ducksoftware.net

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 1c:32:1d:b8:44:2d:a1:15:0a:64:91:4d:84:da:dd:72 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ducksoftware.net

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 1c:32:1d:b8:44:2d:a1:15:0a:64:91:4d:84:da:dd:72
Serial Number (int): 37478601513864937364681907933789478258
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): ae:f6:33:a6:84:bd:3a:a7:c6:7f:ad:fd:c3:fc:34:9e:aa:f9:e6:c7
Fingerprint (sha256): f3:4d:83:9d:9c:e7:26:02:3d:60:62:38:75:31:b6:1b:95:74:a0:6b:29:48:30:b6:1c:70:39:f3:f8:81:66:f5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/mFBERxNh8z8
CRL Distribution Point: http://crls.pki.goog/gts1d4/_raaYb_nKPg.crl

Check the revocation status for certificate ducksoftware.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ducksoftware.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ducksoftware.net
vaplayer.com
www.yosombo.com
www.cosmicpaws.io
adminspace.woolili.com
mesa.cardapioweb.com
noahgwynn.io
advanced-todo.com
www.justpistachio.com.tr
www.desiertosideral.mx
www.liondefenceteam.com
sofboxadmin-vue.iqonic.design
mcg.banpunext.dev
www.allsmiles.one
calendar.countit.hr
utechpa.com
www.brandon32.com
www.cashierbasket.hu
www.zachlyoncreative.com
densityatlas.org
letspredict.pw
www.liftjob.co.uk
meet-eu.sunbisoft.com
www.teamgigray.com
analytics.otcf.pl
www.supplyspace.in
www.yampis.com
curier.dev
paricall.org
app.cluey.pt
gestao.sistemaagiliza.com.br
admin.bluestars.org
www.nplusnfilms.com
ezcheque.xyz
sushiwang.pedidomovil.es
beforevote.info
myaccount.thewaybackvr.com
www.yanhooligan.com
vania-ubaya.talentlytica.com
www.team1806.com
www.source.icu
simpledataset.com
cvmagnolia.consulting
www.words.win
www.deftly.tech
www.laikasjourney.com
daves.dev
prjatu.gorenjc.si
www.frogmonster.net
royce.blog.dyly.life
dev.boxbollen.com
www.cert-print.de
kavanamasterbroker.com
url.vipnunes.com
www.cojetypico.cz
utahathleticscamps.com
app.octoboard.io
prodlinks.incontrapiattaforma.interacta.space
www.kuwais.sa
www.uanhasi.com
shapshapbikes.co.za
www.webdevmobiledev.com
termin-boost.fielmann-lt.de
kulturaushang.de
www.ventwell.no
student.onita.academy
admin-staging.driverguide.io
prodotti.ultrapremiumdirect.it
booking-panel.kahu.work
www.tarteel.io
alz.jodacare.com
mediawall.qeiicentre.london
nitham.in
almayarte-dev.admin.randev.com.ar
staging.business.mylespudo.com
powertower.daveyton.org
auth.stow.ng
www.nickreu.space
app.merca.team
strathsolidarity.co.uk
www.quots.in
fuckxeth.org
app.kassku.cloed.id
quizplace.ru
labelseek.nl
sikap.ipdn.ac.id
www.zipzoneunicon.com
www.builder-uat.hedged.in
salespot.id
link.salamana.fi
giftadmin-uat.clubtrip.app
www.wherearethecopelands.com
auth0-dev.ready.gg
onrouteservices.co.uk
pgfound.org
pondicherry.bookdroptaxi.com
wordfeed.app
www.anshikacabs.in
www.diaryapp.pet
stanyou.de

Other certificates including the domain name ducksoftware.net

(limited to 100 certificates)
homearquitectura.com
www.therapeasy.co
app.harvestassist.com
ogh.am
datev.chgrs.link
richardjakins.com
pacecapitalmgt.com
www.3pondsdigital.io
acuitymd.com
www.sulimanalsarraf.me
amigao.appshare.com.br
camilleburkhardt.com
beforevote.info
ajorgensen.dev
web.journee.live
checkin.uat.theout.com
d-olympus.store
fishchenko.com
web.journee.live
checkin.uat.theout.com
www.kylemok.com
pacecapitalmgt.com
prjatu.gorenjc.si
fishchenko.com
app.dekostream.com
classroom.cholatrek.io
bodymap.ai
memoo.io
staging.heroesbibletrivia.org
prlr.cc
ogh.am
bodymap.ai
student.octorun.com
gallery.stephenlittleton.com
itp.esad.pt
chrisbryant.net
ws.heavenya.com
www.tayoublaise.net
prlr.cc
ajorgensen.dev
www.teamgigray.com
www.blate.app
itp.esad.pt
ducksoftware.net
richardjakins.com

Certificate

The complete raw certificate details for ducksoftware.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37478601513864937364681907933789478258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 01:25:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 02:22:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ducksoftware.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/mFBERxNh8z8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2062 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducksoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yosombo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmicpaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminspace.woolili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesa.cardapioweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noahgwynn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanced-todo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justpistachio.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desiertosideral.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liondefenceteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofboxadmin-vue.iqonic.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcg.banpunext.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsmiles.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.countit.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utechpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandon32.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashierbasket.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zachlyoncreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'densityatlas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letspredict.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftjob.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet-eu.sunbisoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamgigray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.otcf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supplyspace.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yampis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curier.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paricall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cluey.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestao.sistemaagiliza.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bluestars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nplusnfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezcheque.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushiwang.pedidomovil.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beforevote.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.thewaybackvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yanhooligan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vania-ubaya.talentlytica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.team1806.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.source.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpledataset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvmagnolia.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.words.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deftly.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laikasjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daves.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prjatu.gorenjc.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frogmonster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royce.blog.dyly.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.boxbollen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cert-print.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kavanamasterbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url.vipnunes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cojetypico.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahathleticscamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.octoboard.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodlinks.incontrapiattaforma.interacta.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuwais.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uanhasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapshapbikes.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdevmobiledev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termin-boost.fielmann-lt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulturaushang.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ventwell.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.onita.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-staging.driverguide.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodotti.ultrapremiumdirect.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking-panel.kahu.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tarteel.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alz.jodacare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediawall.qeiicentre.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitham.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almayarte-dev.admin.randev.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.business.mylespudo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertower.daveyton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.stow.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickreu.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.merca.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strathsolidarity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quots.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuckxeth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kassku.cloed.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizplace.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labelseek.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikap.ipdn.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zipzoneunicon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.builder-uat.hedged.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salespot.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.salamana.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftadmin-uat.clubtrip.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wherearethecopelands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth0-dev.ready.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrouteservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgfound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pondicherry.bookdroptaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordfeed.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anshikacabs.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diaryapp.pet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanyou.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/_raaYb_nKPg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e4a3a7bac000004030048304602210090b6ba7bf2857939c4fafe1cca0b036d0d769edf06eaf62ad4f49aeb7342e3c8022100b119c71549a52a30428bf92cf8078bf663805145c6e8d56b9f94c1cec1029527007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e4a3a7bf60000040300483046022100d752c32fde1caa2a7332fe69b394dadf5ccb5e841320118853195ad4e24975f9022100f0aa8131cae362b615021be3a17eee1f05a2cb286b0241ab16e01e3a3fc44d51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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