www.liduna.co.za

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 70:ac:eb:81:87:bb:10:fc:10:53:f2:1a:67:eb:77:58 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.liduna.co.za

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:ac:eb:81:87:bb:10:fc:10:53:f2:1a:67:eb:77:58
Serial Number (int): 149771387216275016261752115836792567640
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 61:77:03:fa:09:18:db:5c:35:c1:03:62:43:f0:e3:ab:27:e9:18:a4
Fingerprint (sha256): f0:02:86:5f:45:7c:ae:fc:e9:11:62:5c:8f:a0:e0:b9:de:97:c9:16:47:a2:6d:fb:cd:62:dd:c4:bd:45:55:59

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/qnzMnGL3wwA
CRL Distribution Point: http://crls.pki.goog/gts1d4/n9ibn113k0M.crl

Check the revocation status for certificate www.liduna.co.za

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.liduna.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.liduna.co.za
www.getvgame.com
otodeger.can2el.com
www.aktivebrokers.com.br
www.gdgwarsaw.pl
link.nework.kr
www.casaspedro.pt
whatiamdoing.net
go.schat.im
admin.wafoch.com
uat.resbutler.com
empresa.brendi.com.br
www.sqer.it
ion.inova.si
isostore.outravibe.com.br
www.vinter-bryllup.dk
imagine.malinowy.me
duordle.chauhan.nz
www.selimbenjeddi.tn
stage-services-tops.smartbuildings.app
static.insideskeleton.com
qrcode.getitdone.best
markbarlow.net
www.nancybubicatherapy.com
beacons.bio
palantetours.com.co
www.alessandragrata.com
www.chasersradar.com
www.programmingpablo.com
www.moisessillva.com
www.zabira.ng
stage.admin.sliceq.com
hellosuzuki.app
cpaiii.com
mahanpandey.com
beehive.oberbics.at
demo.customgiving.com
portail-restaurer.ca
lifetime-oauth2.zaim.net
fte.com.co
www.fauzdar1.com
www-stage.burningsea.com
sencillogic.com
app.refrosh.com
auth.nadasign.com
experiencethinkers.com
www.olsonmatt.com
payment.getamal.com
notify.untilit.works
discover.appfluencer.com
firebase1.easysolutioninfotech.com
goalerz.com
www.apiculturavalles.com
join.midfinvest.com
next.ptn.ninja
www.neurale.io
www.easysolutioninfotech.com
web.development.passfolio.com
taxonomy.pikle.online
smggida.com
www.freshtables.in
www.leonardofernandez.com.au
www.gpjimobiliaria.com.br
spandanahospital.care
parkwoodclassactionlawsuit.com
morecrap.com
www.errakis.com
eu.assets.cloud.staging.acurable.com
go.bluepie.in
ritualworkspace.com
www.springsuit.art
www.pmrstudio.it
swadleyroofsystems.com
notification.elespectador.com
ussproject.com
nie.auxswot.com
www.tulalerooms.com
svelje.com
www.dilbar.dev
www.amidy.love
pie.luffanet.com.tw
orebro.studentnode.com
alexa.recipedia.com
totohug.com
beta.readafun.com
app.conceptainvest.com
www.appzotech.com
www.policychangeindex.org
app.quotelo.fr
reclutamiento.k-9apps.com
app.squadra.work
aagam.jainism.info
link.hotkup.com
old.zelpay.solutions
player160-dev.track160.com
portal.debit.cwltech.com.br
www.dccnightcollege.in
windows.toggletooth.com
android.toggletooth.com
exoticperspectives.co.za

Other certificates including the domain name liduna.co.za

(limited to 100 certificates)
www.errakis.com
soniclegacy.it
pixels2.com
beta-v3.tecore-client-cdn.timeedit.io
office.panforyou.jp
imagine.malinowy.me
soniclegacy.it
chats.kaadi.app
sparxreader.com
test.onlyfriends.com.au
app.hizensys.com
payment.i-kasa.com
match16.voicebar.co
sparxreader.com
www.liduna.co.za

Certificate

The complete raw certificate details for www.liduna.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149771387216275016261752115836792567640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 14:24:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 15:22:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.liduna.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/qnzMnGL3wwA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2130 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liduna.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getvgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otodeger.can2el.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aktivebrokers.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gdgwarsaw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.nework.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casaspedro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatiamdoing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.schat.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wafoch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.resbutler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empresa.brendi.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sqer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ion.inova.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isostore.outravibe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinter-bryllup.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagine.malinowy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duordle.chauhan.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selimbenjeddi.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-services-tops.smartbuildings.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.insideskeleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode.getitdone.best'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markbarlow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nancybubicatherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beacons.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palantetours.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alessandragrata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chasersradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.programmingpablo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moisessillva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zabira.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.admin.sliceq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellosuzuki.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpaiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahanpandey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beehive.oberbics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.customgiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail-restaurer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetime-oauth2.zaim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fte.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fauzdar1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.burningsea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sencillogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.refrosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.nadasign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiencethinkers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olsonmatt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.getamal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notify.untilit.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.appfluencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase1.easysolutioninfotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goalerz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apiculturavalles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.midfinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.ptn.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neurale.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easysolutioninfotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.development.passfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxonomy.pikle.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smggida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshtables.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonardofernandez.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpjimobiliaria.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spandanahospital.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkwoodclassactionlawsuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morecrap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.errakis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.assets.cloud.staging.acurable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.bluepie.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritualworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springsuit.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pmrstudio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swadleyroofsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notification.elespectador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nie.auxswot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulalerooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svelje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dilbar.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amidy.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pie.luffanet.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orebro.studentnode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexa.recipedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totohug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.readafun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.conceptainvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appzotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policychangeindex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.quotelo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reclutamiento.k-9apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.squadra.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aagam.jainism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.hotkup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.zelpay.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player160-dev.track160.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.debit.cwltech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dccnightcollege.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows.toggletooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'android.toggletooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exoticperspectives.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/n9ibn113k0M.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ac7cac02900000403004730450220407df344f24e2b36d1444f96f6bc261b111738f46989bf045885b644dace2ca1022100d6b5f9c9dcba2e7fb28dcff19d4d82ca8fa83d20f7b55fdac3d4d7df60333fa8007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ac7cac03a0000040300463044022057ced9bea6ac7b37387edccf117fcbd68f9f6e0cab8188880324ee2e2ab4679c02205b63a233a1f5c6f2246f4103bb90dc002721760f2f4f885e257dd5c2158cf178
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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