legioncaster.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 36:51:45:21:90:f5:9d:49:0a:6f:ae:30:55:57:a6:1f was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=legioncaster.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 36:51:45:21:90:f5:9d:49:0a:6f:ae:30:55:57:a6:1f
Serial Number (int): 72200289963581564109680357549769467423
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 56:eb:9d:0f:f3:24:00:be:38:da:8c:26:02:1e:de:d6:c1:00:77:1e
Fingerprint (sha256): e7:a3:fe:7f:92:2d:8a:62:1a:61:08:48:73:7b:73:90:b4:dd:6f:cc:62:7c:3b:bb:ba:af:ff:df:ec:85:43:e4

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/szWky8DboMM
CRL Distribution Point: http://crls.pki.goog/gts1d4/KS3or9pF2-o.crl

Check the revocation status for certificate legioncaster.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legioncaster.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legioncaster.com
gateinteriors.ie
halalbrothers.kr
www.bsmithcode.com
dev.app.cddcheck.online
wayfinders.trainiapp.io
mahitechllc.com
arizehealthcare.com
www.igtb.app
www.bridgeharris.com
www.start.biltapp.com
tutto.marco-franzen.de
preprod-trust-webapp.knolskape.com
miakapp.com
g-auto-srl.it
gunacorporation.com
spa.home-finder.kziete.cl
private.dynamiclanguages.org
blog.ideodora.info
www.simterest.co.uk
www.burghof.it
rafranz.com
perafoinc.com
malatras.com
auth.my-qrcode-gen.com
www.printxafrica.com
printxafrica.com
kidsupsoroban.vn
app.mensetsuyoyaku.online
featuredev.coach.epf.bespaartenergie.net
play.mukiz.com
www.br.masterbaserelay.com
romada-digital.com
staging.pezetter.com
nathandrichard.com
admin.concursos360.com
visadirect.visa.com
www.killer-id.netkiller.com
yarukeeper.com
app.oneweekleap.com
netcomproperty.com
sw-pwa.tech-scheduler.com
www.mvduos.com
blacklist.illuday.com
norberto.fenyopeti.hu
partners.draftium.com
nearestschool.com
staging-apply.money-phone.com
ogongsyd.posnet.com.au
firestarter.1of500.de
nababkhan.com
myredigo.com
www.qiu-y.com
peklakengineering.com
ruthzota.com
www.nik-sytnik.com
www.kylebyte.com
tweerous.dev
citygames.dev
eltern.simpleclub.com
kitchensink.console.appabrik.jp
futuremindsfund.org
www.centuryx.dev
test.visualtourbuilder.com
whiskeyrichardcle.com
vengawebdesigns.com
crkanela-admin.segurdiez.com
dev.inkdrop.ai
www.parx.city
www.rehobothimmigration.com
lexi.page
www.kernelrobotics.in
agent.mydigitalpayment.com
aon-explorer.affinity.do
tangiblock.io
sales.wtf.menu
martakoch.com
scarborough.me
equippers-si.co.nz
dieselwynwood.me
sazareishi.hscservice.jp
app.ymewhatnow.co.uk
sco-bo.stg.shippio.jp
code-publish.dev.2u.fan
aka.ewrs.info
oee.trepko.com
ambientalhub.com.br
einfach-anstellen.de
matchmaking-staging.exponaut.me
ashwaryalifee.com
www.quotanow.com
yes-furniture.borintechs.com
www.xymenapp.com
app.tapcast.io
village.njgourmetfoods.com
auth.erasmustrade.com
www.futuremindsfund.org
portaldev.3dabb.com
prodlinks.alispa.interacta.space
maciejzawieja.de

Other certificates including the domain name legioncaster.com

(limited to 100 certificates)
filebotto.com
realbarons.cfd
edydelivery.com
partners.draftium.com
partners.draftium.com
legioncaster.com

Certificate

The complete raw certificate details for legioncaster.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 72200289963581564109680357549769467423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 13:16:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 14:12:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legioncaster.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/szWky8DboMM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legioncaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateinteriors.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halalbrothers.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsmithcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.app.cddcheck.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayfinders.trainiapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahitechllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igtb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgeharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.start.biltapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutto.marco-franzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-trust-webapp.knolskape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miakapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g-auto-srl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunacorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spa.home-finder.kziete.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.dynamiclanguages.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ideodora.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simterest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burghof.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rafranz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perafoinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malatras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.my-qrcode-gen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printxafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printxafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsupsoroban.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mensetsuyoyaku.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featuredev.coach.epf.bespaartenergie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.mukiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.br.masterbaserelay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romada-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pezetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nathandrichard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.concursos360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visadirect.visa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.killer-id.netkiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarukeeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.oneweekleap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netcomproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sw-pwa.tech-scheduler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvduos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blacklist.illuday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norberto.fenyopeti.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.draftium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nearestschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-apply.money-phone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogongsyd.posnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firestarter.1of500.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nababkhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myredigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiu-y.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peklakengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruthzota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nik-sytnik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kylebyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tweerous.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citygames.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eltern.simpleclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchensink.console.appabrik.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futuremindsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centuryx.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.visualtourbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whiskeyrichardcle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vengawebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crkanela-admin.segurdiez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.inkdrop.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parx.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rehobothimmigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexi.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kernelrobotics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.mydigitalpayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aon-explorer.affinity.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangiblock.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.wtf.menu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martakoch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarborough.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equippers-si.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dieselwynwood.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sazareishi.hscservice.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ymewhatnow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sco-bo.stg.shippio.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code-publish.dev.2u.fan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka.ewrs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oee.trepko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambientalhub.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einfach-anstellen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matchmaking-staging.exponaut.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashwaryalifee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotanow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes-furniture.borintechs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xymenapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tapcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'village.njgourmetfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.erasmustrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futuremindsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaldev.3dabb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodlinks.alispa.interacta.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maciejzawieja.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/KS3or9pF2-o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e9f2b01d10000040300473045022100c876ed69bc2f0781aab728d5537a69e1a701e3830fbf348262aaa91a6806192702205a3e76f0207a34312c937605e01efe00678b66485c6c36452d5142f8ffa7788c007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e9f2b020300000403004730450220657e2263b8f06b761bd567eb3b27b34e131351c7210b799c3ffe555e459df8ef022100dc2cff014e7b8c615b6cfa94bd41646371e87363401d17939e6ec7b09865600d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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