openhealthastra.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 68:99:b9:21:12:9c:95:49:0a:30:b5:1f:37:a7:b0:d2 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=openhealthastra.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:99:b9:21:12:9c:95:49:0a:30:b5:1f:37:a7:b0:d2
Serial Number (int): 139037887847053145523509315267142856914
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): d0:e1:15:65:f8:26:b1:dc:9e:3d:9a:ec:68:68:c2:e3:4b:09:04:8f
Fingerprint (sha256): e4:8e:b1:47:52:fa:cc:a7:b0:4d:08:3e:80:60:78:84:20:a5:25:ec:40:08:d3:6a:14:fc:7d:07:b8:7d:5d:1c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/jKnRqzw4GXU
CRL Distribution Point: http://crls.pki.goog/gts1d4/Oum6XtQWsIU.crl

Check the revocation status for certificate openhealthastra.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openhealthastra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openhealthastra.com
foot-community.com
thelivinglettersart.com
ab-businessservices.com
botondeauxilio.com.mx
www.safebetcuts.com
urls.fastkard.in
www.ab-businessservices.com
www.topsidetipoff.com
nocashlink.com
dustinblad.com
www.blessed-by-juicy.com
blessed-by-juicy.com
dailybooksnacks.com
www.blog.chgams.com
test.opendata.report
leagoo.org
shop.knrtechnologies.in
capacitacionps.com
beta.noter.com.br
atletiekinfo.be
www.test.opendata.report
frogbiosonic.com
whaleui.agency
cleverdog.ai
vernalizeme.com
www.monkeystoreeg.com
www.atletiekinfo.be
app.grupocerceta.com
tansikhadayek.com
moneymessengernow.com
invite-test.careease.kr
www.studywiz.kr
app.mintedsavvy.live
app.nocashlink.com
app.cloudsquid.io
financeforexpats.de
www.dexv.chgams.com
daocbuddy.com
www.daocbuddy.com
shoppinglist.bigo.digital
app-plastx.gocad.de
prevonco.org
littlemoongames.com
digitalrock.amrgharieb.com
timesheet.apiworks.eu
junmannn.com
www.drivewise.bg
paysli-dev.handclap.jp
invite-test2.careease.kr
padariacamila.infinitifood.com.br
widyawaskitawijaya.co.id
live.afumc.org
links.fastkard.in
www.potfactory.kr
applink.daily2you.nl
maciejwarych.pl
v1.nkofestival.ru
design.hark.eco
deer.reso.vn
moveon.rwpanel.com.br
www.financeforexpats.de
app.greencapitalinvest.com.br
examencomplexivo.liidutpl.ec
www.reconhecimentoconvencao23.com.br
crm.fleetagency.endora.dev
www.nervess.cat
nakwonchojang.co.kr
www.thedreamcatchercomic.com
www.mitamukaanlennolle.fi
anghellegal.eu
stage.dhp.check-in.thrive.uk.com
www.pin20.co.uk
staging-tournament.troves.gg
www.fastproject.fr
app.engage.errandupstevenspoint.voyagernetz.us
diotima.eu
www.hopeforjaspercounty.org
www.redmondconstruction.work
electrician-iasi.ro
dev.lauvtjernterrasse.no
www.snailhousecampervans.com
mobile-sdk.stg.flux.video
cockpit-next.pluscity.at
www.hotelb7journey.com.tw
inventory-manager.xeedasvia.com
test.chargepointgrants.dft.gov.uk
www.alamode.life
www.iloasiivoukseen.fi
opportunity.lv
capacitacion.alamoseguros.com.mx
2020.dddeurope.com
www.hag-haveagift.pt
www.hojicha.eu
admin-dev.dons.live
www.paku.pe
a4typer.apm2.studio
link.bevoy.life
marafone.marcorosetti.it
chat.nekoula.ru

Other certificates including the domain name openhealthastra.com

(limited to 100 certificates)
www.order-vision.com
blessed-by-juicy.com
catalog.regalfireplaces.com
www.pledran.com
openhealthastra.com
openhealthastra.com
www.lebonmaxime.fr

Certificate

The complete raw certificate details for openhealthastra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 139037887847053145523509315267142856914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 23:11:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 00:10:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openhealthastra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/jKnRqzw4GXU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2240 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhealthastra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foot-community.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelivinglettersart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-businessservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botondeauxilio.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safebetcuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urls.fastkard.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ab-businessservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topsidetipoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nocashlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dustinblad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessed-by-juicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessed-by-juicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailybooksnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blog.chgams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.opendata.report'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leagoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.knrtechnologies.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capacitacionps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.noter.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atletiekinfo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.opendata.report'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frogbiosonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whaleui.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleverdog.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vernalizeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monkeystoreeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atletiekinfo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.grupocerceta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tansikhadayek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneymessengernow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite-test.careease.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studywiz.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mintedsavvy.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nocashlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cloudsquid.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeforexpats.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dexv.chgams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daocbuddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daocbuddy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppinglist.bigo.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-plastx.gocad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevonco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlemoongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalrock.amrgharieb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesheet.apiworks.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junmannn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drivewise.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paysli-dev.handclap.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite-test2.careease.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padariacamila.infinitifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widyawaskitawijaya.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.afumc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.fastkard.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potfactory.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink.daily2you.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maciejwarych.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.nkofestival.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.hark.eco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deer.reso.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moveon.rwpanel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financeforexpats.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.greencapitalinvest.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examencomplexivo.liidutpl.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconhecimentoconvencao23.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.fleetagency.endora.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nervess.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakwonchojang.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedreamcatchercomic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitamukaanlennolle.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anghellegal.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dhp.check-in.thrive.uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pin20.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-tournament.troves.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastproject.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.engage.errandupstevenspoint.voyagernetz.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diotima.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopeforjaspercounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redmondconstruction.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrician-iasi.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.lauvtjernterrasse.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snailhousecampervans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-sdk.stg.flux.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit-next.pluscity.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelb7journey.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inventory-manager.xeedasvia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.chargepointgrants.dft.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alamode.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iloasiivoukseen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capacitacion.alamoseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020.dddeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hag-haveagift.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hojicha.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-dev.dons.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paku.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a4typer.apm2.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.bevoy.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marafone.marcorosetti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.nekoula.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/Oum6XtQWsIU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c27de2003000004030047304502204a5c876af326511a224049cc85043da8593e68da5fa90c2bada551023b5e38ff02210095a2a006af94b610343cbc79043a9aa7bb0a40489c2f9abb0f89af790729fe4400770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c27de20f20000040300483046022100b2486e02aed90eb2cc5b9c3b2690b0f5f39ba2d2d3ecb17d696f4edf65de820c022100f91c0b590ca80a8b92e8ab6d4ee83bd595d8bf60c4bf4f948b6606f866e595d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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