lightspot.io

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 9b:81:d8:11:6e:7e:6e:cf:12:56:c6:14:88:ed:f3:fe was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lightspot.io

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9b:81:d8:11:6e:7e:6e:cf:12:56:c6:14:88:ed:f3:fe
Serial Number (int): 206704528022962303581205841153216082942
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 93:9d:a6:65:7a:c8:68:90:c5:d9:23:2d:6a:57:c3:e3:b8:d4:9f:d0
Fingerprint (sha256): ea:f5:2e:62:fb:5c:eb:2b:2f:3b:39:ab:c7:18:eb:7d:74:8c:ed:6a:8e:ee:6d:00:56:67:f4:5b:ea:2a:ee:1c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/t0KOqsaebNM
CRL Distribution Point: http://crls.pki.goog/gts1d4/EUC0mQ4yMPc.crl

Check the revocation status for certificate lightspot.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lightspot.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lightspot.io
rcos.in
dl1.localize.co.in
agrib.pp.ua
test.hotelbooki.com
agilan.live
deepdoc.io
links.doorcloud.com
www.planetza.com
static.photoeditorsdk.com
cloudpursuit.app
www.terra-astro.io
dev.finclear.net
download.expensees.com
deposits.live
athanasiosefthymiou-insurancegroup.gr
www.photoeditorsdk.com
www.falloutdogs.io
api.dev.kurapika.app
www.adp.ng
app.picky.vote
www.gokonstantin.com
prefund.app
portal.chargers.darivault.com
www.innovationalp.ch
portal.raiders.darivault.com
www.swiftaccountants.com.au
www.hmins.net
bestellportal.muessig.app
backch.at
test.app.biome-hub.com
m.streetfc.com
bloggerz.ga
barruntoelisa.com
admin.dev.clivi.com.mx
www.eclairfac.com
bps35.com
jmmwng.cc
connect.lynk.xyz
benzoinfojapan.org
panel.guzbella.com
abstimmungen.thunertagblatt.ch
www.elojo-life.com
deeponsights.com
rei.slsllp.store
ashergordon.com
www.friendtheory.com
restaurants.porellao.com
app.courtyard-derby.com
willow-redirect.xyz
dash.jackblanc.com
gotoodle.com
www.chunknft.com
pizzeriatalia.com
lga-api-stage.itxi.aero
svobodnifno.tk
celukuthula.co.za
admin.single-society.de
decentrate.com
uwo.rots.io
studiogrouphug.com
getraise.cloud
fidinx.com
softwares.crius.com.br
setup-dev.captego.com
www.myshoponline.net
bondstaging.vetspire.com
schools.edaffix.com
www.codepile.net
stayhalo.in
get.billy.inout.money
www.pearltaxi.lk
callcenter.single-society.de
link.swingu.com
www.dash.jackblanc.com
www.mobaofone.com
iwebsite.dev
sysadmin-sandbox.staffshift.com
koliseumesports.com
www.milanchudidharpark.com
decarbon-ai.com
endemakeijzers.pensioenstartpunt.nl
www.gotoodle.com
www.creepboards.com
jetpics.alledotech.in
servicemall24.com
subspaceteam.com
www.badbeans.dev
www.fidinx.com
www.thegreat80s.com
biodiversidadyculturaambiental.org
www.biodiversidadyculturaambiental.org
www.setbuster.com
www.resume.xtronic.lk
cosecr.co.in
021dee912c7924c3f60bd2f079695483.chatmyorder.com
harvard.envel.ai
www.mein-markkleeberg.de
pereira.app
www.stayhalo.in

Other certificates including the domain name lightspot.io

(limited to 100 certificates)
dev.finclear.net
z0.nu
kachifo.farafinaeducational.app
manzodev.xyz
jysinfotech.com
www.cameronscott.com.au
www.madrid-day-spa.com
coopertrans.ideiadtc.com
www.shopq.co.za
gutter3050.com
doggomotion.ch
www.mojiseed.com
jysinfotech.com
www.theswampisback.com
auth.ctwant.com
taylors.internspoon.com
app.ephy.co
vacamo.app
www.mojiseed.com
pxlbots.com
auth.dev2.photorobot.com
lightspot.io
www.resourcetracking.app
donaeldtheunready.co.uk
donaeldtheunready.co.uk
fourseasonsbarber.com
mumbaimandi.estore.business
taylors.internspoon.com
wtgconstruction.com.ph
mumbaimandi.estore.business
agladius.com
airallow.us
droptaxioneway.in
lightspot.io
www.theswampisback.com
www.powermantra.app

Certificate

The complete raw certificate details for lightspot.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 206704528022962303581205841153216082942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-12 21:16:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-10 22:14:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lightspot.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/t0KOqsaebNM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2065 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightspot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcos.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl1.localize.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrib.pp.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.hotelbooki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilan.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepdoc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.doorcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.photoeditorsdk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudpursuit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terra-astro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.finclear.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.expensees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deposits.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athanasiosefthymiou-insurancegroup.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photoeditorsdk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falloutdogs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.kurapika.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adp.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.picky.vote'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gokonstantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prefund.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.chargers.darivault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovationalp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.raiders.darivault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swiftaccountants.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hmins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestellportal.muessig.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backch.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.app.biome-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.streetfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloggerz.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barruntoelisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dev.clivi.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eclairfac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bps35.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmmwng.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lynk.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benzoinfojapan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.guzbella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abstimmungen.thunertagblatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elojo-life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeponsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rei.slsllp.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashergordon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendtheory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.porellao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.courtyard-derby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willow-redirect.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash.jackblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotoodle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chunknft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzeriatalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lga-api-stage.itxi.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svobodnifno.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celukuthula.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.single-society.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decentrate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uwo.rots.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiogrouphug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getraise.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softwares.crius.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setup-dev.captego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myshoponline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bondstaging.vetspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schools.edaffix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codepile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayhalo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.billy.inout.money'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearltaxi.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callcenter.single-society.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.swingu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dash.jackblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobaofone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwebsite.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysadmin-sandbox.staffshift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koliseumesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milanchudidharpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decarbon-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endemakeijzers.pensioenstartpunt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotoodle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creepboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetpics.alledotech.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicemall24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subspaceteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badbeans.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fidinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegreat80s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biodiversidadyculturaambiental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biodiversidadyculturaambiental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setbuster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resume.xtronic.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosecr.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '021dee912c7924c3f60bd2f079695483.chatmyorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvard.envel.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mein-markkleeberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pereira.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stayhalo.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/EUC0mQ4yMPc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000186d7e53b9700000403004730450221008aadeeada73b4259fba0c36a4c2cba7049b443045ba02551d9c73123dd1709de02205d434d56e7943510a27c5a3c4964d498a3173d31e8219c35bd887017abe6c535007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186d7e53bb50000040300473045022100ccfb33bf9c302fd72979db82b7e014ede917e149b507d6cbcfbe32947ee419d402200f0f5c3daf04aa4c66ab989b9fdb5f315fc70816a515ea05ef2662ce71c839db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f8a67b0e5f803c4cdc331a62ef9a4ceab46b85ab6bb5a2bed8cf29a4aa88d98e43d7ebe64ed976bd4917de264f51631977c4d0110bc402611854bebad5d9098f29f42a9dce923379745389cb4c73071dd37fa44310d5cd3e57467dfac7e96ab6f15cfe31bc5ae08ba78f963f8bec3665de2990b798121f17cbf25637a979d0a776dd0abf7819b59ea34caed96dd24b39571bbeab22006618e051b686ee90ec234d3dd2a3e61344f14617eb1c89c544a17d7d33b18cb20a51781d9c3683a942799b3877f79e7604ed64de5f8208af3f016251065e591e9994c0af33bab5215bcf1d4ac4ea92e0bb5a1870ee3a79680cb4965bb0ace7fca73bb473dee700bbf62