misc-sni.google.com

- Google LLC -

Issued by Google Internet Authority G3

About this certificate

This digital certificate with serial number 18:d3:99:85:5d:8c:3f:58 was issued on by Google Trust Services.

With 150 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:d3:99:85:5d:8c:3f:58
Serial Number (int): 1788942275075391320
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 3a:f9:76:59:27:dc:6f:03:91:46:b6:19:f6:3e:e6:3b:bd:95:ec:4b
AuthorityKeyId: 77:c2:b8:50:9a:67:76:76:b1:2d:c2:86:d0:83:a0:7e:a6:7e:ba:4b

Fingerprint (sha1): 56:4a:62:08:29:71:4f:b1:38:33:db:55:e9:67:fb:9a:7b:c2:e4:d6
Fingerprint (sha256): 00:46:3a:b4:39:b4:02:89:29:61:cd:41:52:94:9f:9b:f1:78:f5:0f:74:94:7c:50:34:fa:88:b3:97:c4:5f:79

Issuing Certificate URL: http://pki.goog/gsr2/GTSGIAG3.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/GTSGIAG3
CRL Distribution Point: http://crl.pki.goog/GTSGIAG3.crl

Check the revocation status for certificate misc-sni.google.com

150

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for misc-sni.google.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

misc-sni.google.com
*.1ucrs.com
*.abc.xyz
*.adsensecustomsearchads.com
*.ampproject.com
*.ampproject.net
*.ampproject.org
*.androidify.com
*.app.goo.gl
*.brocaproject.com
*.cdn.ampproject.org
*.chronicle.security
*.chronicleforgood.com
*.crossmediapanel.com
*.datalab.cloud.google.com
*.dataliberation.org
*.dev.google-syndication.com
*.digitalassetlinks.org
*.domains.google
*.earlydays.google
*.earthengine.google.co.in
*.earthengine.google.com
*.fiber.google.com
*.g.dev
*.go-lang.com
*.go-lang.net
*.go-lang.org
*.golang.com
*.golang.net
*.golang.org
*.google-syndication.com
*.googleacquisitionmigration.com
*.googleblog.com
*.googlecert.net
*.grow.google
*.gvt5.com
*.hats.goog
*.lanternal.com
*.liftware.com
*.liftware.jp
*.mapmaker.google.com
*.nomulus.foo
*.openthread.io
*.openweave.io
*.page.link
*.picasaweb.com
*.picasaweb.net
*.picasaweb.org
*.picnik.com
*.pki.goog
*.rbm.goog
*.savethedate.foo
*.searchingforsyria.org
*.source.bazel.build
*.staging.google-syndication.com
*.tiltbrush.com
*.webmproject.org
*.whosdown.com
*.xn--9kr7l.com
*.xn--flw351e.com
*.xn--ggle-55da.com
*.xn--gogl-0nd52e.com
*.xn--gogl-1nd42e.com
*.xn--ngstr-lra8j.com
*.xplr.co
*.zynamics.com
1ucrs.com
abc.xyz
adsense.com
adsensecustomsearchads.com
adsenseformobileapps.com
ampproject.com
ampproject.net
ampproject.org
androidify.com
app.goo.gl
brocaproject.com
bugs.webrtc.org
chronicle.security
chronicleforgood.com
code.webrtc.org
colab.research.google.com
com.google
crossmediapanel.com
dataliberation.org
deepmind.com
dg-meta.video.google.com
digitalassetlinks.org
domains.google
earlydays.google
fastlane.ci
g.dev
gapi.waze.com
go-lang.com
go-lang.net
go-lang.org
golang.com
golang.net
golang.org
googleblog.com
googlecert.net
googlestore.com
grow.google
hats.goog
iamremarkable.org
lanternal.com
lers.google
liftware.com
liftware.jp
nomulus.foo
openthread.io
openweave.io
page.link
picasaweb.com
picasaweb.net
picasaweb.org
picnik.com
pixate.com
pki.goog
rbm.goog
registry-qa.google
registry-sandbox.google
registry.google
savethedate.foo
searchingforsyria.org
source.bazel.build
support.registry-qa.google
support.registry-sandbox.google
support.registry.google
thegooglestore.com
tiltbrush.com
webmproject.org
whosdown.com
www.adsense.com
www.deepmind.com
www.googlestore.com
www.iamremarkable.org
www.pixate.com
www.registry-qa.google
www.registry-sandbox.google
www.registry.google
www.thegooglestore.com
xn--9kr7l.com
xn--flw351e.com
xn--ggle-55da.com
xn--gogl-0nd52e.com
xn--gogl-1nd42e.com
xn--ngstr-lra8j.com
xplr.co
zynamics.com

Other certificates including the domain name google.com

(limited to 100 certificates)
netcracker-staging.corp.google.com
*.google.com
m.google.com
mx.google.com
*.vp.video.l.google.com
uberproxy-cctlds.corp.google.com
ax-uat-ingestion02.corp.google.com
misc.google.com
www.google.com
*.google.com
*.c.docs.google.com
uberproxy-san.cert.corp.google.com
edge-static.google.com
*.ext.google.com
warpspeed-color.corp.google.com
uberproxy-san.corp.google.com
cert-test.sandbox.google.com
upload.video.google.com
google.com
mail.google.com
uberproxy-san.dclk.google.com
uberproxy-san.x20web.corp.google.com
sandbox.google.com
get.duo.google.com
mail.google.com
misc-sni.google.com
www.google.com
*.mail.google.com
cert-test.sandbox.google.com
*.googlecode.com
upload.video.google.com
misc-sni.google.com
uberproxy-san.printer.corp.google.com
wifi.google.com
wifi.google.com
*.clients.google.com
m.google.com
login.corp.google.com
uberproxy-san.x20web.corp.google.com
time.google.com
login.corp.google.com
mail.google.com
captive.googleapis.com
uberproxy-san.x20web.corp.google.com
*.calljoy.com
uberproxy-san.corp.google.com
upload.video.google.com
misc.google.com
*.rucn.google.com
wifi.google.com
accounts.google.com
edge-static.google.com
*.payments.googleapis.com
*.google.com
login.corp.google.com
supl.google.com
*.googlecode.com
uberproxy-san.dclk.google.com
*.google.com
sandbox.google.com
uberproxy-san.printer.corp.google.com
www.google.com
uberproxy-apphosting.corp.google.com
sandbox.google.com
m.google.com
uberproxy-san.dclk.google.com
cert-test.sandbox.google.com
sandbox.google.com
*.vp.video.l.google.com
ax-prod-ingestion15.corp.google.com
apps-secure-data-connector.google.com
wpri12.hot.corp.google.com
cert-test.sandbox.google.com
*.google.com
sandbox.google.com
devsite-wildcards.corp.google.com
m.google.com
*.mail.google.com
pry-bastion01.tarsier.prod.google.com
*.clients.google.com
parkstreet-color.corp.google.com
wpil13.hot.corp.google.com
adwords.google.com
mail.google.com
ads.google.com
*.google.com
uberproxy.corp.google.com
*.google.com
*.chrome.google.com
uberproxy-cctlds.corp.google.com
da-twd-7.da.ext.google.com
adwords.google.com
*.google.com
*.clients.google.com
edge-static.google.com
*.google.com
www.google.com
sandbox.google.com
uberproxy-san.cnsviewer-static.corp.google.com
mail.google.com

Certificate

The complete raw certificate details for misc-sni.google.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXVIuUdBY55Um/d6qSDd
WKEE5IIxXKGQsz174dIsMcfHRgJ32Sb3KU2SZfOjMRee0BJaHDMu34QCtDwNzUks
pp7A5SXDGBZxpoH4+44LFemEbaNyMWritAaz0wTQbM34qnhZtAA64hHe1mYFGg27
g3kNOLyDyOGWsI9m8+hcl+yHGJPNIinPW1VTbI+hAjwXUSFEqRl2AuMtGOhyN93b
ejHGoh9KL285MdAmVP6vQHG/JZ2dlROi8Ys1hU71o1GIile9MOV0YgTI3E4+uHgn
emtFGAkY4K8iQbGqZJwyhsZZaR1w6YMaJE6B9IDOmyRx8Ip4eadeJa3rLJudy3OX
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1788942275075391320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Internet Authority G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-23 10:25:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 09:09:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'misc-sni.google.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22906968132823534624621015660163873960394240027590649680920771324333082833352701766742021765783302797200230559680676973971196845720201487284937849110238016142159434783014991946590205491378520290967375195464213405077330196553781976926834256047294232601252914664309912089478054067758642338007330192511180685973177162270126927142507662295292626144314109923350586184737064789167434668997508182942063442929603480531118832368018566878760006019450255672049585487664899246740110935050537684863375906521884582648208628232856395832573050083934592512396216783676410466330401399044510866964634712017381067836226379052254279997229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misc-sni.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1ucrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adsensecustomsearchads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampproject.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.androidify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.goo.gl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brocaproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.ampproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chronicle.security'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chronicleforgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crossmediapanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datalab.cloud.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dataliberation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.google-syndication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalassetlinks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domains.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earlydays.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthengine.google.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthengine.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiber.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go-lang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go-lang.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go-lang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golang.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google-syndication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googleacquisitionmigration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googleblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googlecert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grow.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gvt5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hats.goog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lanternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liftware.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapmaker.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nomulus.foo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openthread.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openweave.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.page.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picasaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picasaweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picasaweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picnik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pki.goog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rbm.goog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savethedate.foo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchingforsyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.source.bazel.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.google-syndication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiltbrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webmproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whosdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--9kr7l.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flw351e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ggle-55da.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gogl-0nd52e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gogl-1nd42e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ngstr-lra8j.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xplr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zynamics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1ucrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsensecustomsearchads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsenseformobileapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampproject.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'androidify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.goo.gl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brocaproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.webrtc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chronicle.security'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chronicleforgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.webrtc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colab.research.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossmediapanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataliberation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dg-meta.video.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalassetlinks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domains.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlydays.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastlane.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapi.waze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-lang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-lang.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-lang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golang.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googleblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlecert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grow.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hats.goog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamremarkable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lers.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liftware.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomulus.foo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openthread.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openweave.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picasaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picasaweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picasaweb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picnik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pki.goog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbm.goog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry-qa.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry-sandbox.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savethedate.foo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchingforsyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.bazel.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.registry-qa.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.registry-sandbox.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.registry.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegooglestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiltbrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whosdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adsense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deepmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.googlestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iamremarkable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pixate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registry-qa.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registry-sandbox.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registry.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegooglestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9kr7l.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flw351e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ggle-55da.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gogl-0nd52e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gogl-1nd42e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ngstr-lra8j.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xplr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zynamics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTSGIAG3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/GTSGIAG3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3af9765927dc6f039146b619f63ee63bbd95ec4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 77c2b8509a677676b12dc286d083a07ea67eba4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTSGIAG3.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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