carefijiportal.digitalfiji.gov.fj

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 09:a5:12:87:da:05:87:a9:09:93:b5:5d:80:0a:59:78 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=carefijiportal.digitalfiji.gov.fj

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:a5:12:87:da:05:87:a9:09:93:b5:5d:80:0a:59:78
Serial Number (int): 12820156790371711978411330183797299576
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 67:65:cd:e4:85:a8:c0:ec:19:6e:35:5d:70:bc:1d:b6:05:55:90:9c
Fingerprint (sha256): d9:66:c9:ab:04:fc:ee:b7:2e:7d:1e:bc:15:ee:4b:fc:a4:53:25:e8:2a:a3:8e:4b:0c:2a:3f:69:6a:f2:b5:8c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/32pS6bK58m0
CRL Distribution Point: http://crls.pki.goog/gts1d4/_8DEAHrvTxE.crl

Check the revocation status for certificate carefijiportal.digitalfiji.gov.fj

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for carefijiportal.digitalfiji.gov.fj

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carefijiportal.digitalfiji.gov.fj
newsite.ladystartup.com
play-xplicit.com
www.tapkit.com
taylorstiki25th.rsvp
playtime-productions.com
ajaxdefense.com
shreyashsomvanshi.me
connect-customer-ng-admin.rxoconnectdemo.rxo.com
auth.eventfour.com
panel.whatsbotsm.com
saturnstudio.xyz
alexwks.online
www.enjoythedesert.com
web-dev.cheaseed.co
www.kqbistro.com
app.musikian.com
rsmceramics.com
app.outsetshop.com
coffee-delivery.guiathayde.dev
auth-staging.gardenr.com
allsaints.bayoulacombemuseum.com
enrollment.artschoolsfbay.com
neetapapad.com
receitasdearrasar.com.br
beardabear.com
bumblebeecontainers.com
pigmentosolar.com
reemspring.com
tucar.co
www.bonkeyfilm.com
app.spotapp.co
customviewsolutions.com
www.sistersmiley.com
lallwholesalers.com
links.attractionpass.com
histovery.com
taxtot.com
5010plus.com
smithgakuya.com
firstvillageva.com
dev-mgx.msg.com
www.neetapapad.com
omarkarame.com
alexandercarpenter.dev
nolanpestano.me
nolan.heesterbeek.nl
authentication.voy.io
www.yelce.biz
digibrass.com
beta.rentmytruck.co
vschemp.com
www.dragons.place
dev-api-spdrums.opalastudios.com
www.robinleber.de
auth.memeteam.co
mboafund.com
jeromemarousez.co.uk
letter-buddy.com
www.codecontrol.io
www.mirabaudaim.co.uk
stottle.uk
www.13ram.dev
afstandzwemmen.devhaan.nl
orah.rs
fantasyfinance.vishvak.com
www.arternative.net
www.tricket.africa
classquest.com.br
yellowvision.net
shurjobanglaradio.org
surcam.oz-tms.com
shahichai.pk
app.zeropos.in
camp.magnumteam.ro
am.printer.progressify.dk
ms.wtf.menu
www.gaetan.zip
referlocal.biz
4bitesdesign.co.uk
biblioteket.libry.dk
www.logistics.ida-org.com
trts.io
testnet.gene.finance
borodino-residences.com
www.flydot.in
surprise2021.thijsgeurts.nl
specialists.selia.co
mitmeo.studio
www.womentechfounders.ca
www.aresabussistem.com
www.michalstrzelecki.com
assistheo.com
www.hollowapps.com
teacher.captaincoder.com
www.epptec.cz
www.txusmslabs.com
turf.rebounce.in
daewoongkim.com
amrgharieb.com

Other certificates including the domain name digitalfiji.gov.fj

(limited to 100 certificates)
www.rothvets.ca
www.rothvets.ca
matchplay.ainsworth-goats.co.uk
www.brontos.shop
billing.italkpttweb.com
demo.tebi.link
www.digitalfiji.gov.fj
www.digitalfiji.gov.fj
showplay.boutique
www.vaughtschocolate.com
*.digitalfiji.gov.fj
*.digitalfiji.gov.fj
gango.app
carefijiportal.digitalfiji.gov.fj
checkin.digitalfiji.gov.fj

Certificate

The complete raw certificate details for carefijiportal.digitalfiji.gov.fj in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12820156790371711978411330183797299576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 01:32:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 02:30:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carefijiportal.digitalfiji.gov.fj'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/32pS6bK58m0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2040 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carefijiportal.digitalfiji.gov.fj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.ladystartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play-xplicit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tapkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylorstiki25th.rsvp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playtime-productions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajaxdefense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shreyashsomvanshi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-customer-ng-admin.rxoconnectdemo.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.eventfour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.whatsbotsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saturnstudio.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexwks.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enjoythedesert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-dev.cheaseed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kqbistro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.musikian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsmceramics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.outsetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffee-delivery.guiathayde.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-staging.gardenr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaints.bayoulacombemuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollment.artschoolsfbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neetapapad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receitasdearrasar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beardabear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumblebeecontainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pigmentosolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reemspring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonkeyfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spotapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customviewsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sistersmiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lallwholesalers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.attractionpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'histovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxtot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5010plus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithgakuya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstvillageva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mgx.msg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neetapapad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omarkarame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandercarpenter.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolanpestano.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolan.heesterbeek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.voy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yelce.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digibrass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.rentmytruck.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vschemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragons.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-api-spdrums.opalastudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robinleber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.memeteam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mboafund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeromemarousez.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letter-buddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codecontrol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mirabaudaim.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stottle.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.13ram.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afstandzwemmen.devhaan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orah.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasyfinance.vishvak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arternative.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tricket.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classquest.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yellowvision.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shurjobanglaradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surcam.oz-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shahichai.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.zeropos.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp.magnumteam.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.printer.progressify.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.wtf.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaetan.zip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referlocal.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4bitesdesign.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblioteket.libry.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logistics.ida-org.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trts.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testnet.gene.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borodino-residences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flydot.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surprise2021.thijsgeurts.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialists.selia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitmeo.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womentechfounders.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aresabussistem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michalstrzelecki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistheo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hollowapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher.captaincoder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epptec.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.txusmslabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turf.rebounce.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daewoongkim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amrgharieb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/_8DEAHrvTxE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b6efa4c5d000004030046304402206be8f865730454608828e20728370abfab5f25086c2b1ac924aca8ed57d16ec1022047fae1126c0bcec9a13e773d16225b257b18ab6de18318ca9854351b5017afea007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b6efa4c9e0000040300473045022100a0af2072f4b72bdd55fba1784a7cfc558322841aaa5e0509ac850b03ecd72ea202207ba1d954ad82f70485b2ee4167cb71aa7c3bb1ac17137517ea9b0ef300245d98
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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