www1.orinoqo.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 60:55:bf:2b:8e:90:ee:7f:0a:a3:b2:e8:6a:1c:c7:0f was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www1.orinoqo.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 60:55:bf:2b:8e:90:ee:7f:0a:a3:b2:e8:6a:1c:c7:0f
Serial Number (int): 128051110219494752708989640191898339087
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 8e:da:4c:90:18:41:cd:f6:8e:42:53:b8:1b:31:14:dc:3b:83:31:88
Fingerprint (sha256): e5:b1:19:f7:12:65:cf:9d:68:f1:fa:85:e6:fa:7c:92:2a:9e:13:a5:d1:a2:f6:b5:b1:99:2b:7f:5e:fc:d1:1e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/eTn9J6-M3fg
CRL Distribution Point: http://crls.pki.goog/gts1d4/xVMz_ej0Qc4.crl

Check the revocation status for certificate www1.orinoqo.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www1.orinoqo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www1.orinoqo.com
www.mapx.se
app.expac.co.za
www.simularirs.pt
www.habitacoimobiliaria.com.br
weventy.com
app.universalvoice.nl
www.some-on.com
recycled.art.br
www.estemed.co.rs
khafterparty.com.tw
play.scoorly.se
newagingplatform.co.kr
renew.itoshi-hada.me
app-link.datari.eu
signin.qa.nova.labs.rle.de
anuga.thirdworks.co.kr
vote.dayone.com.hk
api.mindburp.se
lab.stock.greenvine.co.ke
www.siuv.ch
13cabs-traveller-test1.fleet-dev.com
www.mitchellcemetery.org
daza.com.co
registro.qrmenu.cl
artonline.beauty
whee.joyridecity.bike
13cabs-traveller-test2.fleet-dev.com
13cabs-business-test2.fleet-dev.com
planner.harkness-screens.com
13cabs-business-test1.fleet-dev.com
www.ajar.villas
imoveisavenda.com
www.malversum.com
l.ketolist.org
join.atfirstsite.app
sentinel.ng
www.thrivnerplanner.com
tundra.admin.randev.com.ar
www.abdulrashid.dev
tuulahuuskonen.fi
www.bluelab.dev
go.dreams.tv
secret.examen.coningles.com
yasirfayrooz.com
alharamain.academy
quemind.com
pandemic-media-space.com
www.cursosdehistoriaag.com
app-ester.liquidityx.com
plating.co.kr
www.cookieless.coffee
ustredna.wflow.padua.cz
www.sachavieuxroy.com
dev.medpharmservices.com
www.akut-group.com
www.food-wise.eu
app.focusokr.com
dashboard.lockn.in
app.linkm.in
stockone.com
app.valentimimoveis.com
www.clickstory.io
www.ceev.io
locaite.caite.io
eucaly.pt
www.jalandharbraces.com
parceirocaixa.com.br
4leaf.co.in
pacwest.equiem.mobi
nl.zone.quickcommerce.org
www.greenmini.nl
paiement.ghs.fr
accounts.footloose.io
suvidhamart.co.in
mo.gozapon.net
www.localizaimoveisbahia.com.br
nhomducmanhloi.vn
prism-mongolia.org
formagio.oz-tms.com
anmeldung.jura-freiburg.eu
2022bandagevents.parallel.live
www.realmoflearning.org
productscience.co.uk
quiksh.dev.hetacode.pl
maryonolaw.com
www.moneynote.vn
cloudlinks.octalframes.com
links.prod.boop.pet
hassa.zeplinx.com
iwatemori.com
practitioners.somersetsurvivors.co.uk
www.gasolinera-alq.com
solvethegame.co.uk
paudelnabin.com.np
kingsconstructions.com.au
sadaath.org
www.achetonsvotremoto.com
meuvizinho.me
www.workforce.begaone.com

Other certificates including the domain name orinoqo.com

(limited to 100 certificates)
feed.marksmen.nl
www.orinoqo.com
vote.dayone.com.hk
stevebottelbergs.be
transport.keepneye.com
prod-pay-www.kiswe.com
www.orinoqo.com
qa.southeastne.mylnk.app
qa.southeastne.mylnk.app
feed.marksmen.nl
crustie.app
www.pravinncabs.in
division.staffgenix.com
portal.finanzasilimitadas.biz
app.storagepug.com
paiement.ghs.fr
movies.shaungeddes.com
www.snugg.me
eurobet.co.rs
paniklab.com
www1.orinoqo.com
www.westthird.com
www.orinoqo.com
kinlom.com
nsawinski.ru
scd-uat.order.place

Certificate

The complete raw certificate details for www1.orinoqo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128051110219494752708989640191898339087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 15:56:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 16:54:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www1.orinoqo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/eTn9J6-M3fg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.orinoqo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapx.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.expac.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simularirs.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.habitacoimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weventy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.universalvoice.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.some-on.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recycled.art.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estemed.co.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khafterparty.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.scoorly.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newagingplatform.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renew.itoshi-hada.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-link.datari.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.qa.nova.labs.rle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anuga.thirdworks.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.dayone.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mindburp.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.stock.greenvine.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siuv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '13cabs-traveller-test1.fleet-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitchellcemetery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daza.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registro.qrmenu.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artonline.beauty'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whee.joyridecity.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '13cabs-traveller-test2.fleet-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '13cabs-business-test2.fleet-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planner.harkness-screens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '13cabs-business-test1.fleet-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajar.villas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoveisavenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malversum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.ketolist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.atfirstsite.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentinel.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrivnerplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tundra.admin.randev.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abdulrashid.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuulahuuskonen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluelab.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.dreams.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secret.examen.coningles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yasirfayrooz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alharamain.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quemind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandemic-media-space.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cursosdehistoriaag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-ester.liquidityx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plating.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookieless.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustredna.wflow.padua.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sachavieuxroy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.medpharmservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akut-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.food-wise.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.focusokr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.lockn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.linkm.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.valentimimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clickstory.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceev.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locaite.caite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eucaly.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jalandharbraces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceirocaixa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4leaf.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacwest.equiem.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.zone.quickcommerce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenmini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paiement.ghs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.footloose.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suvidhamart.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.gozapon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localizaimoveisbahia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhomducmanhloi.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prism-mongolia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formagio.oz-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anmeldung.jura-freiburg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2022bandagevents.parallel.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmoflearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productscience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiksh.dev.hetacode.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maryonolaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneynote.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudlinks.octalframes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.prod.boop.pet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hassa.zeplinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwatemori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practitioners.somersetsurvivors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gasolinera-alq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solvethegame.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paudelnabin.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsconstructions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadaath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.achetonsvotremoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuvizinho.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workforce.begaone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/xVMz_ej0Qc4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aec2bbc7f000004030048304602210081318e7ce8666ccb8d5f1a40ee90890d2b3d6671a59d8825581076ed6df2fc3d0221008b3cd1249312337167f716f10b5d53e03eda4009e788561c01f7e2316f3e26870077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018aec2bbc5c00000403004830460221009b441a4b5f8093f1a45ce62467c7581134abb0c188b04d1703c5e0876515ccca022100f1a37e13225994d6463ad430b4b80c6526090cd6930e3dced9569763d21b842e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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