routine.oyen.de

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 71:55:60:ae:01:d5:d9:30:10:40:c0:b3:47:ad:ab:44 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=routine.oyen.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:55:60:ae:01:d5:d9:30:10:40:c0:b3:47:ad:ab:44
Serial Number (int): 150646069654261193878451637325791079236
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 7b:53:dd:6b:84:4e:8b:90:3e:ee:d6:df:0a:62:8c:35:a4:78:ce:44
Fingerprint (sha256): f8:f4:80:78:ba:7d:24:70:55:c8:68:23:10:15:89:95:60:a0:64:aa:f5:6b:11:e2:67:e9:cc:34:d7:2d:d3:6b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/PnG3SVGuRmM
CRL Distribution Point: http://crls.pki.goog/gts1d4/3VO01BEoEj4.crl

Check the revocation status for certificate routine.oyen.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for routine.oyen.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

routine.oyen.de
tredco.dk
ecole-de-natation-erdeven.fr
mytownportal.fr
arvaakuva.valokuvataiteenmuseo.fi
pfg.dominos.com.eg
dation.medewerkerstatus.eu
stg.nekobeya.pechika.jp
www.dmccarthy.io
rxextent.link
email.lezsak.hu
clients.avecor.fi
creator.effy.live
bubistats.hu
admin.apollofor.me
staging.admin.apollofor.me
www.admin.apollofor.me
milanmenezes.me
navflow.net
autoquiz.net
trondheimhundehall.no
www.staging.admin.apollofor.me
www.alilien.org
www.jaramilla.org
sherwoodforestatl.org
nl.debdb.com
www.bryanlong.tech
lab.storybook.vezham.com
auth.planbim.io
www.chameon.com
kcyclingcoaching.com
philippines-presidents-quiz.fedmich.com
globalboletos.com
bestcard.com.ar
guazzabuglio.com
www.newnumberapp.com
dashboard.websays.com
www.vinedevelop.net
kwidil.com
mattnitzken.com
yara.mountainhops.co.za
www.naba.money
masmas.xyz
www.simulasi.studio
ag-kiosk-admin.coconut-studio.com
foodstep.deckersdigital.be
nearbhai.com
test.metrics.bcregistry.gov.bc.ca
www.thylacine.nl
studio.webfoersterei.tech
nanumdreamwellness.com
share.belifeapp.net
dev.metrics.bcregistry.gov.bc.ca
www.outerlimits.zone
post.joonitalk.kr
pokemon.sohyeonkim.com
delta-config.vng-tech.co.th
www.practicealert.projects.barbenheim.de
www.jcfotovoltaicos.com.br
app.medexperts.com.br
enclaveitservices.com
manamakal.com
siliconvillage.dev
andrewdsong.com
anthonyhenley.com
share.nusic.fm
www.reyanssh.co.in
getsafehouse.com
soybendicion.org
www.perfectmedia.org
capionic.com
vishnuananthan.com
online.qizy.in
kodomotube.shwld.app
link.spaceflow.io
kailashmart.estore.business
admin1052.estore.business
test.fairchain.art
floracoiffure.ca
auth.diminuendo.ca
accquaglobal.com
admin.lawyerconveyance.ca
n2d.cc
residentfees.veltech.com.au
acdisaster.com
link.amadornes.com
staging.fishfacts.com
app.skilltech.ph
gambardella-therapeute.fr
tamferforje.com
flikecard.com
abstimmungen.tagesanzeiger.ch
qa-dl.cardbyte.ai
goodgoings.com
www.salimhartono.tech
www.calebglass.com
spoders.com
splingoapps.com
sarogyo.in
switchcaseinfotech.com

Other certificates including the domain name oyen.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for routine.oyen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150646069654261193878451637325791079236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 04:18:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 05:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'routine.oyen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/PnG3SVGuRmM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routine.oyen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tredco.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecole-de-natation-erdeven.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytownportal.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvaakuva.valokuvataiteenmuseo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfg.dominos.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dation.medewerkerstatus.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.nekobeya.pechika.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmccarthy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxextent.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.lezsak.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.avecor.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creator.effy.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubistats.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apollofor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.admin.apollofor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.apollofor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milanmenezes.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoquiz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trondheimhundehall.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.admin.apollofor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alilien.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaramilla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherwoodforestatl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.debdb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryanlong.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.storybook.vezham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.planbim.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chameon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcyclingcoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippines-presidents-quiz.fedmich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalboletos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcard.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guazzabuglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newnumberapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.websays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinedevelop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwidil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattnitzken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yara.mountainhops.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naba.money'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masmas.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulasi.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ag-kiosk-admin.coconut-studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodstep.deckersdigital.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nearbhai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.metrics.bcregistry.gov.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thylacine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.webfoersterei.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanumdreamwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.belifeapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.metrics.bcregistry.gov.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outerlimits.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post.joonitalk.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemon.sohyeonkim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta-config.vng-tech.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practicealert.projects.barbenheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcfotovoltaicos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.medexperts.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enclaveitservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manamakal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siliconvillage.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewdsong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthonyhenley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.nusic.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reyanssh.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsafehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soybendicion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capionic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vishnuananthan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.qizy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodomotube.shwld.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.spaceflow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kailashmart.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin1052.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.fairchain.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floracoiffure.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.diminuendo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accquaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lawyerconveyance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n2d.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residentfees.veltech.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acdisaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.amadornes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.fishfacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.skilltech.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gambardella-therapeute.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamferforje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flikecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abstimmungen.tagesanzeiger.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-dl.cardbyte.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodgoings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salimhartono.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calebglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splingoapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarogyo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchcaseinfotech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/3VO01BEoEj4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cd2e89d9a0000040300483046022100975c109ed167e6d2791ef8ef7e5f996354e49cca391e5724b5f7376ed277af0102210096531c81ca17d341279a77f585dcc5247d4a05caec475f05a299a30f147e04b8007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018cd2e89dca0000040300473045022100847cec4c0175f8a1af709a2448aca3fa977f04ea032e676fc75234f0e41908230220190d1298761a62238402e8ceadaccee47e49630efa110ddaddf2a497fee76405
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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