spatialytx.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 34:96:0b:e1:13:65:ed:50:10:a3:6a:29:cb:09:76:c8 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spatialytx.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:96:0b:e1:13:65:ed:50:10:a3:6a:29:cb:09:76:c8
Serial Number (int): 69898941248441492785309682059753125576
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 01:14:b5:a4:38:84:34:20:bb:58:c6:d4:7b:de:1c:f9:e9:c8:42:67
Fingerprint (sha256): e6:af:8a:06:a5:61:cc:35:a4:f9:00:fe:ff:4d:ae:11:ee:2f:43:f7:0e:12:2c:33:ba:59:0e:d6:94:64:7f:73

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/0J9iET7ReTo
CRL Distribution Point: http://crls.pki.goog/gts1d4/X2Koz--kjzI.crl

Check the revocation status for certificate spatialytx.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spatialytx.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spatialytx.com
everypaper.de
accounts.dev.roadbotics.com
boost.thedbmethod.com
s.storellet.com
calendar.newtonhq.com
www.isthekingdead.co.uk
theway.works
auth.admin.cachefly.com
firebase.basket.jo
bilona-ghee.in
www.securibly.app
tennisable.co.uk
www.dyonc.com
ucf.sowl.to
nikanorov.mobi
www.poker501.com
join.sailties.net
www.telefonsex.com
www.memyplanet.org
www.lxd.no
widget.yoreferee.com
lyfordcay.xtend.team
www.haleyjackman.com
www.illuminails.com
mobile-device-management.limaxlock.com
www.radiacionesionizantes.com
app-dev.sandboxx.us
app.balley.io
blog.alfred.com.mt
app.findfilo.com
www.thedeiscorecard.com
www.hodofy.com
www.getcoral.io
ghidetti.com
www.mobile-device-management.limaxlock.com
lottobet.online
www.macht-sprache.de
www.donaagua.org
rroms.bocs.work
arcade.matthewgraham.me
www.patelvandan.com
vnext.healthspaces.io
questions.vikasbanavara.com
www.lmm.withorca.com
www.madcapsolutions.com
alarmsvj.cz
campusdigital.uanl.mx
www.quizandbrainteaser.com
social.abegs.org
conexize.net
www.azt.me
www.landingmu.com
geroper.eparks.mobi
acsoftware.no
poap.nftinsights.io
pensiuneadaciastraja.ro
www.twuhuolong.com
myaccountcsrqa.elkenergy.com
ametory.id
crius.ceosconnect.com.br
www.shop.el-manchi.at
inovahplast.com.br
www.loongcrown.net
shipmystuff.co.za
www.solvi.co.il
www.shakadefi.io
www.mototrials.lv
microfilm.eu
www.psicologamichelerocha.com.br
admin.fcard.com.br
www.aivlespace.com
www.miuco.jp
s-pro.monsuivilogement.fr
www.yoshiki-omata.com
share.mvp.small-deals.com
w.futbol.comounexperto.com
rexroth.liveevent.co.za
test.play.touchbud.com
link.celebhere.com
www.tyemnyak.cz
wieiswaar.q42.com
app.beanfare.ovh
www.datkanikzelf.nl
www.watchparty.im
www.aidia.it
sandbox.buyon.lk
app.vashmkd.ru
itu.scicom.io
runway.itss.edu.vn
discover.chester.ac.uk
cakemehome.net
losdogosdelah.com
majdielfelah.co.uk
joy-360-spins-cert.3dcloud.io
numbus.app
integracao.bluve.com.br
nextpic.app
www.michubet.com
liquidgov.org

Other certificates including the domain name spatialytx.com

(limited to 100 certificates)
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
property.spatialytx.com
firebaseapp.com
www.spatialytx.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
utint.com.au
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.aisinfo.org
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
bento.dataauchan.fr
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
market.manybuild.app
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com

Certificate

The complete raw certificate details for spatialytx.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINTDCCDDSgAwIBAgIQNJYL4RNl7VAQo2opywl2yDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzA5MjQxNDEzMjVaFw0yMzEyMjMx
NTEwNTdaMBkxFzAVBgNVBAMTDnNwYXRpYWx5dHguY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2iQ8Ij3zzELdn6D6ExCQIk
UHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvXDt1Kxj1ANOKFWDkWWviC
9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5OHXNynFGBtfv0aHfPm371
Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5APQ/Fzwnwjvpt4aPJHVPa
CF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyIDa8C5x+cwh8P2ohtDc5Yv
Lg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVUVQIDAQABo4IKYTCCCl0w
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFCFFwjusTCzra0+158niw2rRvbPCMB8GA1UdIwQYMBaAFCXi
GA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp
aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvMEo5aUVUN1JlVG8wMQYIKwYB
BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5kZXIwgggE
BgNVHREEggf7MIIH94IOc3BhdGlhbHl0eC5jb22CDWV2ZXJ5cGFwZXIuZGWCG2Fj
Y291bnRzLmRldi5yb2FkYm90aWNzLmNvbYIVYm9vc3QudGhlZGJtZXRob2QuY29t
gg9zLnN0b3JlbGxldC5jb22CFWNhbGVuZGFyLm5ld3RvbmhxLmNvbYIXd3d3Lmlz
dGhla2luZ2RlYWQuY28udWuCDHRoZXdheS53b3Jrc4IXYXV0aC5hZG1pbi5jYWNo
ZWZseS5jb22CEmZpcmViYXNlLmJhc2tldC5qb4IOYmlsb25hLWdoZWUuaW6CEXd3
dy5zZWN1cmlibHkuYXBwghB0ZW5uaXNhYmxlLmNvLnVrgg13d3cuZHlvbmMuY29t
ggt1Y2Yuc293bC50b4IObmlrYW5vcm92Lm1vYmmCEHd3dy5wb2tlcjUwMS5jb22C
EWpvaW4uc2FpbHRpZXMubmV0ghJ3d3cudGVsZWZvbnNleC5jb22CEnd3dy5tZW15
cGxhbmV0Lm9yZ4IKd3d3Lmx4ZC5ub4IUd2lkZ2V0LnlvcmVmZXJlZS5jb22CFGx5
Zm9yZGNheS54dGVuZC50ZWFtghR3d3cuaGFsZXlqYWNrbWFuLmNvbYITd3d3Lmls
bHVtaW5haWxzLmNvbYImbW9iaWxlLWRldmljZS1tYW5hZ2VtZW50LmxpbWF4bG9j
ay5jb22CHXd3dy5yYWRpYWNpb25lc2lvbml6YW50ZXMuY29tghNhcHAtZGV2LnNh
bmRib3h4LnVzgg1hcHAuYmFsbGV5LmlvghJibG9nLmFsZnJlZC5jb20ubXSCEGFw
cC5maW5kZmlsby5jb22CF3d3dy50aGVkZWlzY29yZWNhcmQuY29tgg53d3cuaG9k
b2Z5LmNvbYIPd3d3LmdldGNvcmFsLmlvggxnaGlkZXR0aS5jb22CKnd3dy5tb2Jp
bGUtZGV2aWNlLW1hbmFnZW1lbnQubGltYXhsb2NrLmNvbYIPbG90dG9iZXQub25s
aW5lghR3d3cubWFjaHQtc3ByYWNoZS5kZYIQd3d3LmRvbmFhZ3VhLm9yZ4IPcnJv
bXMuYm9jcy53b3JrghdhcmNhZGUubWF0dGhld2dyYWhhbS5tZYITd3d3LnBhdGVs
dmFuZGFuLmNvbYIVdm5leHQuaGVhbHRoc3BhY2VzLmlvghtxdWVzdGlvbnMudmlr
YXNiYW5hdmFyYS5jb22CFHd3dy5sbW0ud2l0aG9yY2EuY29tghd3d3cubWFkY2Fw
c29sdXRpb25zLmNvbYILYWxhcm1zdmouY3qCFWNhbXB1c2RpZ2l0YWwudWFubC5t
eIIad3d3LnF1aXphbmRicmFpbnRlYXNlci5jb22CEHNvY2lhbC5hYmVncy5vcmeC
DGNvbmV4aXplLm5ldIIKd3d3LmF6dC5tZYIRd3d3LmxhbmRpbmdtdS5jb22CE2dl
cm9wZXIuZXBhcmtzLm1vYmmCDWFjc29mdHdhcmUubm+CE3BvYXAubmZ0aW5zaWdo
dHMuaW+CF3BlbnNpdW5lYWRhY2lhc3RyYWphLnJvghJ3d3cudHd1aHVvbG9uZy5j
b22CHG15YWNjb3VudGNzcnFhLmVsa2VuZXJneS5jb22CCmFtZXRvcnkuaWSCGGNy
aXVzLmNlb3Njb25uZWN0LmNvbS5icoIVd3d3LnNob3AuZWwtbWFuY2hpLmF0ghJp
bm92YWhwbGFzdC5jb20uYnKCEnd3dy5sb29uZ2Nyb3duLm5ldIIRc2hpcG15c3R1
ZmYuY28uemGCD3d3dy5zb2x2aS5jby5pbIIQd3d3LnNoYWthZGVmaS5pb4IRd3d3
Lm1vdG90cmlhbHMubHaCDG1pY3JvZmlsbS5ldYIgd3d3LnBzaWNvbG9nYW1pY2hl
bGVyb2NoYS5jb20uYnKCEmFkbWluLmZjYXJkLmNvbS5icoISd3d3LmFpdmxlc3Bh
Y2UuY29tggx3d3cubWl1Y28uanCCGXMtcHJvLm1vbnN1aXZpbG9nZW1lbnQuZnKC
FXd3dy55b3NoaWtpLW9tYXRhLmNvbYIZc2hhcmUubXZwLnNtYWxsLWRlYWxzLmNv
bYIady5mdXRib2wuY29tb3VuZXhwZXJ0by5jb22CF3JleHJvdGgubGl2ZWV2ZW50
LmNvLnphghZ0ZXN0LnBsYXkudG91Y2hidWQuY29tghJsaW5rLmNlbGViaGVyZS5j
b22CD3d3dy50eWVtbnlhay5jeoIRd2llaXN3YWFyLnE0Mi5jb22CEGFwcC5iZWFu
ZmFyZS5vdmiCE3d3dy5kYXRrYW5pa3plbGYubmyCEXd3dy53YXRjaHBhcnR5Lmlt
ggx3d3cuYWlkaWEuaXSCEHNhbmRib3guYnV5b24ubGuCDmFwcC52YXNobWtkLnJ1
gg1pdHUuc2NpY29tLmlvghJydW53YXkuaXRzcy5lZHUudm6CFmRpc2NvdmVyLmNo
ZXN0ZXIuYWMudWuCDmNha2VtZWhvbWUubmV0ghFsb3Nkb2dvc2RlbGFoLmNvbYIS
bWFqZGllbGZlbGFoLmNvLnVrgh1qb3ktMzYwLXNwaW5zLWNlcnQuM2RjbG91ZC5p
b4IKbnVtYnVzLmFwcIIXaW50ZWdyYWNhby5ibHV2ZS5jb20uYnKCC25leHRwaWMu
YXBwghB3d3cubWljaHViZXQuY29tgg1saXF1aWRnb3Yub3JnMCEGA1UdIAQaMBgw
CAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDov
L2NybHMucGtpLmdvb2cvZ3RzMWQ0L1gyS296LS1ranpJLmNybDCCAQMGCisGAQQB
1nkCBAIEgfQEgfEA7wB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutS
AAABisfArkMAAAQDAEYwRAIgLYCq7GI48QaRb189TNA4dmMY0ROAkyxs6UgubUP7
joECIF86D4RM5akLbTKfw+/v2NL2JHJWZvzpBK0+qlXEF1tPAHYArfe++nz/EMiL
nT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGKx8CuNgAABAMARzBFAiEAsvMVgFh5
H6+RW9G8+4P3H/ZpRllYEGEUP1e9wM6kSRQCIFfInfYRMckf/OQwHv1vRL593m0x
utuggQ1xBAAaR8XpMA0GCSqGSIb3DQEBCwUAA4IBAQA/AVNx0WePMgpDNQNisbbg
dBUsWinO+m1+SEB/to+KCv2zsOQ6wq78Fe0L34ImwB7QFB3+YD6+mwqxSXhMkhXq
QCgAB+93L1BEaTuexr2CLVeZpdmjlh0WSgm60sflVgM7mxhI/XeKiKSveDGx+cdO
+DTAunjRN8Rotg5Cpdar+5TmEXl8UaxtX9qj+Z2PPYbT3FsIgrx2Un+ukRkVQS5y
r4v46+ED5SeDC6wg3UbsVF1L1EM9ITBO81S8Doj5NrVjwFSl3sUVoWgChVpU3Xvk
j2j7Y6jJjqil5evIhxaEQnr9TCrW5hCY7vmCLv23gkTrpzUuB3AfhBW2mdGtbt0D
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69898941248441492785309682059753125576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 14:13:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 15:10:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spatialytx.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/0J9iET7ReTo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2043 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spatialytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everypaper.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.dev.roadbotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boost.thedbmethod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.storellet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.newtonhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isthekingdead.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theway.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.admin.cachefly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.basket.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilona-ghee.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securibly.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennisable.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyonc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucf.sowl.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikanorov.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poker501.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.sailties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telefonsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memyplanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lxd.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.yoreferee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyfordcay.xtend.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haleyjackman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illuminails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-device-management.limaxlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiacionesionizantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev.sandboxx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.balley.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.alfred.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.findfilo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedeiscorecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hodofy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getcoral.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghidetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobile-device-management.limaxlock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottobet.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macht-sprache.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donaagua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rroms.bocs.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcade.matthewgraham.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patelvandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnext.healthspaces.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questions.vikasbanavara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmm.withorca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madcapsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alarmsvj.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusdigital.uanl.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quizandbrainteaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.abegs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conexize.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azt.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landingmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geroper.eparks.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsoftware.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poap.nftinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensiuneadaciastraja.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twuhuolong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccountcsrqa.elkenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ametory.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crius.ceosconnect.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.el-manchi.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inovahplast.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loongcrown.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipmystuff.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solvi.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shakadefi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mototrials.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microfilm.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psicologamichelerocha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fcard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aivlespace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miuco.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-pro.monsuivilogement.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoshiki-omata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.mvp.small-deals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.futbol.comounexperto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexroth.liveevent.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.play.touchbud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.celebhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tyemnyak.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wieiswaar.q42.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.beanfare.ovh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datkanikzelf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watchparty.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aidia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.buyon.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vashmkd.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itu.scicom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runway.itss.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.chester.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cakemehome.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losdogosdelah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majdielfelah.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joy-360-spins-cert.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numbus.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integracao.bluve.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextpic.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michubet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidgov.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/X2Koz--kjzI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac7c0ae43000004030046304402202d80aaec6238f106916f5f3d4cd038766318d11380932c6ce9482e6d43fb8e8102205f3a0f844ce5a90b6d329fc3efefd8d2f624725666fce904ad3eaa55c4175b4f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac7c0ae360000040300473045022100b2f3158058791faf915bd1bcfb83f71ff6694659581061143f57bdc0cea44914022057c89df61131c91ffce4301efd6f44be7dde6d31badba0810d7104001a47c5e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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