link.banknorwegian.es

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 6c:a3:70:c8:ef:30:2a:a9:10:8f:82:14:c0:02:4b:ce was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=link.banknorwegian.es

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:a3:70:c8:ef:30:2a:a9:10:8f:82:14:c0:02:4b:ce
Serial Number (int): 144405255482245350261744952272404761550
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 71:db:95:90:fc:81:ab:94:00:a0:0c:b0:69:17:0d:ca:40:6e:1a:03
Fingerprint (sha256): e5:48:95:13:50:3b:9f:00:8c:a3:d7:fc:83:67:47:43:2e:e3:de:f9:de:9f:5c:e2:c1:43:9c:1e:3a:7b:4c:ad

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/7-iNCkx9iuA
CRL Distribution Point: http://crls.pki.goog/gts1d4/HdPV8cYYwCU.crl

Check the revocation status for certificate link.banknorwegian.es

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for link.banknorwegian.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

link.banknorwegian.es
www.welovejake.com
login.fanrequests.com
hispanovida.com
dev.team.pwapilipinas.org
macutriviamb.sqwadhq.com
swiss8.com
ultimate-champions.com
www.bellezaadiario.com
www.saudeemplanos.com
app.imobiliariaolivercunha.com.br
zist.be
bluecabin.es
asset.uat.riipay.my
blog.houni.tn
media.laundrapp.com
restaurant-sandbox.go4e.at
wortbaum.com
www.joudasfari.dev
www.paniaguajulio.com
archive.greenstream.io
www.kevinlu-portfolio.com
deepwork.ai
www.sheremetievskie-ozera.com
www.webgates.net
runningtracker.app
www.cadreporting.com
www.acepay.com.br
map.spiio.com
hr-score.mikaelf.com
auth.vyb-stage.events
www.playvimo.com
adressandring.demo.movello.se
legacy-tech.fr
uhladiku.cz
robin.wenglewski.de
qa.wandb.ai
start4go.nl
customization.mapridesshop.com
www.uractor.com
theclusterfolk.com
tejrath.estore.business
corona.pinkbeton.com
vinelinkmonitoring.gr
tools.entregas.cl
dlm.rocks
robindossche.be
magickass.mixed.place
firebase.stageenv.co.in
igp.12traits.com
app.volt.ro
examples.bridal.vision
pinched.io
findyourseat.co.uk
www.bpsmart.ai
cateringportal.stollsteimer.de
mythical.12traits.com
www.bukkycupcakes.com
checkout.couchbucks.com
45s.co.nz
www.polyphony.studio
magicfuelgames.12traits.com
www.ramonenses.com.mx
dualwieldent.com
coredot.io
urya.com.br
42systeme.com
www.devincians.com
app.staht.com
retomoto.12traits.com
guiapass.com.br
app.arealx.in
www.econwhy.com
www.42systeme.com
jamcity.12traits.com
kienzlerpoolservices.com
app.everyspace.me
www.crazywok-mainz.de
fabiohome.com.br
web.infomobi.app
www.pineworkslabs.com
adminempleos.iasaglobal.com
link.sejutacita.id
dynamic-uat.lottefinance.vn
app.faangpath.com
immersified.com
simexpo22.simracing.gp
www.pump.works
dev.fleettap.com
ciasalt.com
dev1.claudio-ep.com
fastforwardbroadband.com
www.floridafreshstart.org
stattogether.com
dauth.idealvoyance.com
www.sonepar.bluevis.io
dev2.claudio-ep.com
dcsunity.com
shield.thndr.io
share.deviot.de

Other certificates including the domain name banknorwegian.es

(limited to 100 certificates)
www.click2call.cl
www.duasxicaras.com.br
www.click2call.cl
www.duasxicaras.com.br
lego.vida-poc-dev.vdms-remote.com
www.stavninasvet.si
publicnotices.enotice.io
www.polyphony.studio
customization.mapridesshop.com
www.banknorwegian.no
www.polyphony.studio
link.banknorwegian.es
www.advertisingdata.com
identity.banknorwegian.no

Certificate

The complete raw certificate details for link.banknorwegian.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINSzCCDDOgAwIBAgIQbKNwyO8wKqkQj4IUwAJLzjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDAxMjQyMjUyNDdaFw0yNDA0MjMy
MzQ5MzZaMCAxHjAcBgNVBAMTFWxpbmsuYmFua25vcndlZ2lhbi5lczCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKrbNMni4A1i6VxvLEQdokPCI988xC3Z
+g+hMQkCJFBxgr+h7sJfUPDyCF7ImcmrfokkL0IQWfcEh2GLmBVr1w7dSsY9QDTi
hVg5Flr4gvc1nYXWij3ZWM7QiXnDfpwK6xj5+iR6KYzxq6aAsjauTh1zcpxRgbX7
9Gh3z5t+9WP3lK2lDnRAQzJV97aDnMoSC5WZ40IehpXRFfTbBnc+QD0Pxc8J8I76
beGjyR1T2ghfQBpANJeGDvqqu+yfLb6vnfw1y7HQ87v8x4cmaxciA2vAucfnMIfD
9qIbQ3OWLy4OCYZxsqSI2P78TOOmTpYatQXRCJBePS0GyVlg+V5VVFUCAwEAAaOC
ClkwggpVMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBQhRcI7rEws62tPtefJ4sNq0b2zwjAfBgNVHSME
GDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYB
BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0LzctaU5Da3g5aXVB
MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQu
ZGVyMIIH+wYDVR0RBIIH8jCCB+6CFWxpbmsuYmFua25vcndlZ2lhbi5lc4ISd3d3
LndlbG92ZWpha2UuY29tghVsb2dpbi5mYW5yZXF1ZXN0cy5jb22CD2hpc3Bhbm92
aWRhLmNvbYIZZGV2LnRlYW0ucHdhcGlsaXBpbmFzLm9yZ4IYbWFjdXRyaXZpYW1i
LnNxd2FkaHEuY29tggpzd2lzczguY29tghZ1bHRpbWF0ZS1jaGFtcGlvbnMuY29t
ghZ3d3cuYmVsbGV6YWFkaWFyaW8uY29tghV3d3cuc2F1ZGVlbXBsYW5vcy5jb22C
IWFwcC5pbW9iaWxpYXJpYW9saXZlcmN1bmhhLmNvbS5icoIHemlzdC5iZYIMYmx1
ZWNhYmluLmVzghNhc3NldC51YXQucmlpcGF5Lm15gg1ibG9nLmhvdW5pLnRughNt
ZWRpYS5sYXVuZHJhcHAuY29tghpyZXN0YXVyYW50LXNhbmRib3guZ280ZS5hdIIM
d29ydGJhdW0uY29tghJ3d3cuam91ZGFzZmFyaS5kZXaCFXd3dy5wYW5pYWd1YWp1
bGlvLmNvbYIWYXJjaGl2ZS5ncmVlbnN0cmVhbS5pb4IZd3d3LmtldmlubHUtcG9y
dGZvbGlvLmNvbYILZGVlcHdvcmsuYWmCHXd3dy5zaGVyZW1ldGlldnNraWUtb3pl
cmEuY29tghB3d3cud2ViZ2F0ZXMubmV0ghJydW5uaW5ndHJhY2tlci5hcHCCFHd3
dy5jYWRyZXBvcnRpbmcuY29tghF3d3cuYWNlcGF5LmNvbS5icoINbWFwLnNwaWlv
LmNvbYIUaHItc2NvcmUubWlrYWVsZi5jb22CFWF1dGgudnliLXN0YWdlLmV2ZW50
c4IQd3d3LnBsYXl2aW1vLmNvbYIdYWRyZXNzYW5kcmluZy5kZW1vLm1vdmVsbG8u
c2WCDmxlZ2FjeS10ZWNoLmZyggt1aGxhZGlrdS5jeoITcm9iaW4ud2VuZ2xld3Nr
aS5kZYILcWEud2FuZGIuYWmCC3N0YXJ0NGdvLm5sgh5jdXN0b21pemF0aW9uLm1h
cHJpZGVzc2hvcC5jb22CD3d3dy51cmFjdG9yLmNvbYISdGhlY2x1c3RlcmZvbGsu
Y29tghd0ZWpyYXRoLmVzdG9yZS5idXNpbmVzc4IUY29yb25hLnBpbmtiZXRvbi5j
b22CFXZpbmVsaW5rbW9uaXRvcmluZy5ncoIRdG9vbHMuZW50cmVnYXMuY2yCCWRs
bS5yb2Nrc4IPcm9iaW5kb3NzY2hlLmJlghVtYWdpY2thc3MubWl4ZWQucGxhY2WC
F2ZpcmViYXNlLnN0YWdlZW52LmNvLmlughBpZ3AuMTJ0cmFpdHMuY29tggthcHAu
dm9sdC5yb4IWZXhhbXBsZXMuYnJpZGFsLnZpc2lvboIKcGluY2hlZC5pb4ISZmlu
ZHlvdXJzZWF0LmNvLnVrgg53d3cuYnBzbWFydC5haYIeY2F0ZXJpbmdwb3J0YWwu
c3RvbGxzdGVpbWVyLmRlghVteXRoaWNhbC4xMnRyYWl0cy5jb22CFXd3dy5idWtr
eWN1cGNha2VzLmNvbYIXY2hlY2tvdXQuY291Y2hidWNrcy5jb22CCTQ1cy5jby5u
eoIUd3d3LnBvbHlwaG9ueS5zdHVkaW+CG21hZ2ljZnVlbGdhbWVzLjEydHJhaXRz
LmNvbYIVd3d3LnJhbW9uZW5zZXMuY29tLm14ghBkdWFsd2llbGRlbnQuY29tggpj
b3JlZG90Lmlvggt1cnlhLmNvbS5icoINNDJzeXN0ZW1lLmNvbYISd3d3LmRldmlu
Y2lhbnMuY29tgg1hcHAuc3RhaHQuY29tghVyZXRvbW90by4xMnRyYWl0cy5jb22C
D2d1aWFwYXNzLmNvbS5icoINYXBwLmFyZWFseC5pboIPd3d3LmVjb253aHkuY29t
ghF3d3cuNDJzeXN0ZW1lLmNvbYIUamFtY2l0eS4xMnRyYWl0cy5jb22CGGtpZW56
bGVycG9vbHNlcnZpY2VzLmNvbYIRYXBwLmV2ZXJ5c3BhY2UubWWCFXd3dy5jcmF6
eXdvay1tYWluei5kZYIQZmFiaW9ob21lLmNvbS5icoIQd2ViLmluZm9tb2JpLmFw
cIIVd3d3LnBpbmV3b3Jrc2xhYnMuY29tghthZG1pbmVtcGxlb3MuaWFzYWdsb2Jh
bC5jb22CEmxpbmsuc2VqdXRhY2l0YS5pZIIbZHluYW1pYy11YXQubG90dGVmaW5h
bmNlLnZughFhcHAuZmFhbmdwYXRoLmNvbYIPaW1tZXJzaWZpZWQuY29tghZzaW1l
eHBvMjIuc2ltcmFjaW5nLmdwgg53d3cucHVtcC53b3Jrc4IQZGV2LmZsZWV0dGFw
LmNvbYILY2lhc2FsdC5jb22CE2RldjEuY2xhdWRpby1lcC5jb22CGGZhc3Rmb3J3
YXJkYnJvYWRiYW5kLmNvbYIZd3d3LmZsb3JpZGFmcmVzaHN0YXJ0Lm9yZ4IQc3Rh
dHRvZ2V0aGVyLmNvbYIWZGF1dGguaWRlYWx2b3lhbmNlLmNvbYIWd3d3LnNvbmVw
YXIuYmx1ZXZpcy5pb4ITZGV2Mi5jbGF1ZGlvLWVwLmNvbYIMZGNzdW5pdHkuY29t
gg9zaGllbGQudGhuZHIuaW+CD3NoYXJlLmRldmlvdC5kZTAhBgNVHSAEGjAYMAgG
BmeBDAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9j
cmxzLnBraS5nb29nL2d0czFkNC9IZFBWOGNZWXdDVS5jcmwwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA
AY095AaCAAAEAwBHMEUCIQDMVB0G26n5erdzuNpdZhov+4DwWwYhkYZJIoC0mo56
egIgcshNhLGvv9wTX8L/3kbl935OxnUhCp8Nbgmw+EXbuvEAdgBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY095AaxAAAEAwBHMEUCIHL4/aI/sPha
Hn7xvYU/7RqUky79oOuNMWQTsE4KkjUDAiEA7pwsNFrZjiPwbG6JuB42DnqxQ2Su
AX90j+RLL2wn3a0wDQYJKoZIhvcNAQELBQADggEBAGPpBnC7U8wKBBSBhva4ic/w
ziqbHIbfuCheReGSXcocFKWlZyUsAtzii9pzaFBhT97V5KQlmXaUctjiEJZjK67s
rXR4yTUUXrpnhBCxx4AO9NKhqFSCoI2D02skQTk7ctB3R4aZ8OhlFxYBE9EZn0gK
Q8wQvzT1MNUVSo8iFbFBEw4FLiIWHrE7R9LpmOWGdu+f+ljfrDMoRtmKcqBLjWgA
al59vtvD5BCGKGnyv5g9aGO2+raxAmTfig96PamZ6f+UrI+Jf1EwAq/IPy5vzt2Y
Jl4lxHMg5jEAMQMMX/nBuMLvcTfr/u1J0cA/mFDcWWK8t8f8rcjZWchM4xWT/8o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144405255482245350261744952272404761550
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 22:52:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 23:49:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'link.banknorwegian.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/7-iNCkx9iuA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.banknorwegian.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welovejake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.fanrequests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hispanovida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.team.pwapilipinas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macutriviamb.sqwadhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swiss8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimate-champions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellezaadiario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saudeemplanos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.imobiliariaolivercunha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zist.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluecabin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset.uat.riipay.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.houni.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.laundrapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant-sandbox.go4e.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wortbaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joudasfari.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paniaguajulio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.greenstream.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevinlu-portfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepwork.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheremetievskie-ozera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webgates.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runningtracker.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cadreporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acepay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.spiio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr-score.mikaelf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.vyb-stage.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playvimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adressandring.demo.movello.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy-tech.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhladiku.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robin.wenglewski.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.wandb.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start4go.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customization.mapridesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclusterfolk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tejrath.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corona.pinkbeton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinelinkmonitoring.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.entregas.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlm.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robindossche.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magickass.mixed.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.stageenv.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igp.12traits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.volt.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examples.bridal.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinched.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findyourseat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpsmart.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cateringportal.stollsteimer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mythical.12traits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bukkycupcakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.couchbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '45s.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polyphony.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicfuelgames.12traits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramonenses.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dualwieldent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coredot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urya.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '42systeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devincians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retomoto.12traits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiapass.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.arealx.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econwhy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.42systeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamcity.12traits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kienzlerpoolservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.everyspace.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crazywok-mainz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabiohome.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.infomobi.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pineworkslabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminempleos.iasaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.sejutacita.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic-uat.lottefinance.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.faangpath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simexpo22.simracing.gp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pump.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.fleettap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciasalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.claudio-ep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastforwardbroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floridafreshstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stattogether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dauth.idealvoyance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonepar.bluevis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.claudio-ep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcsunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shield.thndr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.deviot.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/HdPV8cYYwCU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d3de406820000040300473045022100cc541d06dba9f97ab773b8da5d661a2ffb80f05b06219186492280b49a8e7a7a022072c84d84b1afbfdc135fc2ffde46e5f77e4ec675210a9f0d6e09b0f845dbbaf100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d3de406b10000040300473045022072f8fda23fb0f85a1e7ef1bd853fed1a94932efda0eb8d316413b04e0a923503022100ee9c2c345ad98e23f06c6e89b81e360e7ab14364ae017f748fe44b2f6c27ddad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0063e90670bb53cc0a04148186f6b889cff0ce2a9b1c86dfb8285e45e1925dca1c14a5a567252c02dce28bda736850614fded5e4a42599769472d8e21096632baeecad7478c935145eba678410b1c7800ef4d2a1a85482a08d83d36b2441393b72d077478699f0e86517160113d1199f480a43cc10bf34f530d5154a8f2215b141130e052e22161eb13b47d2e998e58676ef9ffa58dfac332846d98a72a04b8d68006a5e7dbedbc3e410862869f2bf983d6863b6fab6b10264df8a0f7a3da999e9ff94ac8f897f513002afc83f2e6fcedd98265e25c47320e6310031030c5ff9c1b8c2ef7137ebfeed49d1c03f9850dc5962bcb7c7fcadc8d959c84ce31593ffca