www.aquasimple.pt

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 30:ce:91:d3:05:11:4f:5b:12:e0:bd:b9:b1:ef:bf:ef was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.aquasimple.pt

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:ce:91:d3:05:11:4f:5b:12:e0:bd:b9:b1:ef:bf:ef
Serial Number (int): 64875514618637307927853052868338630639
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): c3:df:86:76:ce:e6:88:99:ef:1a:41:1b:ec:dc:2b:16:94:19:b5:40
Fingerprint (sha256): eb:28:23:0b:a0:c0:39:ee:d2:49:66:cd:3d:18:3e:f3:d3:89:2a:91:2d:c2:b4:55:da:ff:12:3c:da:a3:6c:a3

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/VHveK2zS0NQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/OFJedzixRUk.crl

Check the revocation status for certificate www.aquasimple.pt

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aquasimple.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aquasimple.pt
stories.coloriza.me
sv-console.urbanfarmers.com
centrocomercialfeiraguay.com.br
assess.oneandall.se
mobifrota.pt
www.idrink.com.tw
www.sandblock.io
old.rctalert.com
testlinks.superplan.at
www.btarget.com.br
manusha.usefuleverything.com
www.nounagotchis.wtf
dashboard.mxre.dev
12x.roox.tk
mateuszkirmuc.com
covid.cooperit.dev
32x.roox.tk
react-sales.jamestarnold.dev
mondart.com.tn
60x.roox.tk
www.bilardoatolyesi.com
www.steenmee.nl
www.valkyriegamestudios.com
www.wickbridge.com
6x.roox.tk
7x.roox.tk
ad.igmyd.co.kr
wtplanner.com
zitounapressing.com
levage.enedis.work-and-play.com
viska.com
picmage.io
portal.tezbooks.com
guesswho.inprod.dev
clean.itservice.emallstudio.com
art.staging.personal.lifebrand.life
enjin-pelanggan-development.courtsite.my
2x.roox.tk
echo.tough.space
www.propeller.ba
www.daf-byte.com
pagerival.com
promotion.dgplus.co.kr
inventarizace.pametnaroda.online
www.drivefti.ch
admin.esncosmos.com
direct.goaw.net
codersun.pl
resume.knox.ru
app.dduexpress.co.za
www.sesameopen.com.au
www.nonet-inc.co.jp
globiz.io
jessefresh.com
udruga4lista.hr
rentcamp.co.kr
ianrios.me
pardock.dev
dotalab.net
alangaraannaichurchvpet.in
delivery.kaikosushihouse.com.br
stelath.site
pokemonquiz.net
help.rflex.io
wordparkgame.com
acesofstrategy.xyz
kingsoffortune.xyz
www.sb-develop.com
awhere.versionx.in
www.admin.hesscon.co.za
indisa.rflex.io
ninca90.com
error.indykite.id
heid.sachso.edu.vn
aesir.net
app-dev.tumble.to
www.grandoeremonti.com.br
www.dispatch.ovnlogistics.com
fujimaki.ltd
www.tantannamhae.com
mahima.life
www.nycsecure.org
firebase.dynaminds.vn
www.pimentarosa.live
dia.exploredata.site
nine-sangenjaya.com
admin.ybcannabis.com
app-dev.iarabeauty.com
www.melissaremy.art
happa.work
shamrockpaintworks.co.za
km.martinkeefe.uk
www.newtier.co.uk
survey.app.buildbetter.app
cycletoaccelerate.eu
sjt.hu
www.autecla.com.br
gettheoutfit.honk.international
everest.nology.io

Other certificates including the domain name aquasimple.pt

(limited to 100 certificates)
juno.disperze.network
www.micompra.app
www.slotenmakergeert.be
www.contacmed.com
plataforma.digitalaligner.com.br
athidiinn.com
pinkytrip.com
mae.by
apriori.ai
mae.by
www.cafsoft.com
atmaspace.ru
webveer.com
www.easyday.one
malkaesther.com
www.acquiregame.io
mae.by
www.forge.me
talentx.co.kr
mae.by
pinkytrip.com
www.interglobal.ro
servicer.roomwith.jp
paypolaraircargo.com
codersun.pl
www.aquasimple.pt
malkaesther.com
win.monforte.it
www.luizpessetimoveis.com.br
www.thecenterspace.co

Certificate

The complete raw certificate details for www.aquasimple.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64875514618637307927853052868338630639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 09:35:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 10:33:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aquasimple.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/VHveK2zS0NQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquasimple.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stories.coloriza.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv-console.urbanfarmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrocomercialfeiraguay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assess.oneandall.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobifrota.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idrink.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandblock.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.rctalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testlinks.superplan.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btarget.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manusha.usefuleverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nounagotchis.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.mxre.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12x.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mateuszkirmuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.cooperit.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '32x.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react-sales.jamestarnold.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondart.com.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '60x.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bilardoatolyesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steenmee.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valkyriegamestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wickbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6x.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7x.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.igmyd.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zitounapressing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levage.enedis.work-and-play.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picmage.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.tezbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guesswho.inprod.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.itservice.emallstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art.staging.personal.lifebrand.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enjin-pelanggan-development.courtsite.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2x.roox.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echo.tough.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propeller.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daf-byte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagerival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotion.dgplus.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inventarizace.pametnaroda.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drivefti.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.esncosmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.goaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codersun.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resume.knox.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dduexpress.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sesameopen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonet-inc.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globiz.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udruga4lista.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentcamp.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ianrios.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardock.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotalab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alangaraannaichurchvpet.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.kaikosushihouse.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stelath.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemonquiz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.rflex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordparkgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acesofstrategy.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsoffortune.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sb-develop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awhere.versionx.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.hesscon.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indisa.rflex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninca90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'error.indykite.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heid.sachso.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesir.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev.tumble.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandoeremonti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dispatch.ovnlogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fujimaki.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tantannamhae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahima.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nycsecure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.dynaminds.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pimentarosa.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dia.exploredata.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nine-sangenjaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ybcannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev.iarabeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melissaremy.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happa.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shamrockpaintworks.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'km.martinkeefe.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.app.buildbetter.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycletoaccelerate.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjt.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autecla.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettheoutfit.honk.international'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everest.nology.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/OFJedzixRUk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bae80327e0000040300473045022100f69bc470a68b28cd2f02869664e356486bda8d3b03c1a2bd248fde639bc2be6c022004ba3bd48021787560bafe00b5edfa20022e626dd5be69f765f36c63931e6b9500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bae8032860000040300463044022074fd4e815fc5cc7ae989c969235bb0d47fbc85b3f514d974c72ed9242580987f022002fa244cdb40e6d6532a302da6f980038498e1da92e0098f5d72e788c259444f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0090265fff2fec79f23af79255756c907edaeb5d198d5d3b5dda068fc8bbd748c110128946c6109346191593c6b26ad6f1263b6f1f9aa24a3ee3239808d6d8b6821da0a9614aa3a1c6dc83321d070fef670c404b6cec66650e478d1423df9497b9bdd174625fbc18d025a60162e6cb49d448b9a77b12620033b57786a97053ef525137639f2d1f6e23c4ab8af71baee5edbf8c3ff816319d03e83d9ae6deb8afead066603b32c98ece4152ca5421d255d20fe83fc26718f92e43aaead36368648076971823f5472c353441e7d73190d14d9950e0d70b80171a6246c938db0992e17f6cb9c5377782f0a17964552c587903eb2b86503ab251da3b5bcca8d6433ad6