www.natthrafn.is

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 33:d0:b4:96:66:37:e2:57:0a:00:00:00:00:b5:3c:e7 was issued on by Google Trust Services.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.natthrafn.is

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:d0:b4:96:66:37:e2:57:0a:00:00:00:00:b5:3c:e7
Serial Number (int): 68874288281194018887423893355076336871
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): ff:ff:ce:18:22:ed:16:3f:59:57:cd:ca:cb:e1:f8:2f:6b:a5:3d:c8
Fingerprint (sha256): f7:07:f8:f2:97:a9:c1:79:e9:dd:7c:49:9e:76:06:c4:c3:8d:72:63:1b:c7:c8:9a:70:50:86:0e:4a:c1:c7:79

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crls.pki.goog/gts1d2/eRvXoRZX6TM.crl

Check the revocation status for certificate www.natthrafn.is

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.natthrafn.is

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.natthrafn.is
www.atmsubwayalert.it
bigday.cecilecody.life
uurkhaichin.mn
www.uurkhaichin.mn
keytraining.net
lensbot.net
goog.mcbarron.net
www.claustrofonie.nl
orthos.no
checkin.aidslifecycle.org
app.air-melody.org
staging.buildyourcareerwi.org
tracker.cwapolitical.org
gdgankara.org
www.rseek.org
spindrops.org
www.fuksman.ru
www.heavyfall.co.uk
dev.casval.trade
www.simonpiggott.co.uk
paypal-generate.webdigi.co.uk
big.motes.world
dream.jonathanjoe.xyz
irmsa-techlibrary.org.za
capetowntabernacle.co.za
www.irmsa-techlibrary.org.za
pharmapp.instantscripts.com.au
placenote.vertical.ai
www.barbell.app
noname.cultify.app
dotitmtss.app
graphology.app
kaasplankje.mcdonaldsnederland.app
www.qwest.app
www.steeltech.app
9eme.art
never4get2.com.au
www.clepsydra-bien-etre.be
arvferramentas.com.br
magoleen.com.br
demo.pontix.co
store.marvindelivery.com.br
app-dev.medzy.ca
outsource.creacl.co
www.sylviacristina.com.br
www.hanyu.co
salonaz-turn.m1studio.co
1on1tracker.com
adhvans.com
www.alacadimi.com
atomtiming.com
www.angularlearning.com
v1.azzle.com
www.blexel.com
u.cerberu.com
link.clintrialreferapp.com
code3dgames.com
constanzehaas.com
www.delius-company.com
www.realmorigins.com
discommis.com
oruyo.doikougei.com
app.drinkko.com
www.luista.com
guitar.merencia.com
oleggromov.com
www.photoradarapp.com
reportbugz.com
email-images.reverbnation.com
revistaelrepuesto.com
www.revistaelrepuesto.com
www.rhemaboyo.com
rugbyexplained.com
sso.ramp.com
www.scsiamleather.com
status.betaroom.de
www.fruity-flowers.de
wakeapp.a7md0.dev
stg.sns.mm-sns.wiz-net.dev
dashboard.w3.digital
flatchat.hk
ioffers.inlabdigital.es
vaarta.info
www.bizsquad.io
www.vaarta.info
factflow.io
staging.lunch.givve.io
utrodeo.lapieza.io
ledic.io
www.parkey.io
test.meeting.calendr.it
agent.chiedimi.it
manga-daisuki.site
tabula-lab.site
www.pant-s.jp
cowboys.fancard.me
falcons.fancard.me
staging.expenses.ruesch.me
ambassadeurstourismedurable.org

Other certificates including the domain name natthrafn.is

(limited to 100 certificates)
www.natthrafn.is
quliner.co.id
www.qwest.app
www.dogan-osthofen.com
www.qwest.app
test.fastgrowth.co
www.builds.ac
nobul.com
link.clintrialreferapp.com
placenote.vertical.ai
lumiphotos.app
link.clintrialreferapp.com
placenote.vertical.ai
hioperator.com
www.natthrafn.is

Certificate

The complete raw certificate details for www.natthrafn.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68874288281194018887423893355076336871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-17 16:38:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-15 16:38:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.natthrafn.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2032 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natthrafn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atmsubwayalert.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigday.cecilecody.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uurkhaichin.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uurkhaichin.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keytraining.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lensbot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goog.mcbarron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claustrofonie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthos.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin.aidslifecycle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.air-melody.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.buildyourcareerwi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracker.cwapolitical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdgankara.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rseek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spindrops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuksman.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heavyfall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.casval.trade'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simonpiggott.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paypal-generate.webdigi.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big.motes.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dream.jonathanjoe.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irmsa-techlibrary.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capetowntabernacle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irmsa-techlibrary.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmapp.instantscripts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placenote.vertical.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbell.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noname.cultify.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotitmtss.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphology.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaasplankje.mcdonaldsnederland.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qwest.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steeltech.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9eme.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'never4get2.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clepsydra-bien-etre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvferramentas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magoleen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.pontix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.marvindelivery.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev.medzy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsource.creacl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sylviacristina.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanyu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salonaz-turn.m1studio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1on1tracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adhvans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alacadimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomtiming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angularlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.azzle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.cerberu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.clintrialreferapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code3dgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constanzehaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delius-company.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realmorigins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discommis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oruyo.doikougei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.drinkko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitar.merencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oleggromov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photoradarapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportbugz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-images.reverbnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revistaelrepuesto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revistaelrepuesto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhemaboyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.ramp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scsiamleather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.betaroom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fruity-flowers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakeapp.a7md0.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.sns.mm-sns.wiz-net.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.w3.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatchat.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ioffers.inlabdigital.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaarta.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bizsquad.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaarta.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factflow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lunch.givve.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utrodeo.lapieza.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledic.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkey.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.meeting.calendr.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.chiedimi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manga-daisuki.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabula-lab.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pant-s.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowboys.fancard.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falcons.fancard.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.expenses.ruesch.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambassadeurstourismedurable.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d2/eRvXoRZX6TM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001784144bfd000000403004730450221008ee64b492c510a955c1fc75250e9d7bd4f162f38ad46d9699f8a18ace6d4f231022020a6e2771f1f3211106ac9c33a4ed57068655a7d4b9acda4100f25e58b8bd6150076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001784144c0f700000403004730450220777f42a3bfe7394bb563ef736d4d8ef2ddabdc42984af289ff3cca892c2046130221009e0c53dd76a2e920970f0652b0f1bc8280defc75714a628185c4306a4120d3e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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