spacegym.io

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 22:f8:1c:25:a6:3c:fd:0c:10:57:4d:b4:e5:f0:36:7f was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spacegym.io

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 22:f8:1c:25:a6:3c:fd:0c:10:57:4d:b4:e5:f0:36:7f
Serial Number (int): 46482012367962934365936113953818031743
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): be:09:bb:e4:2d:fe:66:11:01:63:91:e2:47:9d:69:72:7e:90:55:6e
Fingerprint (sha256): e7:a2:58:c8:ec:94:7d:49:a2:12:70:d9:17:0e:ce:b2:fd:f1:b0:ed:26:4c:e0:a9:c6:e7:0d:84:40:4f:15:7d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/CIFGQwVprjI
CRL Distribution Point: http://crls.pki.goog/gts1d4/86yeALfJiMg.crl

Check the revocation status for certificate spacegym.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spacegym.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spacegym.io
heyjoy.io
cafidata.com
syncspace.us
www.sozy.tw
www.digitalsynapsis.com.br
nibraslibrary.online
formulario-web-cambios-y-devoluciones-dev.cc-irdigital.pe
halsite.xyz
www.andii.jp
join.castroapp.com
clubpropagas.com
baratodavez.com
dashboard.avastars.io
tfipunechennai.trustin.app
www.quiz.party
doctor.albert.health
aitutor-sei-ckt.cloudpssolutions.com
www.thesecrets.app
app.fruggr.io
kantuni.com
app.envoie.email
api.mymascot.io
app.saladproject.org
www.visitacantada.manzanavirtual.net
cogni-dev-painel.cogniapp.com
foveatedev.com
www.dontwalkpast.com
ganeshtapodham.com
www.foremostnutrition.com
test.dailyhero.me
www.defiantware.com
academic.mixidea.org
memphistigerscamps.com
getfamhotel.menuaddis.com
empowerbusinessschool.com
docomma.com
mcdelivery.mcdonalds.nl
www.incomepercentiles.com
safeapp.walshasesores.com.ar
cogni-dev.cogniapp.com
www.guiquental.com.br
link.autopasteapp.com
fnbce.falkor.io
www.cacorporacion.com
www.clubpropagas.com
app.oriosbyspie.com
pita.werner.codes
muagire.com
trail.mimodian.com
www.etherpixels.co
applink.flightloop.app
localesdesde25.metroarea.com.co
galaxy.mosaicapp.com
brightland.melzo.guru
v1.hiitclock.com
phonim.co.jp
www.michaelcamerato.com
www.fondieki.com
my.hiya.care
www.moshiberica.es
www.empowerbusinessschool.com
ie-buster.qranoko.jp
shadroi.com
app.7gens.ru
www.selectionsoftware.com
oposicionesetgoaconsumo.com
e85boost.fr
www.voice-of-luxury.com
dfs-sectional-config-cert.3dcloud.io
partnerstaking.com
admin.nyby.com
www.freundundreiter.com
www.munice-hluboka.cz
qa.finnovex.com
experimental.workona.com
superinfo.au
cadastro.taniafruchi.com.br
inprose.info
guelphinnovationdistrict.engage.sasaki.com
ordernow.lakesidepho.net
doser.app
moca-ny.org
cancerresearchride.org
business-app.composelector.eu
no-order.shannon.fail
mscconnect.nl
0b.sk
ref.rewardy.io
wayawaya.omnistride.net
jgf.app
cast-receiver.cure.fit
www.holoappearance.com
edgar-dias.eu
grandchips.in
sasandha.in
notarug.xyz
basecamp.marcio.digital
freshleaf.garden
link.jadipolri.id

Other certificates including the domain name spacegym.io

(limited to 100 certificates)
testing.link.orbiapp.io
redacaoomega.com.br
service.dhanvarsha.co
dev.arcs.app
spacegym.io
www.anonymousrequest.com
yeah.healthcare
api.delirec.com
consumer.staging.fruitmania.co
brewerstage.com
smolcraftfest.ru
sunnykakar.com
prod-retail.mattressdisposalplus.com
hsalvador2.rflex.io
www.utilsens.com
cdn.dora.games235.com
yeah.healthcare
oa-labs.io
rionepugilli.net
mistresstory.com
honzasima.cz
www.munice-hluboka.cz
flscarend.nl
rxfiresvelte.ajonp.com
www.redacaoomega.com.br
kafajayagading.edu.my
spacegym.io
club.joinfireside.io

Certificate

The complete raw certificate details for spacegym.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 46482012367962934365936113953818031743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 01:12:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 02:09:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spacegym.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/CIFGQwVprjI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacegym.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyjoy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafidata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncspace.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sozy.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalsynapsis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nibraslibrary.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulario-web-cambios-y-devoluciones-dev.cc-irdigital.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halsite.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andii.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.castroapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubpropagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baratodavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.avastars.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfipunechennai.trustin.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quiz.party'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctor.albert.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aitutor-sei-ckt.cloudpssolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecrets.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.fruggr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kantuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.envoie.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mymascot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.saladproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitacantada.manzanavirtual.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogni-dev-painel.cogniapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foveatedev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dontwalkpast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganeshtapodham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foremostnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.dailyhero.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defiantware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academic.mixidea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memphistigerscamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getfamhotel.menuaddis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empowerbusinessschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docomma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdelivery.mcdonalds.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.incomepercentiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeapp.walshasesores.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogni-dev.cogniapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiquental.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.autopasteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnbce.falkor.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cacorporacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubpropagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.oriosbyspie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pita.werner.codes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muagire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trail.mimodian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etherpixels.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink.flightloop.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localesdesde25.metroarea.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaxy.mosaicapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightland.melzo.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.hiitclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonim.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelcamerato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondieki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hiya.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moshiberica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.empowerbusinessschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie-buster.qranoko.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shadroi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.7gens.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectionsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oposicionesetgoaconsumo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e85boost.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voice-of-luxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfs-sectional-config-cert.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerstaking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nyby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freundundreiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.munice-hluboka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.finnovex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experimental.workona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superinfo.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadastro.taniafruchi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inprose.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guelphinnovationdistrict.engage.sasaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordernow.lakesidepho.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doser.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moca-ny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancerresearchride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-app.composelector.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'no-order.shannon.fail'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscconnect.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0b.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ref.rewardy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayawaya.omnistride.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jgf.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cast-receiver.cure.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holoappearance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgar-dias.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandchips.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasandha.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notarug.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basecamp.marcio.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshleaf.garden'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.jadipolri.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/86yeALfJiMg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018efe6d1c7d00000403004730450220744bc11bad9519ec07bd63c880bb093268615da2b90cacb1ea5c221f406ecc4002210098f4fd282e2736deca09e143b67c50d8d0a52f104dc5201c328d2fc903dbe26d007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018efe6d1c8700000403004730450220732efe16248abfd9fc513bf7d2a841841d1b446ab5a7669fa0a4b11ffaa22512022100b7b99c86fee4e28fd5721513415e2aad8842cdd3164d1902b47de0ca3739d58b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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