www.ascension.direct

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 82:76:8d:d4:00:6f:59:94:12:4b:9b:15:11:b6:e8:09 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ascension.direct

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 82:76:8d:d4:00:6f:59:94:12:4b:9b:15:11:b6:e8:09
Serial Number (int): 173415207097605354835261502773601429513
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): c4:cd:21:b5:30:d4:5b:71:12:5b:be:7b:d5:ed:02:9d:2e:ca:dd:09
Fingerprint (sha256): de:d6:14:86:14:58:da:e5:cf:9e:83:fa:10:c2:ac:19:e0:5d:1a:e5:27:fe:6b:c0:91:55:8f:dc:fa:83:62:15

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/cCtdz-1VYBQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/lID7udI9D1Y.crl

Check the revocation status for certificate www.ascension.direct

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ascension.direct

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ascension.direct
sjnarmstrong.com
dfstalk.vessels.tech
www.busca.tel
coworkers.gg
jameswalsh.design
www.topixia.com
localshops.thecoffeeforyou.com
www.mandm-racing.com
unquote.dev
www.wacharaconcrete.com
www.zonilyjame.dev
panoramainmobiliaria.com.mx
duplify.live
www.jameswalsh.design
smartpatch.net
c-e-s.co.za
www.nilesfromm.com
mail.rifzki.my.id
biederbuch.de
berdj.dev
galoxee.de
www.rtti.dev
austinsimpson.dev
vzn.tiro.health
blackmaple.io
partner.aicasindia.in
www.tohanesandtohold.com
proto.tastematch.app
www.pqmpk.com
investment.alias-solutions.net
www.essayconfidential.com
extrud.io
web.vakey.app
mooch.mx
davesheatingandair.us
mmdmarket.mmdsmart.com
cdn-v6.quoteninja.com
upstyled.io
huesofthemind.org
teresa.apelido-apelido.com
gffft.app
www.dispersed.app
juroscompostos.app
www.wordful.app
www.jobcostings.app
www.kshaarstyliste.be
www.ironbility.com
textract.chrisrohr.app
branch.treelog.io
aliciapinto.me
farid.technology
tongueincheek.lol
paskin.pro
marcboracchia.com
ipp-demo.klarway.com
pcalc.prestigeplus.sydney
penance.app
demo03.dlverapp.com
l.bekind.app
yetuglobal.com
aeroguard.app
limestreet.co
fabian-gronert.de
www.hararidawah.org
kalender.blaulichtplaner.app
grace.app
www.loyaliteit.eeetwell.be
app.fisiotec.com.br
prod.presar.app
mtsadmin.com
remixtrainer.com
staging.budget-bot.com
theaccusations.com
app.polarisoffice.com
wl1.scottieschneider.com
link2.m3pay-qa.com
www.onyedibesixtus.com
staging.thefreightcollection.com
www.prosperintheland.com
iwantic.3diq.com
www.vlaskova.art
oscarbolivarphoto.com
akshai.dev
best-home-configurator.3dcloud.io
www.compsolutions.com
get.fuocos.pizza
www.macangroup.co.uk
r.limscare.com
waiterprofast-uat-table.waiterpro.com
console.getmemo.co.za
rooms.rotes.haus
www.pcgpopreport.com
taqsay.com
www.itmagic.dev
www.simongarton.com
www.cruiseuvac.com
administratu.uy
get.trbu.app
docs.pattern.health

Other certificates including the domain name ascension.direct

(limited to 100 certificates)
register.codingbar.ai
integritystablepay.com
mtsadmin.com
app.louna.graphite.space
www.amadogonzalez.dev
eintracht-auerbach-singt.de
evidencedaocrypto.com
www.ascension.direct
pcalc.prestigeplus.sydney

Certificate

The complete raw certificate details for www.ascension.direct in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINEzCCC/ugAwIBAgIRAIJ2jdQAb1mUEkubFRG26AkwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwMjEyMDkxNDU5WhcNMjQwNTEy
MTAxMzMxWjAfMR0wGwYDVQQDExR3d3cuYXNjZW5zaW9uLmRpcmVjdDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKx8yW5NaPbYQgz5/BAcDw8UYG2Dtu8r
WWma+PGKkQV1xSswYe8aJNbhn6zj4i+FvWQErDH3nKFvAXCkS+uzRb6kZsVnkHGp
hx/kpCz7ov5SqZ9tgCYABWP66xWjIyPRdeFuytuLBcRsd/XsHMFKK9RHaO9NU6lL
hnBV68POSCrAyJ891xGmypH0ST2Rsqy0IiJHo+klWMEPAfTNQTrzhN5u3GO4DQji
cCZscFtm+21P+N1qydg0bm0kC8rZBu9fXrB+KeAI1YmvjmYhIMKWEbBEIp6Mb9zY
hYWNaKvg1NgUyY0njOmmWEL1byF/+U/bXWq6bWAzW4kFKMk609tsIa8CAwEAAaOC
CiEwggodMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBRscCRBxBn9Sm8am9WPohROJiEQyDAfBgNVHSME
GDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYB
BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L2NDdGR6LTFWWUJR
MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQu
ZGVyMIIHwgYDVR0RBIIHuTCCB7WCFHd3dy5hc2NlbnNpb24uZGlyZWN0ghBzam5h
cm1zdHJvbmcuY29tghRkZnN0YWxrLnZlc3NlbHMudGVjaIINd3d3LmJ1c2NhLnRl
bIIMY293b3JrZXJzLmdnghFqYW1lc3dhbHNoLmRlc2lnboIPd3d3LnRvcGl4aWEu
Y29tgh5sb2NhbHNob3BzLnRoZWNvZmZlZWZvcnlvdS5jb22CFHd3dy5tYW5kbS1y
YWNpbmcuY29tggt1bnF1b3RlLmRldoIXd3d3LndhY2hhcmFjb25jcmV0ZS5jb22C
End3dy56b25pbHlqYW1lLmRldoIbcGFub3JhbWFpbm1vYmlsaWFyaWEuY29tLm14
ggxkdXBsaWZ5LmxpdmWCFXd3dy5qYW1lc3dhbHNoLmRlc2lnboIOc21hcnRwYXRj
aC5uZXSCC2MtZS1zLmNvLnphghJ3d3cubmlsZXNmcm9tbS5jb22CEW1haWwucmlm
emtpLm15Lmlkgg1iaWVkZXJidWNoLmRlggliZXJkai5kZXaCCmdhbG94ZWUuZGWC
DHd3dy5ydHRpLmRldoIRYXVzdGluc2ltcHNvbi5kZXaCD3Z6bi50aXJvLmhlYWx0
aIINYmxhY2ttYXBsZS5pb4IVcGFydG5lci5haWNhc2luZGlhLmlughh3d3cudG9o
YW5lc2FuZHRvaG9sZC5jb22CFHByb3RvLnRhc3RlbWF0Y2guYXBwgg13d3cucHFt
cGsuY29tgh5pbnZlc3RtZW50LmFsaWFzLXNvbHV0aW9ucy5uZXSCGXd3dy5lc3Nh
eWNvbmZpZGVudGlhbC5jb22CCWV4dHJ1ZC5pb4INd2ViLnZha2V5LmFwcIIIbW9v
Y2gubXiCFWRhdmVzaGVhdGluZ2FuZGFpci51c4IWbW1kbWFya2V0Lm1tZHNtYXJ0
LmNvbYIVY2RuLXY2LnF1b3RlbmluamEuY29tggt1cHN0eWxlZC5pb4IRaHVlc29m
dGhlbWluZC5vcmeCGnRlcmVzYS5hcGVsaWRvLWFwZWxpZG8uY29tgglnZmZmdC5h
cHCCEXd3dy5kaXNwZXJzZWQuYXBwghJqdXJvc2NvbXBvc3Rvcy5hcHCCD3d3dy53
b3JkZnVsLmFwcIITd3d3LmpvYmNvc3RpbmdzLmFwcIIVd3d3LmtzaGFhcnN0eWxp
c3RlLmJlghJ3d3cuaXJvbmJpbGl0eS5jb22CFnRleHRyYWN0LmNocmlzcm9oci5h
cHCCEWJyYW5jaC50cmVlbG9nLmlvgg5hbGljaWFwaW50by5tZYIQZmFyaWQudGVj
aG5vbG9neYIRdG9uZ3VlaW5jaGVlay5sb2yCCnBhc2tpbi5wcm+CEW1hcmNib3Jh
Y2NoaWEuY29tghRpcHAtZGVtby5rbGFyd2F5LmNvbYIZcGNhbGMucHJlc3RpZ2Vw
bHVzLnN5ZG5leYILcGVuYW5jZS5hcHCCE2RlbW8wMy5kbHZlcmFwcC5jb22CDGwu
YmVraW5kLmFwcIIOeWV0dWdsb2JhbC5jb22CDWFlcm9ndWFyZC5hcHCCDWxpbWVz
dHJlZXQuY2+CEWZhYmlhbi1ncm9uZXJ0LmRlghN3d3cuaGFyYXJpZGF3YWgub3Jn
ghxrYWxlbmRlci5ibGF1bGljaHRwbGFuZXIuYXBwgglncmFjZS5hcHCCGnd3dy5s
b3lhbGl0ZWl0LmVlZXR3ZWxsLmJlghNhcHAuZmlzaW90ZWMuY29tLmJygg9wcm9k
LnByZXNhci5hcHCCDG10c2FkbWluLmNvbYIQcmVtaXh0cmFpbmVyLmNvbYIWc3Rh
Z2luZy5idWRnZXQtYm90LmNvbYISdGhlYWNjdXNhdGlvbnMuY29tghVhcHAucG9s
YXJpc29mZmljZS5jb22CGHdsMS5zY290dGllc2NobmVpZGVyLmNvbYISbGluazIu
bTNwYXktcWEuY29tghZ3d3cub255ZWRpYmVzaXh0dXMuY29tgiBzdGFnaW5nLnRo
ZWZyZWlnaHRjb2xsZWN0aW9uLmNvbYIYd3d3LnByb3NwZXJpbnRoZWxhbmQuY29t
ghBpd2FudGljLjNkaXEuY29tghB3d3cudmxhc2tvdmEuYXJ0ghVvc2NhcmJvbGl2
YXJwaG90by5jb22CCmFrc2hhaS5kZXaCIWJlc3QtaG9tZS1jb25maWd1cmF0b3Iu
M2RjbG91ZC5pb4IVd3d3LmNvbXBzb2x1dGlvbnMuY29tghBnZXQuZnVvY29zLnBp
enphghR3d3cubWFjYW5ncm91cC5jby51a4IOci5saW1zY2FyZS5jb22CJXdhaXRl
cnByb2Zhc3QtdWF0LXRhYmxlLndhaXRlcnByby5jb22CFWNvbnNvbGUuZ2V0bWVt
by5jby56YYIQcm9vbXMucm90ZXMuaGF1c4IUd3d3LnBjZ3BvcHJlcG9ydC5jb22C
CnRhcXNheS5jb22CD3d3dy5pdG1hZ2ljLmRldoITd3d3LnNpbW9uZ2FydG9uLmNv
bYISd3d3LmNydWlzZXV2YWMuY29tgg9hZG1pbmlzdHJhdHUudXmCDGdldC50cmJ1
LmFwcIITZG9jcy5wYXR0ZXJuLmhlYWx0aDAhBgNVHSAEGjAYMAgGBmeBDAECATAM
BgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5n
b29nL2d0czFkNC9sSUQ3dWRJOUQxWS5jcmwwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAY2c0BrTAAAE
AwBIMEYCIQCz/71QJ6VxvNkvZKSAfBE1k3h6La9WgBpou4Vu6bKmMgIhAOHo4Slu
MQdfcdbLVeXaaW6uJvhiqnRT+7gvQxH1FuK3AHYAdv+IPwq2+5VRwmHM9Ye6NLSk
zbsp3GhCCp/mZ0xaOnQAAAGNnNAa0gAABAMARzBFAiEAggdaWNk+UVs7LhkmR9UW
13UWEikD6zshABir2qSF4/4CIB5TgDvJ1h2I2jk46eC8LEcePuOGmLP/c2X/AGpW
8I3cMA0GCSqGSIb3DQEBCwUAA4IBAQAKPY9wU9AI7ORttentusCmTPWvSGz394Ym
9of1UmDqI8O1ljzZTx+Hq1PxjvzbWyzno/cjOhZt370acHQWYB1lC2R4dW90cTJr
I0qsOs4e3/O2H+WaeofbGuOw+LasENmJcifYIJY6QFiItGMz4Y9oz8S4gVKXiiGx
B9Y/0F2nnlRnWNCwCTUV/T21G7PmGLo0LHg8pP4Cf6lhVn7TLFEzVatpAp1SzRpK
DnoFmfBuUzdUcFmvzxoRIGRb4kvKNHkbnFqwBoP26xabYqfMPiGUnGBUeLspLxii
I6x7cYdsx9FYAVVqaE9tLVAhQdLylPDMKeousxvwY+0pDgQK/c+s
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 173415207097605354835261502773601429513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 09:14:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 10:13:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ascension.direct'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/cCtdz-1VYBQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1977 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascension.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjnarmstrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfstalk.vessels.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.busca.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coworkers.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jameswalsh.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topixia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localshops.thecoffeeforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandm-racing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unquote.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wacharaconcrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonilyjame.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panoramainmobiliaria.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duplify.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jameswalsh.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartpatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-e-s.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nilesfromm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rifzki.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biederbuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berdj.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galoxee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rtti.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinsimpson.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vzn.tiro.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackmaple.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.aicasindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tohanesandtohold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proto.tastematch.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pqmpk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment.alias-solutions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essayconfidential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extrud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.vakey.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooch.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davesheatingandair.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmdmarket.mmdsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-v6.quoteninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstyled.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huesofthemind.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teresa.apelido-apelido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gffft.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dispersed.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juroscompostos.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordful.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobcostings.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kshaarstyliste.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ironbility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textract.chrisrohr.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branch.treelog.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliciapinto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farid.technology'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongueincheek.lol'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paskin.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcboracchia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipp-demo.klarway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcalc.prestigeplus.sydney'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penance.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo03.dlverapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.bekind.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yetuglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeroguard.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limestreet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabian-gronert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hararidawah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalender.blaulichtplaner.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grace.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loyaliteit.eeetwell.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fisiotec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.presar.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remixtrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.budget-bot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theaccusations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.polarisoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wl1.scottieschneider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link2.m3pay-qa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onyedibesixtus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.thefreightcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prosperintheland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwantic.3diq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vlaskova.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscarbolivarphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akshai.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'best-home-configurator.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.fuocos.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macangroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.limscare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiterprofast-uat-table.waiterpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.getmemo.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rooms.rotes.haus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcgpopreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taqsay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itmagic.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simongarton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruiseuvac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administratu.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.trbu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.pattern.health'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/lID7udI9D1Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d9cd01ad30000040300483046022100b3ffbd5027a571bcd92f64a4807c113593787a2daf56801a68bb856ee9b2a632022100e1e8e1296e31075f71d6cb55e5da696eae26f862aa7453fbb82f4311f516e2b700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d9cd01ad2000004030047304502210082075a58d93e515b3b2e192647d516d77516122903eb3b210018abdaa485e3fe02201e53803bc9d61d88da3938e9e0bc2c471e3ee38698b3ff7365ff006a56f08ddc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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