www.gatka.org

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 68:32:42:b0:07:cd:75:92:0a:15:21:7c:85:14:05:ee was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.gatka.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:32:42:b0:07:cd:75:92:0a:15:21:7c:85:14:05:ee
Serial Number (int): 138500678990163215756793924773492295150
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 18:da:d5:bd:aa:b4:78:e4:5d:a7:8e:bd:e2:8e:b7:72:da:bb:20:c6
Fingerprint (sha256): e3:d9:22:d1:22:ee:72:b1:8c:71:e5:0d:08:0c:79:3f:75:be:79:a1:c4:c8:6b:de:c4:a1:fc:cb:3b:79:4b:66

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/w7mHu0VXw6U
CRL Distribution Point: http://crls.pki.goog/gts1d4/TCKytZRd7jA.crl

Check the revocation status for certificate www.gatka.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gatka.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gatka.org
jualbeli.pro
om.entur.no
pms.hotel-competence.com
longo.land
pizza13.tapmenu.app
dnlogis.com
kompas.polskapartiapiratow.pl
penn.openhatch.org
link.mmg.specialquiz.it
hsuite-phr.healthspaces.io
preent.app
dev.baileyconradt.com
www.coffeeinthevault.com
medrchive.gr
dayscheduler.ca
crm.zimma.com.mx
radiant.graphics
www.chember.tech
auth.googlefeud.com
apps.defimath.ca
app.criequestoes.com.br
mercan.mercari.com
dfconsultancyinc.com
standards.amnbrains.com
www.defidashboard.io
www.useuptownfresh.com
www.medeye.com.tr
app.kele.com
heterizeinfotech.com
staging.distill.pub
easybusi.onsite.invue-live.com
aimbridge.visitingmedia.com
www.nakulkundra.com
colecciones.zrapata.com
stayupolknights.com
www.downfall.com
link.sajari.com
www.accedere.ai
huckleback.com
auto-quality.in
mattreyn.com
swila.io
www.vvnfinis.com
members.take5benefitsalliance.ca
team-dist.svolme.net
reformapa.es
automap.iob.ch
www.jamespearcedev.co.uk
ibg.church
www.tabitha-thomas-schaffran.de
www.3jtem.fr
www.mediflexx.net
www.literaseed.io
www.mobilizei.com.br
ngpanel.noisegrasp.com
www.ebiantonygeorge.com
test.talentester.com
www.shopconvo.ai
vqpass.com
chembioai.org
www.medikids.com.br
www.custoking.com
quarctechno.com
poseidon-billiards.com
vaporr.cloud
letstrygg.com
www.tiduran.com
thewarehousevintage.com
uniqueflooring.co.za
family-game-night.net
www.stybbers.se
www.family-game-night.net
karunadupremierleague.com
demo.xinsere.com
leonguyen.store
stgsso.icpay.com
viserp.com
getchug.app
histutor.lifove.net
safetycape.com
saml.co.za
ssagroindia.com
icmacc.org
cotranh.com
www.oxyspec.com
blackjuly.com
colheita.beerme.com.br
playground.demo.chance-store.jp
ibranchrecruiters.co.bw
vero-algo.verolabs.co
www.safetycape.com
freedom-life.xyz
www.safetycapes.com
www.blackjuly.com
safetycapes.com
smartpoliticalsurvey.com
poseidon-billiards.club
jasondavis.pro
coin24hrs7d.vip

Other certificates including the domain name gatka.org

(limited to 100 certificates)
tennisscoring.app
p.sozlerkosku.com
www.pulsar.la
fangravy.com
gatka.org
lacusenergia.com.br
kachifo.farafinaeducational.app
blendiqo.com
www.numbr.tk
el-gas.com
test.m.pidedirecto.mx
homexpense.tk
www.missmalayali.ca
blendiqo.com
bankpda.com
sbx-rb-nz-tb-kiosk.supersonic-fm.com
www.bcc20k.com
www.popopost.com
specimens.nl
www.ieeensut.com
app.yondemy.com
www.molemountainmint.com
cdn.outgrow.us
cdn.outgrow.us
vuejsbh.com
app.equesto.de
s1.referberry.com
adm.agrogustavoavelar.com.br
sarov.name
www.gatka.org
dailyhealth.co
8e88.ga
www.medik-dom.fr
www.kashifkhan.org
montreeservices.com
www.gatka.org
development.sissification.academy
gatka.org
www.accelcalc.com
www.wezee.in
enfonica.com
m.santellocouros.com.br
lucyfollansbee.com
indiic.com.ar

Certificate

The complete raw certificate details for www.gatka.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138500678990163215756793924773492295150
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 07:49:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 08:48:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gatka.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/w7mHu0VXw6U'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1976 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jualbeli.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.entur.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms.hotel-competence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longo.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizza13.tapmenu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnlogis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kompas.polskapartiapiratow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penn.openhatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.mmg.specialquiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsuite-phr.healthspaces.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preent.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.baileyconradt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeeinthevault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medrchive.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayscheduler.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.zimma.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiant.graphics'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chember.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.googlefeud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.defimath.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.criequestoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercan.mercari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfconsultancyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standards.amnbrains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defidashboard.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.useuptownfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medeye.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heterizeinfotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.distill.pub'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easybusi.onsite.invue-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimbridge.visitingmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nakulkundra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colecciones.zrapata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayupolknights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downfall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.sajari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accedere.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huckleback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-quality.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattreyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swila.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vvnfinis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.take5benefitsalliance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-dist.svolme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reformapa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automap.iob.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamespearcedev.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibg.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabitha-thomas-schaffran.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3jtem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediflexx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literaseed.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobilizei.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngpanel.noisegrasp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebiantonygeorge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.talentester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopconvo.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vqpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chembioai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medikids.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custoking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quarctechno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poseidon-billiards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaporr.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letstrygg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiduran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewarehousevintage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniqueflooring.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'family-game-night.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stybbers.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.family-game-night.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karunadupremierleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.xinsere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonguyen.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgsso.icpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viserp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getchug.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'histutor.lifove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetycape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saml.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssagroindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icmacc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotranh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxyspec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackjuly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colheita.beerme.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playground.demo.chance-store.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibranchrecruiters.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vero-algo.verolabs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safetycape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedom-life.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safetycapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackjuly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetycapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartpoliticalsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poseidon-billiards.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasondavis.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coin24hrs7d.vip'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/TCKytZRd7jA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c151ea95e000004030046304402200fc66feba0e88e5117699a0688778883880259b5e627b01610d63322d286c03102202053b1b3d861027d2a9228fec68fe1974444c37c1e926df28a96e5b271af6e4900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c151ea97b000004030047304502210099ae9606d485f3c00cb89d933ad18dbe6f700bc4488db58ff932b7e95675737b0220017b6c2d0ece7b63c001c833436078ec6d18727dbb6d6b3495161745241dca5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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