www.aviita.li

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ef:d6:63:a1:6f:a6:da:4b:0a:57:e0:82:62:6e:78:c9 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.aviita.li

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ef:d6:63:a1:6f:a6:da:4b:0a:57:e0:82:62:6e:78:c9
Serial Number (int): 318798663269160821684815450256188537033
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 13:d3:db:19:e4:69:a3:6e:4d:ab:99:3f:9f:02:ed:50:88:bc:e9:0e
Fingerprint (sha256): f2:76:16:94:75:44:8a:0a:d5:24:82:08:14:fa:5e:f3:ff:b3:d0:ef:ec:6b:c3:ae:4f:a8:d0:a9:f8:65:ea:dc

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/WYAK-ML-5qQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/iNbeROK640A.crl

Check the revocation status for certificate www.aviita.li

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aviita.li

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aviita.li
dev.verve.money
craftbeer-prod.aimoto-dev.com
a-corp.anote.cloud
app.emr.shipzzer.com
www.c19model.com
www.elektro-placzek.cz
midorepo.okiryoku.org
brainblock.nl
shop.csnk.hu
lp.unique-career.jp
www.cassaco.com.br
www.blik.mbitgames.cloud
admin.staging.weactforgood.com
www.rapoporras.com
www.robotega.com
onlyclass.co.kr
www.neptunpizza.dk
sasolattc.liveevent.co.za
markmywords.criscorrea.dev.br
www.demonsandangels.co.il
www.vofstudio.art.br
app.superbrain.edu.vn
pubhop.estore.business
link.betm.com.au
app-s.squadlinkapp.com
fhdamd.dev
crowbargames.com
iberolabel.com
jacksondmiller.com
epicrideweather.com
tateditor.app
api.tostao.app
tradeforgood.equix.app
prod-resetpasswords.inplass.online
www.athoth.com
mikeyriver.com
ghaaflan.com
auth.goodmoves.com
links.bookaway.com
www.banquetteam.com
siddhivinayakconsultancy.org
habitual-coffee.co.uk
admin.idana.app
adamsware.org
golightlyplus.com
maps.xcode.no
sublicolores.es
go.mdmc.app
gloriasalvucci.it
gogorentals.joyride.tech
get.evolutwellness.com
beautiesbrowser.com
www.softwaregoodiebag.com
wordpress-login-defender-plugin.kirilkirkov.com
ur-bn.at
zakandhollywedding.co.uk
cjdev.olabbio.com
www.liamandgabby.co.nz
www.auth-cms.com
uyudunmu.net
veronicaquintana.com
abigailcameron.com
iluvatar.indefini.do
www.rugcityindia.com
jarnemyr.com
jervistest.hkmci.com
firebase-dev.castcle.com
www.gkotdev.com
scudoimoveis.com.br
www.roguesocks.org
farmerspoint.co
bustrack.airparks.com
dadprogrammer.com
office.unicornsnow.com
fm.addxt.com
www.ivski.rocks
solar.m1studio.co
chatwidget.supersuporte.app
dolpermtrack.com
www.easyfinancialcharts.com
app.mow.anyting.io
nakoa.m1studio.co
login.shelfy.com.au
share.cityprime.club
www.mikkelwestermann.com
www.linfield.co.uk
www.yonjins.com
erp.mile.cloud
smfs.zuke.pro
www.arith.app
v22.gctc.in
www.aichannels.app
www.dadprogrammer.com
querypro.io
www.sixthman.co
api.playitfwd.io
nirdeshika.me
www.urbanstix.ca
tldrcomicbooks.com

Other certificates including the domain name aviita.li

(limited to 100 certificates)
martech-gcf.dbmax.com.br
martbhiadmin.estore.business
sales.ishipto.vn
SRV01.aviita.li
www.marcjulian.de
service.aviita.li
www.jgwphotography.com.au
luis-valtierra.com
admin.pampam.jp
hostragon.com
prototype.chatcenter.ai
app.scontomio.com
app.pedidos.procab.com.br
www.aviita.li
robase.gameloaded.net
www.davidedet.com
desingfloor.com.ar
www.jgwphotography.com.au
service.aviita.li
www.christmasjigsawpuzzle.com
bangalore.servicemall.in
aviita.li
www.proxyponto.com.br
xsfera.ru
www.mydaytracker.net
www.eemerg.xyz
app-preprod.irrigeasy.com
melvinvanvliet.nl
www.stacygaudreau.com
service.aviita.li
www.yabalak.fi
srv02.aviita.li
visilaw.com
community.mlptf.org.my
test.phamdac.ga
enceladus.consulting
srv02.aviita.li
odmrestaurants.com
matthewvictor.io
ozpoints.roberthung.com
www.aviita.li
test.aviita.li

Certificate

The complete raw certificate details for www.aviita.li in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318798663269160821684815450256188537033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 08:38:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 09:36:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aviita.li'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/WYAK-ML-5qQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2047 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviita.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.verve.money'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftbeer-prod.aimoto-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-corp.anote.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.emr.shipzzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c19model.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektro-placzek.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midorepo.okiryoku.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainblock.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.csnk.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.unique-career.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cassaco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blik.mbitgames.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.staging.weactforgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapoporras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robotega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyclass.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neptunpizza.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasolattc.liveevent.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markmywords.criscorrea.dev.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demonsandangels.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vofstudio.art.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.superbrain.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubhop.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.betm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-s.squadlinkapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhdamd.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowbargames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iberolabel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksondmiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicrideweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tateditor.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.tostao.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeforgood.equix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-resetpasswords.inplass.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athoth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeyriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghaaflan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.goodmoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.bookaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banquetteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siddhivinayakconsultancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitual-coffee.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.idana.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamsware.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golightlyplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.xcode.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sublicolores.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.mdmc.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gloriasalvucci.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogorentals.joyride.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.evolutwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautiesbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softwaregoodiebag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpress-login-defender-plugin.kirilkirkov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur-bn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zakandhollywedding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjdev.olabbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liamandgabby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auth-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uyudunmu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veronicaquintana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abigailcameron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iluvatar.indefini.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugcityindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarnemyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jervistest.hkmci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase-dev.castcle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gkotdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scudoimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roguesocks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmerspoint.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bustrack.airparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadprogrammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.unicornsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fm.addxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ivski.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar.m1studio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatwidget.supersuporte.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolpermtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyfinancialcharts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mow.anyting.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakoa.m1studio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.shelfy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.cityprime.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikkelwestermann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yonjins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.mile.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smfs.zuke.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arith.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v22.gctc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aichannels.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dadprogrammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querypro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sixthman.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.playitfwd.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nirdeshika.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urbanstix.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tldrcomicbooks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/iNbeROK640A.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018acbb4c5ec00000403004730450220068a244298d6b668864a4452356e986f1e1ee12f59f35cdc9c834527e674316a022100a5fba069c81af8a75acedb08ada8ac70ec996e77d512a0e2a944e20c3d501def0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018acbb4c6250000040300483046022100f198663727d7bbcd7e30476ff3046d5104f6d948ad28cdf51eedec56c5f383f4022100c01293ceda2ce5aee6e470b9483de752317dd249deaf669dc373831f9629ae91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a55b43fd46d5597265fceef8c1531d0b905e365aca7befe03de314607fdeb51308d4b297aa226e0831b1ca836d4890ab3c9e6fbd44e7a5730746c7d7c4be4201e1db14c19eb2bd7f2d692afde6daa04ca2476f694c4234d589d108bebaf2751e0bc357bfe6f7cfdd6e8bda93d39e688c9d5ca761a83adcb4890b8baa446b6a5ee091069055bc06a6faf9da920804cf11f8612d0b9c13ee3d6e49a5ee8de3b45523406714bc183d31c7b86c0e82f20c2b053877fe11a73b78be3130c4fa868ca640123734a190107671507d2dbfd8a48463e15904a80774c238a767c46e59ec9e9afca8c5a0461c136c0facb8b7125c4cb540189869e2802bb87c169e237bd980