www.salus-medical.cz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a6:68:9f:9d:24:d4:1b:11:12:94:1b:7e:91:22:dc:90 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.salus-medical.cz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a6:68:9f:9d:24:d4:1b:11:12:94:1b:7e:91:22:dc:90
Serial Number (int): 221195083526930032776652689236394433680
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): f6:1f:84:e1:4d:4b:9b:62:ec:1c:5f:30:c4:8e:79:3e:23:fe:41:9a
Fingerprint (sha256): dc:b6:9d:42:00:e4:5c:e8:84:b5:76:f9:37:09:cd:88:c1:1c:2e:19:26:78:3a:21:f0:74:66:13:ce:0f:84:3c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/j8BQ4I6l8vY
CRL Distribution Point: http://crls.pki.goog/gts1d4/Ljiga1eCboE.crl

Check the revocation status for certificate www.salus-medical.cz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.salus-medical.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.salus-medical.cz
mypari.sh
www.adcompany.com.br
testing.fractory.com
gdgcraiova.com
support.nakedcoffee-admin.co
finance.hollowapps.com
floof-test.funabia.com
unbosque-predev.klarway.com
www.juantonmusic.com
devport.ru
admin.mergefly.com
a087.foodle.su
www.brp-solutions.com
console.bringsally.app
admin.haiminhgas.com
dpcconstructivos.com
mpreis.backoffice.emporix.com
www.covid19-line.com
www.mercedsmogcenter.com
dealmirror.mobappcreator.com
rocketfulfillment.com
playreddog-online.com
www.menofcourageinternational.org
polarsleepify.com
www.adiratechnology.com
demo-login.mosaicapp.com
inwine.com
www.manchesterleathermen.com
kainwalker.com
app.smartnet.partners
doctors.psquare-ltd.com
m.client.jamku.africa
church.peienwang.com
link.perpay.com
thesundayroundup.com
slatemark.com
meltec1on1.app2.1on1navi.com
www.smartervirtualagents.com
www.lalapak.com
pickgle.com
www.outboundgenie.com
www.petvays.com
jimpeart.dev
link.zafiroestetica.com
psyred.com
telemed.sevaro.com
web.mydomus.co
tunnelmountainrecreation.com
unzip.events
www.muninn.pl
wallet.zksync.io
nocturnal.games
safi.page
www.tottak.com
olivier.michalon.dev
www.footballbastards.com
www.xrence.com
policies.tottak.com
onlinecrackerspurchase.com
konrad-dinges.de
anne-vidal-avocat.fr
www.highlighter.one
www.theonlinehealingcenter.com
www.okclients.com
fuboscratch.sqwadhq.com
visualiser.app
admin.fatackhomecare.in
analyticindia.in
cloudadmin.app
www.boginni.net
premclinicallab.in
www.dharshinisricrackers.com
gwatool.veekel.one
mooniostaging.app
rupaype.co.in
www.jamrozy-palety.pl
admin1146.estore.business
nnegrace.org
community.pollyn.app
get4me.in
yash.redsols.us
admin1144.estore.business
www.centroeducativocid.edu.mx
wc2023volunteers.nl
lauraheino.net
s-now.me
admin.baactheadventure.com
alo-global.com
www.nhomducmanhloi.vn
www.nocturnal.games
learn.telecoms-academy.co.za
www.codrid.com
drycleanerlocator.com
app.toymint.co
zorgfamilie.trevvelroute.nl
bestchoiceamz.site
doccentre.info
www.lauraheino.net
www.chiannerose.com

Other certificates including the domain name salus-medical.cz

(limited to 100 certificates)
www-nutrigenomix-dev.mixxmac.com
pavelbinar.cz
nl-vlam.takethelead.be
www.minetworking.com
qualitech.codefar.com.br
saarthieducation.trustin.app
www.nextstay.in
www.lamyanfoon.com
carloschegado.com
www.mypoplist.com
www.macroshop.in
beta.4tuna.io
ekimelo.com
www.bitalium.com
www.filipmarko.se
www.blabbasingo.com
business.etable.app
www.nextstay.in
www.kunalbattery.com
www.tomaszferens.pl
www.clubignitor.com
dispatch.campuswatch.com
nitipan.com
link.mixonset.com
yoreach.com
caleidoscode.com
cocobuk.com
www.clubignitor.com
beta.4tuna.io
richmonkeys.com
link.mixonset.com
admin.servicrypto.com
blog.codeandgo.no
app2.matisis.com.br
curifylabs.com
www.poppeg.com
business.etable.app
nl-vlam.takethelead.be
business.etable.app
www.marcelcominotto.be
aronsengelauff.nl
bryceboesen.com
devsecops.show
shradhhawelfare.com
saarthieducation.trustin.app
auth.google.summitleadership.com.br
salus-medical.cz
www-nutrigenomix-dev.mixxmac.com
auth.cleangoods.com
www.sdwisetechs.co.uk
cuandoycuanto.com
www.filipmarko.se
admin.servicrypto.com
prykhystok.in.ua
www.wyopruittwriting.com
wafer.studio
business.etable.app
laddercommerce.com
ihg.visitingmedia.com
www.lamyanfoon.com
admin.paysenger.co
www.salus-medical.cz
www.gegenrichtung.org
www.salus-medical.cz
davidelmalih.com
aavpl.com
dev.developer.viviware.com
jlink.it
dao.palmtreeclub.finance
d3riva.com

Certificate

The complete raw certificate details for www.salus-medical.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINmTCCDIGgAwIBAgIRAKZon50k1BsREpQbfpEi3JAwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMxMjE5MDQxMzEwWhcNMjQwMzE4
MDUxMDU5WjAfMR0wGwYDVQQDExR3d3cuc2FsdXMtbWVkaWNhbC5jejCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBANIgOPnVCloDLHIwsHorMHoOPwNPLsa3
xyjcBpwOv8/jje2crVmgIL8fqvhEqoIH1TmOvGILBIk5x6A4aYIK1q2+tgn/xwXo
usw+MLiQAhUTOCrUilhyBbI/Yy2GqmloiJvws+KH7OdcEgIsSPPZZYTAPafv1Imr
e192N52Ia38XwUOCUU+o5+TvfHPKr9jLAlt2TU6G+VkelicQUtkFpP/7VTDIzk4Y
uvcGodd2yBXIJd6QZQ/8rkQtCffdU6llfQmIFdclNbbIePQhF2Q/No16rROFAlCd
lUeBsK0YXKaGsc3Dq4U8hD52JRy9i5xG0NiSSkXRjDnoDrFXZXN3voECAwEAAaOC
CqcwggqjMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBQGqdzZFD1Q9RuY7bbdEee9FrcM/DAfBgNVHSME
GDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYB
BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L2o4QlE0STZsOHZZ
MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQu
ZGVyMIIISQYDVR0RBIIIQDCCCDyCFHd3dy5zYWx1cy1tZWRpY2FsLmN6gglteXBh
cmkuc2iCFHd3dy5hZGNvbXBhbnkuY29tLmJyghR0ZXN0aW5nLmZyYWN0b3J5LmNv
bYIOZ2RnY3JhaW92YS5jb22CHHN1cHBvcnQubmFrZWRjb2ZmZWUtYWRtaW4uY2+C
FmZpbmFuY2UuaG9sbG93YXBwcy5jb22CFmZsb29mLXRlc3QuZnVuYWJpYS5jb22C
G3VuYm9zcXVlLXByZWRldi5rbGFyd2F5LmNvbYIUd3d3Lmp1YW50b25tdXNpYy5j
b22CCmRldnBvcnQucnWCEmFkbWluLm1lcmdlZmx5LmNvbYIOYTA4Ny5mb29kbGUu
c3WCFXd3dy5icnAtc29sdXRpb25zLmNvbYIWY29uc29sZS5icmluZ3NhbGx5LmFw
cIIUYWRtaW4uaGFpbWluaGdhcy5jb22CFGRwY2NvbnN0cnVjdGl2b3MuY29tgh1t
cHJlaXMuYmFja29mZmljZS5lbXBvcml4LmNvbYIUd3d3LmNvdmlkMTktbGluZS5j
b22CGHd3dy5tZXJjZWRzbW9nY2VudGVyLmNvbYIcZGVhbG1pcnJvci5tb2JhcHBj
cmVhdG9yLmNvbYIVcm9ja2V0ZnVsZmlsbG1lbnQuY29tghVwbGF5cmVkZG9nLW9u
bGluZS5jb22CIXd3dy5tZW5vZmNvdXJhZ2VpbnRlcm5hdGlvbmFsLm9yZ4IRcG9s
YXJzbGVlcGlmeS5jb22CF3d3dy5hZGlyYXRlY2hub2xvZ3kuY29tghhkZW1vLWxv
Z2luLm1vc2FpY2FwcC5jb22CCmlud2luZS5jb22CHHd3dy5tYW5jaGVzdGVybGVh
dGhlcm1lbi5jb22CDmthaW53YWxrZXIuY29tghVhcHAuc21hcnRuZXQucGFydG5l
cnOCF2RvY3RvcnMucHNxdWFyZS1sdGQuY29tghVtLmNsaWVudC5qYW1rdS5hZnJp
Y2GCFGNodXJjaC5wZWllbndhbmcuY29tgg9saW5rLnBlcnBheS5jb22CFHRoZXN1
bmRheXJvdW5kdXAuY29tgg1zbGF0ZW1hcmsuY29tghxtZWx0ZWMxb24xLmFwcDIu
MW9uMW5hdmkuY29tghx3d3cuc21hcnRlcnZpcnR1YWxhZ2VudHMuY29tgg93d3cu
bGFsYXBhay5jb22CC3BpY2tnbGUuY29tghV3d3cub3V0Ym91bmRnZW5pZS5jb22C
D3d3dy5wZXR2YXlzLmNvbYIMamltcGVhcnQuZGV2ghdsaW5rLnphZmlyb2VzdGV0
aWNhLmNvbYIKcHN5cmVkLmNvbYISdGVsZW1lZC5zZXZhcm8uY29tgg53ZWIubXlk
b211cy5jb4IcdHVubmVsbW91bnRhaW5yZWNyZWF0aW9uLmNvbYIMdW56aXAuZXZl
bnRzgg13d3cubXVuaW5uLnBsghB3YWxsZXQuemtzeW5jLmlvgg9ub2N0dXJuYWwu
Z2FtZXOCCXNhZmkucGFnZYIOd3d3LnRvdHRhay5jb22CFG9saXZpZXIubWljaGFs
b24uZGV2ghh3d3cuZm9vdGJhbGxiYXN0YXJkcy5jb22CDnd3dy54cmVuY2UuY29t
ghNwb2xpY2llcy50b3R0YWsuY29tghpvbmxpbmVjcmFja2Vyc3B1cmNoYXNlLmNv
bYIQa29ucmFkLWRpbmdlcy5kZYIUYW5uZS12aWRhbC1hdm9jYXQuZnKCE3d3dy5o
aWdobGlnaHRlci5vbmWCHnd3dy50aGVvbmxpbmVoZWFsaW5nY2VudGVyLmNvbYIR
d3d3Lm9rY2xpZW50cy5jb22CF2Z1Ym9zY3JhdGNoLnNxd2FkaHEuY29tgg52aXN1
YWxpc2VyLmFwcIIXYWRtaW4uZmF0YWNraG9tZWNhcmUuaW6CEGFuYWx5dGljaW5k
aWEuaW6CDmNsb3VkYWRtaW4uYXBwgg93d3cuYm9naW5uaS5uZXSCEnByZW1jbGlu
aWNhbGxhYi5pboIcd3d3LmRoYXJzaGluaXNyaWNyYWNrZXJzLmNvbYISZ3dhdG9v
bC52ZWVrZWwub25lghFtb29uaW9zdGFnaW5nLmFwcIINcnVwYXlwZS5jby5pboIV
d3d3LmphbXJvenktcGFsZXR5LnBsghlhZG1pbjExNDYuZXN0b3JlLmJ1c2luZXNz
ggxubmVncmFjZS5vcmeCFGNvbW11bml0eS5wb2xseW4uYXBwgglnZXQ0bWUuaW6C
D3lhc2gucmVkc29scy51c4IZYWRtaW4xMTQ0LmVzdG9yZS5idXNpbmVzc4Idd3d3
LmNlbnRyb2VkdWNhdGl2b2NpZC5lZHUubXiCE3djMjAyM3ZvbHVudGVlcnMubmyC
DmxhdXJhaGVpbm8ubmV0gghzLW5vdy5tZYIaYWRtaW4uYmFhY3RoZWFkdmVudHVy
ZS5jb22CDmFsby1nbG9iYWwuY29tghV3d3cubmhvbWR1Y21hbmhsb2kudm6CE3d3
dy5ub2N0dXJuYWwuZ2FtZXOCHGxlYXJuLnRlbGVjb21zLWFjYWRlbXkuY28uemGC
Dnd3dy5jb2RyaWQuY29tghVkcnljbGVhbmVybG9jYXRvci5jb22CDmFwcC50b3lt
aW50LmNvght6b3JnZmFtaWxpZS50cmV2dmVscm91dGUubmyCEmJlc3RjaG9pY2Vh
bXouc2l0ZYIOZG9jY2VudHJlLmluZm+CEnd3dy5sYXVyYWhlaW5vLm5ldIITd3d3
LmNoaWFubmVyb3NlLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5
AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFk
NC9MamlnYTFlQ2JvRS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDuzdBk
1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYyAfgWOAAAEAwBHMEUCIQDb
LuYvORyW2nHa7+R6dQ5rFjNeKtdr1TRvU8HP0cLElAIgbrPv7MnfyEkmagHBif0z
zT9lNjfcy5vkQZwkDT/RTiUAdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3ivia
bfUX2AAAAYyAfgWqAAAEAwBHMEUCIDzCtCNiMHWM2+n7JjQPjntWqB5fSZRHCIN3
Ij+JPxrhAiEAv8YCByB5/kclZKJ4DhuJfHM0S5VFccGWPubdORmv9dowDQYJKoZI
hvcNAQELBQADggEBAKXb0NHXXHu12VPsWpV/AHCvU+iiftCZUd5B94xB6kqt2GjX
lGVyFXck7YkKTBqYSei4vzgofgwsqun3UCvizmi1dg797Rq3MaPJxRg3r0iLn9ir
w+uLVCBNQhEr5JI7wW4HRYVU54lbVvOVHuO3pkzdwA/Ir8b0OEZuEFqI4bzHc5Op
aEtFWH5tzAmiGLaEAukoz9HDysmG0rDs+ESwfgohfXDAux09HbXhY/5COKOzneaS
bKfzdHI3hD3yTLRxBE5LSazPEOu0WSYP6jRXBKmeuXu0F3ieJgQOS6k4JY8KSqUr
BsHA5Ffq8lpEFB+rjg+/XbnKuZRjLIn4yuNeysI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 221195083526930032776652689236394433680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 04:13:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 05:10:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.salus-medical.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/j8BQ4I6l8vY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salus-medical.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypari.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adcompany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.fractory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdgcraiova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nakedcoffee-admin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.hollowapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floof-test.funabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unbosque-predev.klarway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juantonmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devport.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mergefly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a087.foodle.su'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brp-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.bringsally.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.haiminhgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpcconstructivos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpreis.backoffice.emporix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covid19-line.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercedsmogcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealmirror.mobappcreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketfulfillment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playreddog-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.menofcourageinternational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polarsleepify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adiratechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-login.mosaicapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manchesterleathermen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kainwalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.smartnet.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.psquare-ltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.client.jamku.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.peienwang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.perpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesundayroundup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slatemark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meltec1on1.app2.1on1navi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartervirtualagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lalapak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickgle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outboundgenie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petvays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimpeart.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.zafiroestetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemed.sevaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.mydomus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunnelmountainrecreation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unzip.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muninn.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallet.zksync.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nocturnal.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safi.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tottak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivier.michalon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballbastards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xrence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policies.tottak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecrackerspurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konrad-dinges.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anne-vidal-avocat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlighter.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theonlinehealingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okclients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuboscratch.sqwadhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualiser.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fatackhomecare.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analyticindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudadmin.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boginni.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premclinicallab.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dharshinisricrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwatool.veekel.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooniostaging.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rupaype.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamrozy-palety.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin1146.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnegrace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.pollyn.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get4me.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yash.redsols.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin1144.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centroeducativocid.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc2023volunteers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauraheino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-now.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.baactheadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alo-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhomducmanhloi.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nocturnal.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.telecoms-academy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drycleanerlocator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.toymint.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zorgfamilie.trevvelroute.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestchoiceamz.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doccentre.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauraheino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiannerose.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Ljiga1eCboE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c807e058e0000040300473045022100db2ee62f391c96da71daefe47a750e6b16335e2ad76bd5346f53c1cfd1c2c49402206eb3efecc9dfc849266a01c189fd33cd3f653637dccb9be4419c240d3fd14e25007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c807e05aa000004030047304502203cc2b4236230758cdbe9fb26340f8e7b56a81e5f499447088377223f893f1ae1022100bfc602072079fe472564a2780e1b897c73344b954571c1963ee6dd3919aff5da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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