www.smart-cities.nrw

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number b9:55:a5:b7:e0:ca:b1:9f:10:97:05:1a:09:ea:24:d7 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.smart-cities.nrw

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b9:55:a5:b7:e0:ca:b1:9f:10:97:05:1a:09:ea:24:d7
Serial Number (int): 246351885619092923480261785224999478487
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 3a:a2:7b:a0:ff:c6:57:88:c8:db:0e:6d:90:35:16:f2:67:d9:b1:02
Fingerprint (sha256): f9:d5:df:81:cb:dd:24:a0:8a:5e:4c:21:01:0d:96:aa:58:34:47:09:d2:a2:44:b1:52:34:c6:49:34:c7:2c:d5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/D374yv06dKo
CRL Distribution Point: http://crls.pki.goog/gts1d4/YQsaXJN7pnA.crl

Check the revocation status for certificate www.smart-cities.nrw

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.smart-cities.nrw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.smart-cities.nrw
www.meetshepherd.no
lawgram.ps
21-media.org
portal-staging.credibilitycapital.io
creations-studios.online
app.2facebattle.ch
recipes.gwilson.dev
link.thebutterapp.com
futurehq.org
www.ignitechannel.net
alexa.rtl.it
www.ondaquadra.net
beta.embed.trakto.io
reliancepartners.loadsure.net
test.bellegueule.fr
marketscanner.xyz
www.sportall.tv
www.scalawilliam.com
admin.fuelservice.org
dev.grfn.io
auth-dev.ehappen.io
www.story-app.com
www.arastusystems.com
onlinestore.theinstock.in
meet.fattm.org
champ.jau.co.jp
2nd-adventure.pyz.jp
www.ronlobo.com
nichicrm.kuritofoods.com
www.invillage.org
compaira.se
admin1111.estore.business
www.urbanistmedia.com
amu.software
app.roundnetclubzurich.ch
www.soniafallahi.com
www.bestellen-vitalve.simplora.nl
dorian.cc
www.nobles.page
trackinn.lernit.app
app.sifmatch.love
warehouse.mitemma.de
www.tnbcompany.com
grupovinoteca.lernit.app
payblue-join.k-lab.io
auth.huulo.app
www.bharatify.in
woordmars.citolab.nl
albertmitty.com
preve.lernit.app
ondeencadernar.albumbox.com.br
thekitchenette.estore.business
www.ultimateos.app
imports.infusioncenter.org
www.miskybakery.com
predictable.xyz
5hihan.com
app.path.pro
functions.core.api-dev.uodka.app
www.sorender.com
dashboard.sanwo.io
hub.geo2.com
itemlibrary.citolab.nl
ellindero.es
list.castfy.me
bills.signroots.in
tru.decervo.com
www.calculators-and-converters.com
apps.ninoxnet.com.ar
roofme.online
stage.automatoai.com
admin-staging.pubq.se
lmade.cz
www.tienda.canembasis.com
vtpdev.com
stage.verasana.com
www.dharmaresearchlab.com
jp.dexker.com
whispersofthewilderness.com
alpha.admin.farmact.de
www.maximilian.solutions
nsjaisoor.com
payments-devel.virtualpbx.com
medik-dom.fr
app.prdjy.com
verve27.com
sites.vecinos360.com
reference.llewnroc.com
devel.karmarasoi.com
www.cannabismd.nyc
www.erikschierboom.nl
www.codeguanet.com
www.vidsify.com
2-pics-1-word.fedmich.com
portal.waitr.co.za
thekitchenetteadmin.estore.business
www.gypsure.com
soundremedy.com
www.covid.la

Other certificates including the domain name smart-cities.nrw

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.smart-cities.nrw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 246351885619092923480261785224999478487
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 18:02:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 18:59:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.smart-cities.nrw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/D374yv06dKo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2087 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smart-cities.nrw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetshepherd.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawgram.ps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21-media.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-staging.credibilitycapital.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creations-studios.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.2facebattle.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipes.gwilson.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.thebutterapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurehq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ignitechannel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexa.rtl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ondaquadra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.embed.trakto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reliancepartners.loadsure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.bellegueule.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketscanner.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportall.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scalawilliam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fuelservice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.grfn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-dev.ehappen.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.story-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arastusystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinestore.theinstock.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.fattm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champ.jau.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2nd-adventure.pyz.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ronlobo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nichicrm.kuritofoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compaira.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin1111.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urbanistmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amu.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.roundnetclubzurich.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soniafallahi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestellen-vitalve.simplora.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorian.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nobles.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackinn.lernit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.sifmatch.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouse.mitemma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnbcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupovinoteca.lernit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payblue-join.k-lab.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.huulo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bharatify.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woordmars.citolab.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albertmitty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preve.lernit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondeencadernar.albumbox.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekitchenette.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultimateos.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imports.infusioncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miskybakery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predictable.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5hihan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.path.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'functions.core.api-dev.uodka.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.sanwo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.geo2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itemlibrary.citolab.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellindero.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'list.castfy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bills.signroots.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tru.decervo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calculators-and-converters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.ninoxnet.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofme.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.automatoai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-staging.pubq.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmade.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tienda.canembasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtpdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.verasana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dharmaresearchlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.dexker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whispersofthewilderness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.admin.farmact.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maximilian.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsjaisoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments-devel.virtualpbx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medik-dom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.prdjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verve27.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.vecinos360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reference.llewnroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devel.karmarasoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabismd.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erikschierboom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codeguanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidsify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-pics-1-word.fedmich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.waitr.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekitchenetteadmin.estore.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gypsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundremedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covid.la'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/YQsaXJN7pnA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b871da9f40000040300473045022006a744cb038b7df4d73c040e09e8f40f1dd7fd23a475b1bf1344b8bf88ec070d0221009223944df95515b6dd589d756307067b56ea9b4a30d584366e9e227e71b6882800770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b871da9ec0000040300483046022100f1ac73a49638525e36b622a643fb8a44e177f35411d4590f1941290793d3ed72022100c5fe2508b84234ecc6c06ef9d6b9f6a9acc83e9818d89289de87cf992d99ea36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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