www.grainstate.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number d5:34:3c:10:b7:cb:2c:9b:0a:a1:4e:0e:5c:e5:12:35 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.grainstate.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d5:34:3c:10:b7:cb:2c:9b:0a:a1:4e:0e:5c:e5:12:35
Serial Number (int): 283396780807939090676473802204308116021
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 94:89:07:5a:31:7d:18:1e:5a:d8:77:fa:67:c6:7b:67:35:bb:22:b0
Fingerprint (sha256): de:51:57:0d:da:92:e8:f9:7b:9e:6a:b0:e4:ae:95:58:32:5d:ed:8c:c8:a6:58:09:6d:2c:d4:e7:b1:60:59:43

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/BgS81j6zhX8
CRL Distribution Point: http://crls.pki.goog/gts1d4/EST6rpoTEPY.crl

Check the revocation status for certificate www.grainstate.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.grainstate.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.grainstate.com
thecultofnick.com
easyfix.tools
space-unknown.com
2-11-2048.com
anyrecipe.app
www.mineling.com
video-chat-for-you.com
gammu.online
empoweredtech.co
www.afemalecoder.com
talk-strangers.com
elitespacefootball.com
www.ravachedecoracoes.com.br
www.beedablu.com
jakearmendariz.com
crystalix.pro
www.apholtra.ch
jrunited.net
adventify.me
insightsai.us
pushtodo.org
logarithmsai.com
your2095.com
angelsaviour.in
codecode.academy
rongyosgarda.com
lofi-code.com
www.mon-desir.nl
psycholog-bialek.pl
technology-robot.com
friendcastle.org
www.chinnawat-ice.com
kuma.coffee
canvas23studios.com
gogoplata.io
aisha.technology-robot.com
toodaloo.org
dolphin-funraisers.org
sonder-designs.com
boardsnthangs.com
mindigniteventures.com
collision.noih.dev
globallylinkedservices.com
linxag.ng
eddesign.co
www.codecode.academy
qscans.in
www.canvas23studios.com
infinitecinematics.com
logistics.ctscenter.co
firebase.iamb2g.com
itcdelcentro.com
opticred.optagestion.cl
dev.oldasdirt.com.au
carciofo.shop
promo.buntbunt.com
play.1ludo.in
promo.buntbunt.ch
futbolfemeninoguemes.com.ar
app.1ludo.in
reg.timoti.co.id
www.wakaokao.net
www.erapharma.com
winbox.rethela.com
auth.dataplace.ai
links.timbertrader.app
coronacountdown.app
share.cabuu.app
m-test.karrot.app
trial.deepscholar.app
app.trimed.com.al
www.didiform.com
fibras.world
aon-explorer-dev.affinity.do
www.storyarchitect.app
smallstack.app
moderator.consensus-connect.com
bojanmartin.ca
map.yaytso.art
scratchtrack.co
motoplague.com
pdr.vacinas.app
pssdup.com
www.akpazar.bel.tr
share.bigknowledge.net
admin.simyra.co.uk
dev.getmade.co
c4sapp.class.me
www.moozx.com
xedichvulongthanhnhontrach.com
spectrograph.chrismitchell.name
www.palavrea.do
clemea22.mapbuilder.io
www.ibazze.com.br
app-enterprise.overview.one
www.shift31.net
admin.kahu.work
levenup.com
telemedadmin.casemedservices.org

Other certificates including the domain name grainstate.com

(limited to 100 certificates)
www.rarefind.us
www.outnumber.app
meganetsbolivia.com
www.virtualshowroom.fakts.de
cliente-teste.smartimob.io
bryceboesen.com
bupapp.com
springbench.com
www.personal.revealu.eu
www.fstrudel.dev
habitboy.com
iknow.spillpdf.com
www.grainstate.com
cumin-moonstone.harecord-dev.com
www.fourseasonsvape.com
digitaleenergietafel.nl

Certificate

The complete raw certificate details for www.grainstate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283396780807939090676473802204308116021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 03:37:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 04:36:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.grainstate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/BgS81j6zhX8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grainstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecultofnick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyfix.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'space-unknown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-11-2048.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyrecipe.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mineling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-chat-for-you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gammu.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empoweredtech.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afemalecoder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talk-strangers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitespacefootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravachedecoracoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beedablu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jakearmendariz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalix.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apholtra.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrunited.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventify.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insightsai.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushtodo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logarithmsai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your2095.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelsaviour.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codecode.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rongyosgarda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lofi-code.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mon-desir.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psycholog-bialek.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technology-robot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendcastle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinnawat-ice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuma.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvas23studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogoplata.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisha.technology-robot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toodaloo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolphin-funraisers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonder-designs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardsnthangs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindigniteventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collision.noih.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globallylinkedservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linxag.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddesign.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codecode.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qscans.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canvas23studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinitecinematics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logistics.ctscenter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.iamb2g.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcdelcentro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticred.optagestion.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.oldasdirt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carciofo.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.buntbunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.1ludo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo.buntbunt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futbolfemeninoguemes.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.1ludo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reg.timoti.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakaokao.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winbox.rethela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.dataplace.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.timbertrader.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronacountdown.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.cabuu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-test.karrot.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trial.deepscholar.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.trimed.com.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.didiform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibras.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aon-explorer-dev.affinity.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storyarchitect.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallstack.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moderator.consensus-connect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bojanmartin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.yaytso.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scratchtrack.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoplague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdr.vacinas.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pssdup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akpazar.bel.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.bigknowledge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.simyra.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.getmade.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4sapp.class.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moozx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xedichvulongthanhnhontrach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrograph.chrismitchell.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palavrea.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clemea22.mapbuilder.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibazze.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-enterprise.overview.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shift31.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kahu.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levenup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemedadmin.casemedservices.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/EST6rpoTEPY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ba2ebf83f0000040300473045022049845bbc3c0c6603899cc1a6ebe1b3ed8a40049cb8b8abcb87a229fccf006a48022100ed5f22128161e0970152c055b5974cd88c3c82736b8bcdda739b8e04a3cdf69b007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ba2ebf8190000040300473045022075be668e301edce2cf5fba4f66e58fd37d60ea0346a0fe608f679464bc26dd00022100fa64b6e9b6087a17bdf7dfb1dfa95664a2957f392eb95d68ad0370fc9d38055c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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