www.blessedsteps.org

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 75:99:4f:7f:1d:64:ab:2c:09:7c:a0:fd:d6:87:87:91 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.blessedsteps.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:99:4f:7f:1d:64:ab:2c:09:7c:a0:fd:d6:87:87:91
Serial Number (int): 156315709307623079754234336322685208465
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): f0:3e:5c:79:b2:9c:17:4c:92:6e:62:6c:57:96:d0:ab:e2:14:34:d7
Fingerprint (sha256): e5:f2:81:3f:87:9a:ce:53:87:4a:58:7e:60:b8:a9:d1:9d:21:ac:f3:b5:09:d7:8a:b6:da:0b:7b:ee:7b:c9:ba

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/MR9_4ZHIcII
CRL Distribution Point: http://crls.pki.goog/gts1d4/dsfiNr-mayI.crl

Check the revocation status for certificate www.blessedsteps.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.blessedsteps.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.blessedsteps.org
izwe.ai
bridgechampions.com
consumedbook.com
blog.f4a.com
zendare.app
becalis.com
www.halcondron.net
lg-italia.invue-live.com
kortio.com
giadrealestate.com
devstork.com
zoom2.sues.pl
mussacafe.live
solitaire.berkayuckac.com
auth.somewear.co
sanjayrobot.com
www.publications.adap-2017.nastad.org
www.superswitch.co
www.mmocek.com
brewbook.club
qr-stage.viv-it.co
baltcoda.com
joaquinmartinez.dev
thefaststudio.com
liflip.com
fanicorn.co
test.q-alizer.com
seqrcast.com
staging.admin.storier.fm
feeltonemusic.com
link.abaenglish.com
launcher.ericnahon.net
versesnap.com
jer-dev.com
www.davidstrube.com
int.sbbresale.ch
www.new-red.com.mx
hifinds.com
derbytronics.com
eol-sets.com
www.shermansplanet.com
slared.cl
happening.town
devcamp2020.twogate.com
csw3-medic-xp.casadellasaluteweb.it
rooms.arreya.com
www.skirandochamonix.com
asmarket.in.rs
rocketcapital.ai
oken.app
www.4im.business
www.pixelweb.app
arka.suryawan.my.id
skadisoft.com
demo-mb.tk
www.bridgechampions.com
candiceai.co.za
www.joshuagaming.com
zonguldakkarapinar.zeplinx.com
solo.archsolver.com
pe.moons.solutions
cms.futureyou.world
paulkooijman.nl
convida.app
multistore-pastahub.nextorder.com
acertei.app
www.mindmint.eu
card.linkcard.app
checkout.mymoons.pe
mnakagawa.datateam.one
www.harunmese.dev
security.nautilusdefense.com
bvey.xyz
www.support.quike.com.br
www.tanooki.io
www.reparatuapplecol.com
www.tbadell.com
www.shooglebox.com
www.acertei.app
bespokeai.de
app.folio-constructions.re
schofield.se
dev.business.addressya.com
www.lettrly.in
softservedweb.com
www.aserstein.com
lawnplan.co.uk
progdojo.link
tapp.world
mmig.site
faucet.cointanda.com
amin.com.br
j0ecool.com
www.drewtadams.com
new-red.com.mx
ivanamudron.com
microcenter.onsite.invue-live.com
ofez.estusengineering.com
www.oralify.com

Other certificates including the domain name blessedsteps.org

(limited to 100 certificates)
www.devicedb.app
clasificados.elsoldecordoba.com.mx
www.freetext.world
dev-bluescope.bluewhale.kr
blessedsteps.org
www.blessedsteps.org
iterations.fr
test.micervesa.mx
blessedsteps.org
develop.gobertha.com
cdn.pillarbees.com
softblockrefinery.com
www.cropcaddy.ca
www.unemplacement.fr
synxite.net
clockin.gq
flywheel.autos
solo.archsolver.com
www.blessedsteps.org
www.cropcaddy.ca
directin.afrah114.co.za
www.frastas.com
betasaur.com
www.agnilab.com
chum.boo
chat.reachinfopoints.com
cocobuk.com
beef-dev.ecotrace.solutions
stage-admin.alfred.mt
www.publications.adap-2017.nastad.org
blog.manuscriptsapp.com
www.blessedsteps.org
dev.cloudrecipes.app
www.chen.enterprises
acihold.com
dev.skateresults.app
www.corporis.app
solo.archsolver.com

Certificate

The complete raw certificate details for www.blessedsteps.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156315709307623079754234336322685208465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 08:49:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 09:47:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.blessedsteps.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/MR9_4ZHIcII'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessedsteps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izwe.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgechampions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumedbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.f4a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zendare.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becalis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halcondron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lg-italia.invue-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kortio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giadrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devstork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoom2.sues.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mussacafe.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solitaire.berkayuckac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.somewear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjayrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publications.adap-2017.nastad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superswitch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmocek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewbook.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr-stage.viv-it.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltcoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joaquinmartinez.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefaststudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liflip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanicorn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.q-alizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seqrcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.admin.storier.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeltonemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.abaenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launcher.ericnahon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versesnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jer-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davidstrube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.sbbresale.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.new-red.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hifinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derbytronics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eol-sets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shermansplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slared.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happening.town'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devcamp2020.twogate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csw3-medic-xp.casadellasaluteweb.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rooms.arreya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skirandochamonix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmarket.in.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketcapital.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oken.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4im.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pixelweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arka.suryawan.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skadisoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-mb.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgechampions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candiceai.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joshuagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonguldakkarapinar.zeplinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solo.archsolver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pe.moons.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.futureyou.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulkooijman.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convida.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multistore-pastahub.nextorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acertei.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindmint.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card.linkcard.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.mymoons.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnakagawa.datateam.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harunmese.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.nautilusdefense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvey.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.support.quike.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tanooki.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reparatuapplecol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbadell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shooglebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acertei.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bespokeai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.folio-constructions.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schofield.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business.addressya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lettrly.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softservedweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aserstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawnplan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progdojo.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapp.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmig.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faucet.cointanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'j0ecool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drewtadams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-red.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivanamudron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microcenter.onsite.invue-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofez.estusengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/dsfiNr-mayI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac17211f40000040300473045022078011f676550a5aaa98ccaa82d2227251470ef9c2ec5ad7e77fcc5b78023443c022100b9f45826aef0792c8b088de3ec48fc6829da72de28f0d5266de2726973cd24ea007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ac17211bc000004030047304502202662aeefd348759936ba3f1525d11c46213a122b4f9096ee7c56094779adf5c0022100949fabdd9fd166170c8a298118b7c77e3c693337e533db9018c82e8eede22533
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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