jasig.org

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 82:d1:78:8f:3c:ef:2c:09:09:53:b7:2a:d2:d0:e5:ce was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jasig.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 82:d1:78:8f:3c:ef:2c:09:09:53:b7:2a:d2:d0:e5:ce
Serial Number (int): 173887274733110762003095566704169772494
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): f3:c5:e2:6f:ec:cf:1b:82:12:ba:5b:05:3f:04:3c:d6:0e:da:19:43
Fingerprint (sha256): e0:ab:1e:2c:7a:48:e4:99:67:06:5b:26:d8:d8:cb:35:a2:23:c7:fa:6a:bc:cf:38:d5:0f:a4:ad:a5:64:c0:54

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/2Vzpca45jf8
CRL Distribution Point: http://crls.pki.goog/gts1d4/OFJedzixRUk.crl

Check the revocation status for certificate jasig.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jasig.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jasig.org
justship.org
www.bsparsha.com.np
ds.mysodexo.app
meh-yar.com
kaminjitt.xyz
nmstateretrojerseys.com
dreadzone.zone
www.stimit.app
thevisitation.org.uk
lemonplot.com
app.ivint.org
www.vertudo.gestexcel.com
www.eastcoastdigitalprogramme.co.uk
firebase.shpdg.org
www.fortum.ee
deeplink.merchant.juxapp.co.uk
www.matyas.nl
attendance.acutec.co.uk
www.clevershark.tech
adstxtgen.playground.xyz
storevary.store
beta.zoomryde.app
admin-panel.parkandwash.ae
jorisp.nl
www.open.kezar-music.com
www.use-it.co.za
sustainabilitytech.com
barnaby.restomax.com
kidie.matthewbickell.co.uk
sebastian.talpasmart.com
app.safesitecheckin.co.uk
www.heartnsoulasks.co.uk
safeena.in
www.flaxboll.io
deliver.monkeysleeps.com
xctr.ro
www.sellit.me
meddi.pti.health
cocomo.justbit.it
pen.weezer.fr
www.dayoldmovies.com
proto.com.br
datkanikzelf.nl
www.nextlevellifts.co.uk
farkle.benjibuiltit.dev
www.sadiqulislam.net
app.pzninja.com
uat.haillio.com
mvp.balcao.xyz
vendor.foodfix.co.za
admin.talentx.talentinum.com
toxiclabs.in
merchant.amatek.co.id
getincredible.io
www.maspractica.cl
www.badra.me
adnet-link.spaceeight.net
dev.ojac.net
app.weloveindoorplants.com
app.staging.mailway.in
dev.weloveindoorplants.com
www.bequali.com.br
auth.publicloud.com.br
www.braintree-it.de
lilleman.trewhitt.se
unorthoprax.net
mnksoft.info
snapfit-storybook.journeyh.io
leefstijl-app.appdashboard.nl
aeon.cmrl.in
www.definitiveinventories.co.uk
personal.tuul.xyz
auth.thomi.com.vn
the-scratch.jp
test-portal.oni.co.nz
dlongglobal.net
cs.gservices.page
www.dsmcl.net
trescala.bist.mx
stories-staging.overhq.com
www.arraysocial.mx
www.afterlife.garden
www.ebulgakov.com
test-a.kurly.it
blog.skont.pl
www.salonepettinemagico.com
querencia.gerenciazap.smartmidiasdigitais.com.br
financas-pessoais.app
dev.masu.app
lastmiledv.com
melbournegroceries.estore.business
erimli.zeplinx.com
dashboard.4bp.com.br
auroraelementarypto.org
analytics.gabismartcare.com
www.matsufes.info
lidlkesabiisi.fi
www.yashmurty.com
www.spox.me

Other certificates including the domain name jasig.org

(limited to 100 certificates)
login.jasig.org
grocerylist.jamesonsaunders.com
app.speaklah.com
admin.eliteonegroup.com
www.inexpertmode.com
www.hommax.com.br
royallahaina.expressbook.io
thercc.us
test.eventchai.com
issues.jasig.org
thevaleadform.com
ephemeral-list.app
source.jasig.org
www.organizze.me
issues.jasig.org
wowdigital.io
www.paydayplay.com
issues.jasig.org
gift-cards.reactify.app
wealthsolutions.demo.titanbay.com
www.roqnet.com
www.mryu.menu
milao.leafnet.com.cy
www.blindreferral.com
sinteras.co
newsource.jasig.org
porto.primaverasound.app
wiki.jasig.org
www.jasig.org
lora-vn.page
source.jasig.org
apply.doxd.io
staging.healthtree.org
colony-alpha.go.colonynetworks.com
livechat.reecegordon.co.uk
www.tricolourspecialities.com
*.jasig.org
debuth.com
cedardrivingschool.ie
appapi.invenzi.com
lgtmgen.com
www.ashleyandemma.com
source.jasig.org
www.ajour.ch
dacslab.com
auth.signatureapp.io
panpacific.rabot.us
userbilling.positeasy.in
deepadmd.com
wegloo.it
www.barryplumbinginc.com
hmwrk.link
menus.beta.beewerk.com
www.estetoscopio.com.br
radio.primaverasound.app
www.haoandxiaoye.com
www.teaabus.com
earlylearnersmontessori.com
test.app.konch.ai
wiki2.jasig.org
www.arttraphotography.com
olvp.flockim.com
dev.nano.app
apply.doxd.io
www.theantiquearcade.co.za
admin.mallive.co
www.gnaane.in
webinar.nhvr.gov.au
dev.dealercurator.com
royallahaina.expressbook.io
panpacific.rabot.us
cedardrivingschool.ie
www.app.raya.io
colony-alpha.go.colonynetworks.com
gogisenyitours.net
wiki.jasig.org
smclient.maxsold.com
www.app.raya.io
peergateway.com
see.pete.run
digitalmenuboard.abacus.co
sabler.cyou
newdeveloper.jasig.org
wealthsolutions.demo.titanbay.com
carbondown.earth
sa.pacdocsign.com
staging.healthtree.org
www.teachertasha.co.uk
newwiki.jasig.org
ht.appvancing.com
rpto.ca
reyskens.org
pesquisas-avisos.alest.com.br
dev.nano.app
www.pizzaanywhere.com.au
buttons.bombers.space
smartmod.com.ve
webinar.nhvr.gov.au
app.orderbit.co
wegloo.it

Certificate

The complete raw certificate details for jasig.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 173887274733110762003095566704169772494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 22:08:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 23:06:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jasig.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/2Vzpca45jf8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2091 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasig.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsparsha.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.mysodexo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meh-yar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaminjitt.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmstateretrojerseys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreadzone.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stimit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevisitation.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonplot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ivint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vertudo.gestexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcoastdigitalprogramme.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.shpdg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortum.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplink.merchant.juxapp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matyas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attendance.acutec.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevershark.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adstxtgen.playground.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storevary.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.zoomryde.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-panel.parkandwash.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jorisp.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.open.kezar-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.use-it.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilitytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnaby.restomax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidie.matthewbickell.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebastian.talpasmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.safesitecheckin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartnsoulasks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeena.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaxboll.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliver.monkeysleeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xctr.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sellit.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meddi.pti.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocomo.justbit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pen.weezer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dayoldmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datkanikzelf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextlevellifts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farkle.benjibuiltit.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sadiqulislam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pzninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.haillio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvp.balcao.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor.foodfix.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.talentx.talentinum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toxiclabs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchant.amatek.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getincredible.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maspractica.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badra.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adnet-link.spaceeight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ojac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.weloveindoorplants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staging.mailway.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.weloveindoorplants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bequali.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.publicloud.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.braintree-it.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilleman.trewhitt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unorthoprax.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnksoft.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapfit-storybook.journeyh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leefstijl-app.appdashboard.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeon.cmrl.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.definitiveinventories.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.tuul.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.thomi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-scratch.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-portal.oni.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlongglobal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.gservices.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsmcl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trescala.bist.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stories-staging.overhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arraysocial.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afterlife.garden'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebulgakov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-a.kurly.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.skont.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salonepettinemagico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querencia.gerenciazap.smartmidiasdigitais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financas-pessoais.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.masu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastmiledv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbournegroceries.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erimli.zeplinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.4bp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auroraelementarypto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.gabismartcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matsufes.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidlkesabiisi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yashmurty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spox.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/OFJedzixRUk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018de7ada05500000403004730450220691925cd34c3a8c26baafddff00112fb5257e4637318c483c88bcffb147f53f8022100ba810dabbd9a952d24f728a8a052082ff7a5095ffc8f6761702bcd32a5a0d21b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018de7ada0740000040300473045022100f24f40c755b8e69789b76926dd1fa66421df2d79a420108ebd2f84f2547c3e24022065350fbb96902ee499ef33ac4b1585ef3a2d7720ce4cd787f65f2fce134cc76e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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