assets.shaftapp.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ce:77:02:58:3e:f9:13:4d:10:a5:8f:78:98:88:3b:99 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assets.shaftapp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ce:77:02:58:3e:f9:13:4d:10:a5:8f:78:98:88:3b:99
Serial Number (int): 274438898014245007149151367355513191321
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): be:b8:34:cc:7f:0a:b9:83:7e:b7:b3:01:73:fc:ea:1f:89:79:37:6a
Fingerprint (sha256): ef:28:91:9d:35:02:ce:3d:59:1c:6b:31:60:fa:f3:3a:eb:55:f0:b8:c8:f3:54:33:1c:55:59:de:44:80:80:32

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/l1YY5JT2PYA
CRL Distribution Point: http://crls.pki.goog/gts1d4/0ed3-CX9n0U.crl

Check the revocation status for certificate assets.shaftapp.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.shaftapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.shaftapp.com
app.runxact.com
www.supportbiznow.com
task-erp.com
www.startrekcartography.com
www.tentfactorysimracers.com
laneline.swimmetric.com
dev.thewolfx.com
thomas-sanceo.com
tteld.com
varshahostel.com
checkout.wi-flix.com
zubairautomotive.com
triage.trykiroku.com
games.veert00x.com
www.zubairautomotive.com
dooggies.io
www.mansfield.ink
app.corpbook.jp
www.noverstock.eu
client.short-video.jp
tmail.twwyachts.net
boskemper.net
cpo.place
www.broneering5.webarendus.ee
www.broneering9.webarendus.ee
www.atmopromo.pl
www.broneering4.webarendus.ee
www.wondervintage.pt
www.onur.tech
register.advanda.app
order.advanda.app
birbs.app
www.bestcheer.app
track.advanda.app
bostonprops.app
utlwa.app
m.wickedcampers.com.au
www.santaisabella.com.ar
www.broneering10.webarendus.ee
www.catchpad.com.tr
www.devintope.ca
dingma.ca
auth.12bay.vn
www.broneering1.webarendus.ee
mcdeliverydetector.mcdonaldsnederland.app
redirect.foodly.ca
www.chimple.cc
m1-admin.m1studio.co
aconyx.com
tpsreports.trexperts.co
anogaa.com
allxponus.com
bdh-stresstest.arianee.com
app.staging.bamzooka.com
bitgroovy.com
admin-test.bechoapp.com
docs.cognitedata.com
raoxe.dailyxe.com.vn
www.bonfry.com
jump-up.cf
dmystapp.com
edganizer.com
crm.venticlean.ch
pr.byhoxby.com
stagingauth.demium.com
old.floopedu.com
trollo.co
alexgastone.com
auth.atobots.com
atelierporamora.com
location.cklinica.com
online.aiseki-ya.com
www.dtrmediaworks.com
headlineguesser.com
brokerleagues.com
www.mazharchoudhry.com
mortgagequalityrisksolutions.com
www.licorne-media.com
explorify.jaidenrm.com
www.headlineguesser.com
www.ozelgunsipariscisi.com
www.yanek-k.com
app.lasrozas.es
infinitecareer.in
www.lestourneesdesproducteurs.fr
olgabushkova.com
tmak.info
www.tmak.info
krugo.link
go.linemarketing.me
manage.dev.mitemma.de
varaukset.tervalentajat.fi
payments.mealhero.me
www.ticker.media
www.nemetrehangolva.hu
start.desafiototal.net
greencardlist.net
www.getscoped.io
slush3-test.mirakl.net

Other certificates including the domain name shaftapp.com

(limited to 100 certificates)
www.bankalert.app
merrylands.vetspire.com
dealdata.app
www.sigma7face.co.jp
secrets.alyne.app
gio.bcyl.com.ar
destinyunban.me
hovnokod.cz
portfolio.sitg.app
agreements.praece.com
www.shaftapp.com
www.acesseimoveis.imb.br
nilsbenz.ch
www.hapmas.com
lubarsa.tcontur.com
michalis.diblip.com
buddhawisdom.app
app.umkamall.ru
pollsy.co
portfolio.sitg.app
location.cklinica.com
stage.shaftapp.com
link.entango.app
www.sigma7face.co.jp
mnhomevaluation.com
lubarsa.tcontur.com
admin.forbesjapan-career.com
secrets.alyne.app
twall.gdglille.org
nilsbenz.ch
dev.tinyview.com
www.msociety.tech
shaftapp.com
assets.shaftapp.com
hovnokod.cz

Certificate

The complete raw certificate details for assets.shaftapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274438898014245007149151367355513191321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-05 06:10:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-03 06:10:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.shaftapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/l1YY5JT2PYA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2057 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.shaftapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.runxact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportbiznow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'task-erp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.startrekcartography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tentfactorysimracers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laneline.swimmetric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.thewolfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomas-sanceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tteld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varshahostel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.wi-flix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zubairautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triage.trykiroku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.veert00x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zubairautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dooggies.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mansfield.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.corpbook.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noverstock.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.short-video.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmail.twwyachts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boskemper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpo.place'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broneering5.webarendus.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broneering9.webarendus.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atmopromo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broneering4.webarendus.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wondervintage.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onur.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.advanda.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.advanda.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birbs.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestcheer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.advanda.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonprops.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utlwa.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.wickedcampers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santaisabella.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broneering10.webarendus.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchpad.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devintope.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dingma.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.12bay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broneering1.webarendus.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdeliverydetector.mcdonaldsnederland.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.foodly.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chimple.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm1-admin.m1studio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aconyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpsreports.trexperts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anogaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allxponus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdh-stresstest.arianee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staging.bamzooka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitgroovy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-test.bechoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.cognitedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raoxe.dailyxe.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonfry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jump-up.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmystapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edganizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.venticlean.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.byhoxby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingauth.demium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.floopedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trollo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexgastone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.atobots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelierporamora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'location.cklinica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.aiseki-ya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dtrmediaworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headlineguesser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokerleagues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazharchoudhry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagequalityrisksolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licorne-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorify.jaidenrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headlineguesser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozelgunsipariscisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yanek-k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lasrozas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinitecareer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lestourneesdesproducteurs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgabushkova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmak.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmak.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krugo.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.linemarketing.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.dev.mitemma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varaukset.tervalentajat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.mealhero.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ticker.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nemetrehangolva.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'start.desafiototal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greencardlist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getscoped.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slush3-test.mirakl.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/0ed3-CX9n0U.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000607d8355ec13a23e35dd27a9e4000b3a18daa40096327d9647920a85cd2fdc076c6767d9b90ff7eb53d69f594079eb69b804797111ad6076086d4b06ee0ddc53a0a21768028c8621cfbe909c72abbcee8900826f8a11edfc42adb0699b61c15fb69d8941204d594a86a9fb6ec1230c7a844be8c167db79ae7327a7fcad5d7efd6fc4a083e0d1ee9a3bbc72316bca4767f32adfbd66a49bdf79406e53d27642836f66b036196a9fc621c82f66543d997690809a12d4765390af1d6e595b4fcdb4d2a9b5cc3017d59b92be76fe71bced95a6443fa9d050327aa2b2007d5c7ea6e42de900d26de156838bb646775db936ba0bc4e5dad431e54029d7dfa702e9b2d