsystems.group
veteranosbgp.com.br
www.hi.fi
www.buyu.it
testapp1.viralfission.com
abrir.bondit.app
www.gmergeplus.com
www.bluestackav.com
vue-firebase.scaramuccio.dev
techcentrix.com
spencerhalsey.com
edicioneseuterpe.mx
simulador.pitmoney.com.br
client.welcomehomehc.com
www.dashboard.unrealcloud.io
www.crai.no
www.jonas-jensen.com
au.foresight.adgile.media
www.marinyman.se
translator.metalearnapps.com

Certificate

The complete raw certificate details for www.crai.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 198564249837440194733226970314279968790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 01:05:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 02:02:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crai.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/cSdb_B5P-Nk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2010 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crai.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightaccess.lightkey.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanos.abluemer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openmachine.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dustin.ooo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.newtown.clinic1.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssa5.eestec.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.prepa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boztepe2.zeplinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hochzeit.kordondev.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pildemo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethanshowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datediff.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildingsafetymap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molekular.mbitgames.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.gamepadviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmh.ec3.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quilworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morsenode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsumugi.lilacwells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.secretsanta.mattpeskett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontheoriginofcircles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havensofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teuto.abluemer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.chartpro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocknsur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vacation-requests.g-workplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylerpcweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imma-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanitygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me-dating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacexnoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzmez.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hivefab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomas-lloyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lch-mfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lykiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.canuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naveensd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meraki-apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5thwrcsymposium.liveevent.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neelwires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020.devfestindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideas.sparks.dating'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tidyfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.festivaldocafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.batimetre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.karimz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blind-law.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotos.portaria.condlink.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpos.karimz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.buyu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rao-employmentexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myquantumwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lodienabled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webgumsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortum.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-admin.lovejunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkinsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sommpad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funkypeachlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choir.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.produvar.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sieuthihangcongnghe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladycontreras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customizer.melzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshallmutualinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masat.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koruq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clima-hotfix.farmacare.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maharshpatel.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yordanov-art.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidminers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotteryslickpick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnalgorithm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodpeckersindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lokot2fa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathaminfotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveladida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org.oct.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.loveyourstride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtvnetwork.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesses.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alloutinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.manybuild.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doctorbythebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anarijo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-app.fix4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frisq.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novaxon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototype-plant-master.n-haruka.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sua.glambox.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscrivere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextdev.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondmarketing.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ioniaregistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamalfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regulus.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lidoriviera.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Rc7g7RF2uGw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d6cb6ef800000040300483046022100be3a73d593f7eada7f0fc32e1defeb4514a3e4c500666c0f68ddbaa7f747e8fa022100a8496bc9e8d97beca6b784c54c2aef93a5e0ae1f78177f2563d16564672d9f5300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d6cb6ef760000040300473045022015372d58eb0b8db3af9b45d08f6eff6f282e3b7b47255b4f9d6b754bd79616fa022100e26ff152d616468886d4e412ca40e4f715e5cb831b5b3487782ef3e743d8b943
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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