lumagroup.it

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number fd:d4:23:73:e4:f8:02:67:12:02:cc:47:99:6f:f6:33 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lumagroup.it

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fd:d4:23:73:e4:f8:02:67:12:02:cc:47:99:6f:f6:33
Serial Number (int): 337396168934030323439351846170547713587
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): de:d3:e0:db:fd:b6:04:88:e4:05:b9:34:df:36:8b:e5:f6:c9:86:5a
Fingerprint (sha256): fe:89:39:f2:e1:04:3b:f4:35:2f:3b:bc:5b:cb:1c:b0:2f:2a:b8:53:15:bb:d5:ca:b3:b8:a1:39:2d:ec:ee:e1

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/r2PLxcpaT_M
CRL Distribution Point: http://crls.pki.goog/gts1d4/kJdFfOPXKN8.crl

Check the revocation status for certificate lumagroup.it

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lumagroup.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lumagroup.it
www.readyplanner.run
backoffice.kahero.co
sciencemart.cam
getcalicocutpants.com
www.kukipos.com
www.trackacow.net
medicospot.com
vaccines.medgrocer.com
open.joinqoala.com
register.rouxsters.xyz
static.ng-run.com
precisebid.com
www.devskies.com
www.getcanveo.com
www.budgetarian.co
about.giveatip.io
betterseafoodsupply.com
leocorp.com
yusufsiregar.com
applink.getrewardsapp.com
jaypee.group
www.luxuryranchnetwork.com
app-ester.liquidityx.com
www.angularcodereview.com
subxtech.com
cartwheelagency.com
www.betsybcooking.com
comical.readybook.xyz
app.gampay.org
links.sqiffer.com
toolkit.finartis.be
www.leocorp.com
www.food-wise.eu
macrostorie.com
www.mmt.asia
jalandharbraces.com
www.paramanu.co.in
www.nomadgeekservices.com
visual-foods.com
www.bluelab.dev
xggdesign.com
tuulahuuskonen.fi
allenandroth-cert.3dcloud.io
zerobase.jp
www.maierchristoph.com
www.firesupper.com
audit.futurestacks.com
srikantherappa.in
varaharmas.hu
yasirfayrooz.com
decision21.cz
gautamarora.in
app.focusokr.com
larkinfolab.be-financieelfit.nl
xenovista.tenki.one
privacy.mobile2box.com
www.cartwheelagency.com
qubitam.com
covidguide.mayamd.ai
data.aleric.pl
threewaysproperty.com
applestore.bencao.it
www.akut-group.com
www.jalandharbraces.com
www.skills.io
mallpromo.pl
fork.sale
srmnotes.live
andrade.app
www.img.sheremetiev.pro
patacon.pedix.app
www.yasirfayrooz.com
klev.org
pidilite.mmcdevops.com
www.clincher.app
stockone.com
restaurant.atlas.kitchen
firebase.aayulogic.io
www.joaoricardofl.com
support.cognite.com
10msite.app
www.andrade.app
indiancommunitytoulouse.org
www.cursosdehistoriaag.com
backpackfordrive.app
arteaimee.com
sushi.partners
bytesmetro.com
link.pley.app
cads.civitimeapp.com
10secondclick.com
pandemic-media-space.com
deedpile.com
fletchergroves.com
www.clubbe.mx
reports.avolta.app
go.heatseekr.app
admin.kuwaitfi.org
venue.kojo-shin.com

Other certificates including the domain name lumagroup.it

(limited to 100 certificates)
blabla.cam
run.photo
routelinks.io
manager.corroo.app
*.lumagroup.it
smclient.maxsold.com
*.lumagroup.it
tour.narimilwaukee.org
manager.corroo.app
run.photo
sullyswork.com
www.rvsexports.in
www.mofti.link
manager.corroo.app
manager.corroo.app
anderson.pesepay.com
lumagroup.it
mikha.ltd
www.ipure.be
blabla.cam
sauven6.inncoded.com
ashland.io
api.pastpay.io
lumagroup.it

Certificate

The complete raw certificate details for lumagroup.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM/jCCC+agAwIBAgIRAP3UI3Pk+AJnEgLMR5lv9jMwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMwMzEwMTQwMDI1WhcNMjMwNjA4
MTQ1OTAwWjAXMRUwEwYDVQQDEwxsdW1hZ3JvdXAuaXQwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDSIDj51QpaAyxyMLB6KzB6Dj8DTy7Gt8co3AacDr/P
443tnK1ZoCC/H6r4RKqCB9U5jrxiCwSJOcegOGmCCtatvrYJ/8cF6LrMPjC4kAIV
Ezgq1IpYcgWyP2MthqppaIib8LPih+znXBICLEjz2WWEwD2n79SJq3tfdjediGt/
F8FDglFPqOfk73xzyq/YywJbdk1OhvlZHpYnEFLZBaT/+1UwyM5OGLr3BqHXdsgV
yCXekGUP/K5ELQn33VOpZX0JiBXXJTW2yHj0IRdkPzaNeq0ThQJQnZVHgbCtGFym
hrHNw6uFPIQ+diUcvYucRtDYkkpF0Yw56A6xV2Vzd76BAgMBAAGjggoUMIIKEDAO
BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUBqnc2RQ9UPUbmO223RHnvRa3DPwwHwYDVR0jBBgwFoAUJeIY
DrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilo
dHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC9yMlBMeGNwYVRfTTAxBggrBgEF
BQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjCCB7cG
A1UdEQSCB64wggeqggxsdW1hZ3JvdXAuaXSCFHd3dy5yZWFkeXBsYW5uZXIucnVu
ghRiYWNrb2ZmaWNlLmthaGVyby5jb4IPc2NpZW5jZW1hcnQuY2FtghVnZXRjYWxp
Y29jdXRwYW50cy5jb22CD3d3dy5rdWtpcG9zLmNvbYIRd3d3LnRyYWNrYWNvdy5u
ZXSCDm1lZGljb3Nwb3QuY29tghZ2YWNjaW5lcy5tZWRncm9jZXIuY29tghJvcGVu
LmpvaW5xb2FsYS5jb22CFnJlZ2lzdGVyLnJvdXhzdGVycy54eXqCEXN0YXRpYy5u
Zy1ydW4uY29tgg5wcmVjaXNlYmlkLmNvbYIQd3d3LmRldnNraWVzLmNvbYIRd3d3
LmdldGNhbnZlby5jb22CEnd3dy5idWRnZXRhcmlhbi5jb4IRYWJvdXQuZ2l2ZWF0
aXAuaW+CF2JldHRlcnNlYWZvb2RzdXBwbHkuY29tggtsZW9jb3JwLmNvbYIQeXVz
dWZzaXJlZ2FyLmNvbYIZYXBwbGluay5nZXRyZXdhcmRzYXBwLmNvbYIMamF5cGVl
Lmdyb3Vwghp3d3cubHV4dXJ5cmFuY2huZXR3b3JrLmNvbYIYYXBwLWVzdGVyLmxp
cXVpZGl0eXguY29tghl3d3cuYW5ndWxhcmNvZGVyZXZpZXcuY29tggxzdWJ4dGVj
aC5jb22CE2NhcnR3aGVlbGFnZW5jeS5jb22CFXd3dy5iZXRzeWJjb29raW5nLmNv
bYIVY29taWNhbC5yZWFkeWJvb2sueHl6gg5hcHAuZ2FtcGF5Lm9yZ4IRbGlua3Mu
c3FpZmZlci5jb22CE3Rvb2xraXQuZmluYXJ0aXMuYmWCD3d3dy5sZW9jb3JwLmNv
bYIQd3d3LmZvb2Qtd2lzZS5ldYIPbWFjcm9zdG9yaWUuY29tggx3d3cubW10LmFz
aWGCE2phbGFuZGhhcmJyYWNlcy5jb22CEnd3dy5wYXJhbWFudS5jby5pboIZd3d3
Lm5vbWFkZ2Vla3NlcnZpY2VzLmNvbYIQdmlzdWFsLWZvb2RzLmNvbYIPd3d3LmJs
dWVsYWIuZGV2gg14Z2dkZXNpZ24uY29tghF0dXVsYWh1dXNrb25lbi5maYIcYWxs
ZW5hbmRyb3RoLWNlcnQuM2RjbG91ZC5pb4ILemVyb2Jhc2UuanCCFnd3dy5tYWll
cmNocmlzdG9waC5jb22CEnd3dy5maXJlc3VwcGVyLmNvbYIWYXVkaXQuZnV0dXJl
c3RhY2tzLmNvbYIRc3Jpa2FudGhlcmFwcGEuaW6CDXZhcmFoYXJtYXMuaHWCEHlh
c2lyZmF5cm9vei5jb22CDWRlY2lzaW9uMjEuY3qCDmdhdXRhbWFyb3JhLmlughBh
cHAuZm9jdXNva3IuY29tgh9sYXJraW5mb2xhYi5iZS1maW5hbmNpZWVsZml0Lm5s
ghN4ZW5vdmlzdGEudGVua2kub25lghZwcml2YWN5Lm1vYmlsZTJib3guY29tghd3
d3cuY2FydHdoZWVsYWdlbmN5LmNvbYILcXViaXRhbS5jb22CFGNvdmlkZ3VpZGUu
bWF5YW1kLmFpgg5kYXRhLmFsZXJpYy5wbIIVdGhyZWV3YXlzcHJvcGVydHkuY29t
ghRhcHBsZXN0b3JlLmJlbmNhby5pdIISd3d3LmFrdXQtZ3JvdXAuY29tghd3d3cu
amFsYW5kaGFyYnJhY2VzLmNvbYINd3d3LnNraWxscy5pb4IMbWFsbHByb21vLnBs
gglmb3JrLnNhbGWCDXNybW5vdGVzLmxpdmWCC2FuZHJhZGUuYXBwghd3d3cuaW1n
LnNoZXJlbWV0aWV2LnByb4IRcGF0YWNvbi5wZWRpeC5hcHCCFHd3dy55YXNpcmZh
eXJvb3ouY29tgghrbGV2Lm9yZ4IWcGlkaWxpdGUubW1jZGV2b3BzLmNvbYIQd3d3
LmNsaW5jaGVyLmFwcIIMc3RvY2tvbmUuY29tghhyZXN0YXVyYW50LmF0bGFzLmtp
dGNoZW6CFWZpcmViYXNlLmFheXVsb2dpYy5pb4IVd3d3LmpvYW9yaWNhcmRvZmwu
Y29tghNzdXBwb3J0LmNvZ25pdGUuY29tggsxMG1zaXRlLmFwcIIPd3d3LmFuZHJh
ZGUuYXBwghtpbmRpYW5jb21tdW5pdHl0b3Vsb3VzZS5vcmeCGnd3dy5jdXJzb3Nk
ZWhpc3RvcmlhYWcuY29tghRiYWNrcGFja2ZvcmRyaXZlLmFwcIINYXJ0ZWFpbWVl
LmNvbYIOc3VzaGkucGFydG5lcnOCDmJ5dGVzbWV0cm8uY29tgg1saW5rLnBsZXku
YXBwghRjYWRzLmNpdml0aW1lYXBwLmNvbYIRMTBzZWNvbmRjbGljay5jb22CGHBh
bmRlbWljLW1lZGlhLXNwYWNlLmNvbYIMZGVlZHBpbGUuY29tghJmbGV0Y2hlcmdy
b3Zlcy5jb22CDXd3dy5jbHViYmUubXiCEnJlcG9ydHMuYXZvbHRhLmFwcIIQZ28u
aGVhdHNlZWtyLmFwcIISYWRtaW4ua3V3YWl0Zmkub3JnghN2ZW51ZS5rb2pvLXNo
aW4uY29tMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0f
BDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0L2tKZEZmT1BY
S044LmNybDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHoyjFTYty22IOo44FIe
6YQWcDIThU070ivBOlejUutSAAABhswJmy0AAAQDAEYwRAIgIOgffoCLKoNQEku8
AbDv+XGGRj38Wkkj8P1veZPu12kCIEVXKmtjyAWP3Nzrcv8QaV1yHtBkcygoypTa
PRkqjb6tAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGGzAmb
FwAABAMARzBFAiEAnunQ82qDFEJtejevvHAQ0rW57orvKOILG6SZj1WWE1ICIG23
oYIP/+KQPkTjAV+1txa2M0rBJnn1fAQ9y9gdqpWCMA0GCSqGSIb3DQEBCwUAA4IB
AQCa0ps45htdRM8AmnG+4x/43I+FRL1cFGLePpFK2TQ7oLxHJXn15Acp5W0FJ3Zg
aY6VVXsRJ255xWpjah+EyMH/dpbLvHa58T7Bt3ImfkGNxmTUtug8Khw6ozi5xZuy
4jNMXPZCeQI1Ded7H56qwMLRpfyfOW5HXHDtkWRC4J6qE8wrwFUQa+yx8ohtlsaR
JHADuvzKoTZHwxk37GNXb58e+ABmMfRB6MRva5JmtubCQSjwZ3A3FHW4W/GZx9XI
Dt2D1fClvsL7cMwPIBfkFYmsZlzwKdb95/aVCUN1C99kEkISWMm9ulyqVIGZqwiO
wHXyJ1hAMr4SeTlv05Igdlm7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337396168934030323439351846170547713587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 14:00:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 14:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lumagroup.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/r2PLxcpaT_M'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumagroup.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readyplanner.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.kahero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencemart.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getcalicocutpants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kukipos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trackacow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicospot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccines.medgrocer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.joinqoala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.rouxsters.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.ng-run.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisebid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devskies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getcanveo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budgetarian.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.giveatip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterseafoodsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leocorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yusufsiregar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink.getrewardsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaypee.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxuryranchnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-ester.liquidityx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angularcodereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subxtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartwheelagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betsybcooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comical.readybook.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gampay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.sqiffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolkit.finartis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leocorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.food-wise.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrostorie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmt.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jalandharbraces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramanu.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nomadgeekservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visual-foods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluelab.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xggdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuulahuuskonen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenandroth-cert.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zerobase.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maierchristoph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firesupper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audit.futurestacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srikantherappa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varaharmas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yasirfayrooz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decision21.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gautamarora.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.focusokr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larkinfolab.be-financieelfit.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenovista.tenki.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.mobile2box.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartwheelagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qubitam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidguide.mayamd.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.aleric.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threewaysproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestore.bencao.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akut-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jalandharbraces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skills.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mallpromo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fork.sale'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srmnotes.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrade.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.img.sheremetiev.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patacon.pedix.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yasirfayrooz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pidilite.mmcdevops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clincher.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.atlas.kitchen'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.aayulogic.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joaoricardofl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cognite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10msite.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrade.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiancommunitytoulouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cursosdehistoriaag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backpackfordrive.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteaimee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushi.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bytesmetro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.pley.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cads.civitimeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10secondclick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandemic-media-space.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deedpile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fletchergroves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubbe.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.avolta.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.heatseekr.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kuwaitfi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venue.kojo-shin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/kJdFfOPXKN8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186cc099b2d0000040300463044022020e81f7e808b2a8350124bbc01b0eff97186463dfc5a4923f0fd6f7993eed769022045572a6b63c8058fdcdceb72ff10695d721ed064732828ca94da3d192a8dbead007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186cc099b1700000403004730450221009ee9d0f36a8314426d7a37afbc7010d2b5b9ee8aef28e20b1ba4998f5596135202206db7a1820fffe2903e44e3015fb5b716b6334ac12679f57c043dcbd81daa9582
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009ad29b38e61b5d44cf009a71bee31ff8dc8f8544bd5c1462de3e914ad9343ba0bc472579f5e40729e56d05277660698e95557b11276e79c56a636a1f84c8c1ff7696cbbc76b9f13ec1b772267e418dc664d4b6e83c2a1c3aa338b9c59bb2e2334c5cf6427902350de77b1f9eaac0c2d1a5fc9f396e475c70ed916442e09eaa13cc2bc055106becb1f2886d96c691247003bafccaa13647c31937ec63576f9f1ef8006631f441e8c46f6b9266b6e6c24128f06770371475b85bf199c7d5c80edd83d5f0a5bec2fb70cc0f2017e41589ac665cf029d6fde7f6950943750bdf6412421258c9bdba5caa548199ab088ec075f227584032be1279396fd392207659bb