www.loff.no

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 28:c9:53:13:0c:6a:66:3e:09:37:ea:54:94:34:e2:04 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.loff.no

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:c9:53:13:0c:6a:66:3e:09:37:ea:54:94:34:e2:04
Serial Number (int): 54214456449136775209633447982644126212
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b9:96:6c:a0:6e:1a:d5:75:09:ce:de:74:cf:31:59:da:6a:68:25:b3
Fingerprint (sha256): ea:f7:30:59:c2:2c:db:87:db:e6:f3:ca:ef:59:36:c9:ba:ae:1f:11:9e:9d:bc:cb:ab:f5:a1:41:2a:1e:8d:ed

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/qbZjIHHX410
CRL Distribution Point: http://crls.pki.goog/gts1d4/RKeyDP9tNbA.crl

Check the revocation status for certificate www.loff.no

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.loff.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.loff.no
chcbwukg.himalayanhospital.co.in
www.bayaronline.id
offgrid.indicatif.org
finportalapp.sk
staging.admin.bio.pmuc.or.th
dashboard.4caretelecom.nl
www.bitcrumbs.in
www.hall-e.ph
app.bpst.ligoeproject.com
crontracker.com
www.aiyushjain.ca
www.akiraishino.com
dakotacountychambers.com
bistro.ai
www.ligapromalp.com
tenants.parkchamp.ca
glts.am
signagio.easysignage.app
portal.uwc-crystallake.darivault.com
sehapps.com
clientes.recora.mx
lamplists.info
nelinik.ch
tianyichen.one
pussypowertalks.com
www.doesscottloveamanda.com
domsdagur.com
atifhussain.me
try.getgrowflow.com
experienceradfordbaseball.com
gemaapp.com
secureurl.in
drkkrishnamohan.com
zenith.drgn.space
auth-dev.chibi.gg
www.basbus.site
cardecor.in
easyplaylists.online
www.budmalart.pl
portfolio.archno.xyz
muu-design.de
team.decodedetroit.com
crajit.com
sincolor.futbol
sugo.toys
www.santoshmagar.com
gajiku.dev
adventure-product.flashpack.com
vsevolod.dev
www.theconfidencecltv.com
turnoactivo.com
nycre4j.com
ch.writerduet.com
gmail.ghiveci.com
www.potluckpal.com
softfortoday.com
nomsnadons.cat
chanute.enotice.io
www.platetext.com
www.kalock.network
www.kosmala.dev
admin.getdood.app
links.staging.yamuntu.com
docs-preprod.imagin.studio
approvid.com
www.send-voice.com
www.spartapps.com
lms.vinid.dev
www.withlocals.tv
multiversal.ventures
wassilni.com
www.atlanticenterprises.biz
number.joshbauer.com
getriba.com
dev.smartscan.dataauchan.fr
glamuare.com
fatihtoker.com
www.cruncher.io
www.globaltalentinsight.com
whatdafoxes.com
engage.grace.church
shuttles.etuville.fr
admin.payke.okinawa
www.checkmypool.fr
www.albwrandomizer.com
holidayinfinite.com
dlink-test.collegepads.pro
xmc.me
rifa.house
dynamic-links.reyts.com
www.samambaiasempreviva.org
links-dev.trybench.com
www.petroment.com
rubric.jigsawacademy.com
onepercentdeal.com
www.myvisionlifestyle.com
prototype.skyixd.com
caatrivia.sqwadhq.com
admin.bkn.outmatic.pl

Other certificates including the domain name loff.no

(limited to 100 certificates)
mydevstory.dev
resquash.com
www.wannmussichwas.at
www.cvfixarn.se
integrationscaptain.com
davealger.info
chcbwukg.himalayanhospital.co.in
mia-cms-dev.itxi.aero
donkey-milk.in
mapache.earth
jakesiemer.com
www.systemaid.cz
www.wannmussichwas.at
flordelotus.brandapp.com.br
resquash.com
reels.roadraksha.in
ssyp.ru
portal-legacy.wehealth.org
conjureai.app
almeraim.info
www.mamoic.co.in
hinty.jp
www.tweetyai.com
dm7pedidos.dm7sistemas.com.br
deals.hoteldiscounts.my.id
mirkoraimo.com
www.artekto.pl
almeraim.info
delivery.bewond.com
www.loff.no
elclamor.pe
photocado.com
subscriptions.pekatvision.com
app.proveit.gr
www.barcode-keyboard.eu

Certificate

The complete raw certificate details for www.loff.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54214456449136775209633447982644126212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 03:52:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 04:51:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.loff.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/qbZjIHHX410'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loff.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chcbwukg.himalayanhospital.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayaronline.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offgrid.indicatif.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finportalapp.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.admin.bio.pmuc.or.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.4caretelecom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcrumbs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hall-e.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bpst.ligoeproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crontracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiyushjain.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akiraishino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakotacountychambers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bistro.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ligapromalp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenants.parkchamp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glts.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signagio.easysignage.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.uwc-crystallake.darivault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sehapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.recora.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamplists.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelinik.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tianyichen.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pussypowertalks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doesscottloveamanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domsdagur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atifhussain.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.getgrowflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experienceradfordbaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemaapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureurl.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drkkrishnamohan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenith.drgn.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.chibi.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basbus.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardecor.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyplaylists.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budmalart.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.archno.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muu-design.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.decodedetroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crajit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sincolor.futbol'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugo.toys'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santoshmagar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gajiku.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventure-product.flashpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsevolod.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theconfidencecltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnoactivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycre4j.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.writerduet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmail.ghiveci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potluckpal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softfortoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomsnadons.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chanute.enotice.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platetext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalock.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kosmala.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.getdood.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.staging.yamuntu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs-preprod.imagin.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approvid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.send-voice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spartapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.vinid.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.withlocals.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiversal.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wassilni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanticenterprises.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'number.joshbauer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getriba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.smartscan.dataauchan.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamuare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatihtoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruncher.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globaltalentinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatdafoxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.grace.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuttles.etuville.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.payke.okinawa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkmypool.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albwrandomizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidayinfinite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlink-test.collegepads.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmc.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rifa.house'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic-links.reyts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samambaiasempreviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links-dev.trybench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petroment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubric.jigsawacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onepercentdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myvisionlifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototype.skyixd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caatrivia.sqwadhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bkn.outmatic.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/RKeyDP9tNbA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018acfd4f39c000004030047304502207b9a5781e6185951078fb2c124de45418ff383efa6c7f210ce99e7290703c775022100b188a4f8e7eb63fd28ba32d01cf9e997549201dc16f5f1c28d0ade5fd81158f1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018acfd4f39c000004030047304502202dc2e7b372e6e650388ae4f0a6173e092b266ec4257aba4ea31e99cbc8616f68022100b24bcadb8b5b01e3e3ff968c2ea72920b5054c4ebe4e3ee7778e7a405801cae8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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