rayfit.org

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 0b:49:1a:89:a9:ed:3a:82:0a:76:5a:fe:04:22:b2:f3 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rayfit.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:49:1a:89:a9:ed:3a:82:0a:76:5a:fe:04:22:b2:f3
Serial Number (int): 15001083873804834791612486624397669107
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 43:fd:68:5a:ae:de:ae:36:83:75:29:43:cc:41:a5:59:85:f0:39:c1
Fingerprint (sha256): ee:cd:ed:9b:3d:16:0b:ca:03:a3:7e:80:28:44:88:2c:9c:b6:f2:04:ae:bd:8a:f2:d0:fa:69:19:d3:47:2c:44

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/UO7cHRSChNE
CRL Distribution Point: http://crls.pki.goog/gts1d4/olIi_uDXrtY.crl

Check the revocation status for certificate rayfit.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rayfit.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rayfit.org
johanneshagglund.se
sidemenu.jopit.com.ar
landing.trcellappmath.com
www.laptopslifestyle.us
bmon.net
dillensamfallighet.se
tabernacleofgodspirit.org
thesociety.art
marigoldinsulation.uk
provini.genvision.it
scan.nova-c.dk
haechiworld.com
www.fasty.pe
www.thisgeneration.in
venmocoin.xyz
navmenu.jopit.com.ar
chornous.net
www.nvportal.org
nft.sheplatform.io
reviveshiatsu.co.uk
after.idhospital.com
www.medgrocer.com
staging.link.scout.enter.de
desguace.salassuministros.com
versait.nl
ngameapp.com
www.placeme.dating
digitalfashion.studio
prepjunction.com
www.1155is.com
mountsuperspecialityhospital.com
admin.sampleassist.com
speakbox.care
cursos.meducar.com
meistrasirmargarita.lt
sp.rothlbaby.com
linc.percent.ac
link.ctf.web.tr
shyfti.com
www.peakerdise.com
noel.petitimbert.com
arcondrilling.com.au
www.tuconsultalegal.net
kvdigital.timeline.click
webgl.meoiswa.cat
www.betelimoveissp.com
www.boyvswomen.com
app.qipeo.com
www.xaxaism.com
my.midtnliving.com
www.bookdroptaxi.com
photo.principiantes.es
aktuelles.new-mobil.de
dev.nooks.in
demo.mafynetti.fi
www.alrehmanquranacademy.com
building-file.nl
www.macaw-app.com
app.teaminusapp.com
www.swiftaccountants.com.au
www.emmanuelimhontu.se
aberdaregirls.co.ke
www.appcompass.nl
apps.joinsherpa.io
itenot.com
www.tzmartin.com
demo.zaack.io
gsolution.net.vn
penpass.net
applepay.amperry.me
webipm.azordev.pt
www.celebrates.events
www.qube3s.com
www.tailorsnine.com
www.btcp.com.au
widget.detellerloopt.nl
links.codedelaroute.io
contratosabiertos-bo.org
novacontabil.lextartecnologia.com.br
www.anyware.cloud
couch.live
fb.spelezoli.lv
employee.mymilk.de
dataslots.org
www.enlightapps.pl
www.en.tenczyninfo.com
app.iwmac.com
admin.ilbancodeisospesi.it
www.money.wesselbuchling.com
bahaitt.org
www.blockchamp.org
agent.shubhmoney.co.in
www.datavaluepeople.com
diewithme.online
oceantechnologyoffshore.com.mx
www.housekeyrealty.in
2020.leanability.com
ctaealumnisociety.org
www.legalfactory.in

Other certificates including the domain name rayfit.org

(limited to 100 certificates)
dashclicker.live
nile.ag
www.neuecoin.com
fototocka.myphotopal.shop
cev.link
app.calendoo.net
danhartjiujitsu.com
dashclicker.live
www.alameenschool.co.in
gestion.slared.cl
www.neuecoin.com
colorgraphyapp.com
appabrikdemo.console.appabrik.jp
chatwidget.bot
rayfit.org

Certificate

The complete raw certificate details for rayfit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15001083873804834791612486624397669107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 05:09:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 06:06:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rayfit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/UO7cHRSChNE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2059 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayfit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johanneshagglund.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidemenu.jopit.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.trcellappmath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laptopslifestyle.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dillensamfallighet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabernacleofgodspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesociety.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marigoldinsulation.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provini.genvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scan.nova-c.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haechiworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fasty.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thisgeneration.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venmocoin.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navmenu.jopit.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chornous.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvportal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nft.sheplatform.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviveshiatsu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'after.idhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medgrocer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.link.scout.enter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desguace.salassuministros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versait.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngameapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placeme.dating'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalfashion.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1155is.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsuperspecialityhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sampleassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speakbox.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursos.meducar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meistrasirmargarita.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.rothlbaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linc.percent.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.ctf.web.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shyfti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peakerdise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noel.petitimbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcondrilling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuconsultalegal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kvdigital.timeline.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webgl.meoiswa.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betelimoveissp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boyvswomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.qipeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xaxaism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.midtnliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookdroptaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.principiantes.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktuelles.new-mobil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nooks.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.mafynetti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alrehmanquranacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'building-file.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macaw-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.teaminusapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swiftaccountants.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emmanuelimhontu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberdaregirls.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appcompass.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.joinsherpa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itenot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tzmartin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.zaack.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsolution.net.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penpass.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applepay.amperry.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webipm.azordev.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebrates.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qube3s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tailorsnine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btcp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.detellerloopt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.codedelaroute.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contratosabiertos-bo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novacontabil.lextartecnologia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anyware.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couch.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.spelezoli.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employee.mymilk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataslots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enlightapps.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.tenczyninfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.iwmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ilbancodeisospesi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.money.wesselbuchling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahaitt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchamp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.shubhmoney.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datavaluepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diewithme.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceantechnologyoffshore.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housekeyrealty.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020.leanability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctaealumnisociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalfactory.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/olIi_uDXrtY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e9846b6fa0000040300483046022100f61707fb2d3acd69427d10582a9881794715e4d3908e053729f3af88751be38c022100f8f94cfd6213e94d64fec90cb8eccd1a9516795a5e2942d067545e7ee6624bb50076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e9846b6e00000040300473045022100cad02f9b38e6809fd57adb91d319e50d1f62dfecbd68e8d1a844a437e7e3662b022029f98220484d4e9d2dd3aefe3458f7a256be960ff1b4d34874ce5e815055d5cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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