stp.optimum-transfer.hr

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number cb:ab:85:a9:55:c1:ed:d7:12:a0:57:fe:ac:28:b3:87 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stp.optimum-transfer.hr

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cb:ab:85:a9:55:c1:ed:d7:12:a0:57:fe:ac:28:b3:87
Serial Number (int): 270723876883724799993039526068627223431
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 07:7d:51:96:ec:68:95:e4:2a:cd:2c:12:e0:01:6c:2b:12:84:ed:5b
Fingerprint (sha256): ed:16:e0:98:6f:a0:8b:b8:3b:75:74:7b:a0:b7:1f:f7:71:7a:dd:e6:15:f6:4b:1b:3d:7e:7f:b2:4b:8e:95:01

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/B7e_55GFkD0
CRL Distribution Point: http://crls.pki.goog/gts1d4/RZjRG7B8E_c.crl

Check the revocation status for certificate stp.optimum-transfer.hr

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stp.optimum-transfer.hr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stp.optimum-transfer.hr
payproxy.io
www.app.nomadiccare.com.au
testapp.verstrade.nl
www.nicelyspicy.co.uk
api.tuv.portosegurofaz.com.br
tools.tnshipping.us
code.doomo.id
upload.pureportugal.co.uk
manager.allofans.io
codecenter.ro
iwo.excelcomms.com.my
api.snappers.tv
repix.app
dev-cms.urcupcafe.com
app.smarterenergy.ie
app.penny.de
app.conto.ai
get.sudokuonline.io
www.huynq.site
alexa.radiozeta.it
mwata.co.zm
unfurproject.com
www.unjobs.pro
www.fitpl.app
www.classclickers.com
www.urbancivic.in
www.janakj.org
shizen.vc
share.app.test.goodplace.foundation
link.mcity.id
admin.videoshop.vrisko.gr
www.anlidiagnostics.com
www.flodepiestetica.com
sequoia.coleta.relatoweb.com.br
link.gruene-heidelberg.de
functions.beanclub.app
vault.celniker.xyz
beta.gastronaut.ai
elizabethsausedo.com
www.aihorsepicks.com
app.cmcdistedu.org
digitalcoreplanners.com
oyatokoshindan.com
flockvod.com
evaniholidays.com
www.manati.jp
nibblcookies.com
fsbattle.com
wolz.plusfour.co.za
links.ironmarines.com
sta-inventory.sonofatailor.com
www.netrypto.com
devkiosk.harba.co
links.mypennypinch.com
app.my-org.co
hbreavis.qa.parkey.io
wongsylvia.com
sellsampling.com
chordbook.jtia.la
admin.br.shopcall.io
zenzhiin.com
applinks.yiiotcloud.com
portfolio.dctech.dev
www.enjoyflamenco.com
s.tamilanjobs.com
app.swiftdoc.com
kicarneseassados.lupi.delivery
eva.graphite.space
www.soulcodesolutions.com
ketoan.hosodientu.vn
rec.vianetti.com
d4p88mzojtyndkldaler.smartimob.io
vibralgo.com
www.landreport.in
www.innerpeas.in
www.keschaefer.com
tilak.io
s.jobs7.in
aladdinscafe.posify.in
joelaustin.net
scopestack.in
www.fcortesnila.com
link.treaclefactory.co.uk
www.varelafalcao.pt
www.thetriviaapi.com
neurogame.net
www.knowtelos.com
www.proto-ride-together.com
dl.gloice.net
easycms.app
www.randysryan.com
auth-dev.deedz.net
useless.energy
edicioneseuterpe.mx
karsthammer.nl
www.nftfloorprice.info
inceptive.info
wadhwaniorg.lapieza.io
raining.cats.and.dogs.hasan.digital

Other certificates including the domain name optimum-transfer.hr

(limited to 100 certificates)
optimum-transfer.hr
gatorsnft.io
testing-cobro.wprestamos.com
avaliacao.truliv.com.br
optimum-transfer.hr
optimum-transfer.hr
optimum-transfer.hr
mmisz.eu
www.okdsc.com
www.fhirnative.com
optimum-transfer.hr
www.agr.com.ec
pixel-entertainment.com
optimum-transfer.hr
stp.optimum-transfer.hr
optimum-transfer.hr
app.trimscapekc.com
optimum-transfer.hr
testing.viscalc.app
dev-cwasetup.cloudworkspace.com
app.trimscapekc.com
optimum-transfer.hr
ups.optimum-transfer.hr
optimum-transfer.hr
agent.oipcsp.in
task4s-dev.teve.no
optimum-transfer.hr
optimum-transfer.hr
backup.agremed.hu
optimum-transfer.hr
optimum-transfer.hr
optimum-transfer.hr
stp.optimum-transfer.hr
stp.optimum-transfer.hr
www.maguro-uokane.com
mmisz.eu
optimum-transfer.hr
stp.optimum-transfer.hr
capters.me

Certificate

The complete raw certificate details for stp.optimum-transfer.hr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270723876883724799993039526068627223431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 16:06:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 17:04:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stp.optimum-transfer.hr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/B7e_55GFkD0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2048 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stp.optimum-transfer.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payproxy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.nomadiccare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapp.verstrade.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicelyspicy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.tuv.portosegurofaz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.tnshipping.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.doomo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upload.pureportugal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manager.allofans.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codecenter.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwo.excelcomms.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.snappers.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cms.urcupcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.smarterenergy.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.penny.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.conto.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.sudokuonline.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huynq.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexa.radiozeta.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwata.co.zm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfurproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unjobs.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitpl.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.classclickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urbancivic.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janakj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shizen.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.app.test.goodplace.foundation'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.mcity.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.videoshop.vrisko.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anlidiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flodepiestetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequoia.coleta.relatoweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.gruene-heidelberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'functions.beanclub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vault.celniker.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.gastronaut.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabethsausedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aihorsepicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cmcdistedu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcoreplanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyatokoshindan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flockvod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evaniholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manati.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nibblcookies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsbattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolz.plusfour.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.ironmarines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta-inventory.sonofatailor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netrypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devkiosk.harba.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.mypennypinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.my-org.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreavis.qa.parkey.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wongsylvia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellsampling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chordbook.jtia.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.br.shopcall.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenzhiin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applinks.yiiotcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.dctech.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enjoyflamenco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.tamilanjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.swiftdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kicarneseassados.lupi.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eva.graphite.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soulcodesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketoan.hosodientu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec.vianetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd4p88mzojtyndkldaler.smartimob.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibralgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landreport.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innerpeas.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keschaefer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilak.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.jobs7.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aladdinscafe.posify.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joelaustin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scopestack.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcortesnila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.treaclefactory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varelafalcao.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetriviaapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurogame.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowtelos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proto-ride-together.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.gloice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easycms.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randysryan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.deedz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useless.energy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edicioneseuterpe.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karsthammer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nftfloorprice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inceptive.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wadhwaniorg.lapieza.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raining.cats.and.dogs.hasan.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/RZjRG7B8E_c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c694baa71000004030048304602210080746a2d4a4b115a0233f8f70e656ab4dbc94b766453037f8f0ee3cf89d756460221008195de80c00466996e2d7d331a3536e58a9793358d8077464d6b31416295d0d3007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c694baa990000040300473045022100f3ddcb4cb62196b15e4bf2990617122d504f4f0dba77e434b8fee3af36d1eabf02204de57225fd8a4c174b8c5bc8b3545a2cf4d817e3a05de065e1da5c0f18bd2782
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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