portal.mytogs.co.nz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 80:6d:80:b4:1b:8d:ff:0c:12:9e:38:fb:ea:a1:40:42 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=portal.mytogs.co.nz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 80:6d:80:b4:1b:8d:ff:0c:12:9e:38:fb:ea:a1:40:42
Serial Number (int): 170709754236075806156489772508718907458
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6c:70:24:41:c4:19:fd:4a:6f:1a:9b:d5:8f:a2:14:4e:26:21:10:c8
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): de:56:f5:99:d3:dd:be:59:30:b9:e1:68:f6:58:3b:1b:37:56:7a:0c
Fingerprint (sha256): 09:78:dc:0e:df:1b:cd:39:64:e4:b6:1d:02:79:cb:7b:60:03:f4:b3:a5:ea:4d:1b:7c:3f:fd:c1:ae:32:cb:d5

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/rpOeWRqo6F8
CRL Distribution Point: http://crls.pki.goog/gts1d4/S4ncRdVfvuE.crl

Check the revocation status for certificate portal.mytogs.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.mytogs.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.mytogs.co.nz
www.alnassrnews.com
2048super.com
callpro.vn
www.danielgarcia.me
haverford.engage.sasaki.com
astrotrust.in
citrusclean.cc
socialauth.waltonplaza.com.bd
positune.in
nurse.oakwoodfriends.org
www.allthingsdevrelated.org
dansmusculartechniques.com
auth-neues.umishun.com
training.leiter-check.bghw.de
www.siteqr.com.au
static.getintheloop.ca
www.dustinrichmond.com
www.docaffix.com
reservesmanager.com
www.ryanparkdev.com
vayupe.in
auth.govforms.uk
class-oms.gaoyangonline.com
raintreedigital.in
jan.broniow.ski
webbworkers.dev
usachincommunity.org
www.finurligt.com
home.crowdcanvas.dev
www.moirer.com
tormap.org
hits.game.adiop.com
vaccin.biloba.com
www.eternitysaga.io
classroom-components.illuminateed.net
www.dlknet.net
www.steveaxtmann.me
deeplink.staging.delcom.nl
hoenggong.land
krea.digital
likforvaring.fi
www.amuro.io
www.taqcursos.com.br
stage.admin.myride.dotdev.cloud
vrtaxi.in
mobile.researchpad.co
wallet.charged.fi
www.workingclassidiot.com
www.nilear.com
www.utkueray.com
app.suitejar.com
www.suriawholesaler.com
admin.thecallsports.com
www.gleoit.se
client.dev.rebus.com.co
www.insentsandbox1.web-test.insent.ai
www.cristianelias.com.br
hype.luxury
id.resellme.co.zw
app.dev.graph.divdot.com
sblitz.gameserver.magmic.com
mindling.io
portal.prerelease.usenash.com
phamhub.com
flashsense.metemcyber.ntt.com
oek.qa-pos-app.coara.xyz
enjin-konsol-development.courtsite.my
apps.renovationrumah.com.my
da.instant-help.de
morita-farm-kamakura.jp
www.expressmonterrey.mx
app.oplit.fr
backstage-qa.pyroteknikk.no
books.lambda.co.il
blog.danielibrahim.net
compliance.mckeown.co.nz
web-irma-admin.cc-irdigital.pe
shedr.app
www.iottable.online
give2glat.org
huesli.org
www.wan-solution.com
mejorempresa.nablasol.net
lassiser.no
www.droidinfinity.xyz
a-beta.getresponse.com
backoffice-demo-ba.dev.aitlab.it
bestellen.allindex.nl
arrx.uk
tsukino-world.shop
alpha.cnt.one
donaldbowler.pro
dev.reactbh.org
forms.mmpie.org
link.aperq.org
prooflist.app
blockchallenge.ca
app.ib.xyz
www.recoverwith.us

Other certificates including the domain name mytogs.co.nz

(limited to 100 certificates)
www.kilvingtonsofleeds.com
portal.mytogs.co.nz
www.cg-premium.com
app.careasehealth.com
www.avukatumutozgur.com
dreamlighthelper.com
sholokhov.us
klas.biz
m.aiii.ai
rixels.nl
coreysmith.me
video-up.app
qa.thekunggroup.com
blackboard-dev.klarway.com
links.indiahaat.in
ely4ssin.xyz
invite.wemoscooter.com
epicgames.12traits.com
sanchezdiego.com
coreysmith.me
itsfair.in
www.staige.at
www.staige.at
www.petemcbride.ca
app.gammacentro.com
link.vcoloring.com
www.bitvite.me
d-olympus.store
www.billgenerator.in
app.gammacentro.com
www.guide-yourself.com
www.sellerfi.app
www.rajdlova.cz
ivy.stylishop.store
my.mindsum.app
order.pantja.id
video-up.app
pocionesmagicas.pe
dev.financialmodelingprep.com
admin.tokei.day
funding-dev.elder.org
tagger.3ayez.com
rgkit.ml
lopesnobreadvogados.com.br
qa.thekunggroup.com
tagger.3ayez.com
www.easycryp.to
www.peersahab.com
mycmetrack.com
lakonmelissokomiki.com
childsafemetaverse.com
bupapp.hu
www.taihelsel.com
tagger.3ayez.com
form3.argos-solutions.io
sanchezdiego.com
www.marketplace.demo.inato.com
www.vtmaplecreemee.com

Certificate

The complete raw certificate details for portal.mytogs.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINpDCCDIygAwIBAgIRAIBtgLQbjf8MEp44++qhQEIwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwNDI2MTQyNTA5WhcNMjQwNzI1
MTUyMjExWjAeMRwwGgYDVQQDExNwb3J0YWwubXl0b2dzLmNvLm56MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwPDxRgbYO27ytZ
aZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NFvqRmxWeQcamH
H+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor1Edo701TqUuG
cFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE3m7cY7gNCOJw
JmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYRsEQinoxv3NiF
hY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22whrwIDAQABo4IK
szCCCq8wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFGxwJEHEGf1Kbxqb1Y+iFE4mIRDIMB8GA1UdIwQY
MBaAFCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEF
BQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvcnBPZVdScW82Rjgw
MQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5k
ZXIwgghTBgNVHREEgghKMIIIRoITcG9ydGFsLm15dG9ncy5jby5ueoITd3d3LmFs
bmFzc3JuZXdzLmNvbYINMjA0OHN1cGVyLmNvbYIKY2FsbHByby52boITd3d3LmRh
bmllbGdhcmNpYS5tZYIbaGF2ZXJmb3JkLmVuZ2FnZS5zYXNha2kuY29tgg1hc3Ry
b3RydXN0Lmlugg5jaXRydXNjbGVhbi5jY4Idc29jaWFsYXV0aC53YWx0b25wbGF6
YS5jb20uYmSCC3Bvc2l0dW5lLmlughhudXJzZS5vYWt3b29kZnJpZW5kcy5vcmeC
G3d3dy5hbGx0aGluZ3NkZXZyZWxhdGVkLm9yZ4IaZGFuc211c2N1bGFydGVjaG5p
cXVlcy5jb22CFmF1dGgtbmV1ZXMudW1pc2h1bi5jb22CHXRyYWluaW5nLmxlaXRl
ci1jaGVjay5iZ2h3LmRlghF3d3cuc2l0ZXFyLmNvbS5hdYIWc3RhdGljLmdldGlu
dGhlbG9vcC5jYYIWd3d3LmR1c3RpbnJpY2htb25kLmNvbYIQd3d3LmRvY2FmZml4
LmNvbYITcmVzZXJ2ZXNtYW5hZ2VyLmNvbYITd3d3LnJ5YW5wYXJrZGV2LmNvbYIJ
dmF5dXBlLmlughBhdXRoLmdvdmZvcm1zLnVrghtjbGFzcy1vbXMuZ2FveWFuZ29u
bGluZS5jb22CEnJhaW50cmVlZGlnaXRhbC5pboIPamFuLmJyb25pb3cuc2tpgg93
ZWJid29ya2Vycy5kZXaCFHVzYWNoaW5jb21tdW5pdHkub3JnghF3d3cuZmludXJs
aWd0LmNvbYIUaG9tZS5jcm93ZGNhbnZhcy5kZXaCDnd3dy5tb2lyZXIuY29tggp0
b3JtYXAub3JnghNoaXRzLmdhbWUuYWRpb3AuY29tghF2YWNjaW4uYmlsb2JhLmNv
bYITd3d3LmV0ZXJuaXR5c2FnYS5pb4IlY2xhc3Nyb29tLWNvbXBvbmVudHMuaWxs
dW1pbmF0ZWVkLm5ldIIOd3d3LmRsa25ldC5uZXSCE3d3dy5zdGV2ZWF4dG1hbm4u
bWWCGmRlZXBsaW5rLnN0YWdpbmcuZGVsY29tLm5sgg5ob2VuZ2dvbmcubGFuZIIM
a3JlYS5kaWdpdGFsgg9saWtmb3J2YXJpbmcuZmmCDHd3dy5hbXVyby5pb4IUd3d3
LnRhcWN1cnNvcy5jb20uYnKCH3N0YWdlLmFkbWluLm15cmlkZS5kb3RkZXYuY2xv
dWSCCXZydGF4aS5pboIVbW9iaWxlLnJlc2VhcmNocGFkLmNvghF3YWxsZXQuY2hh
cmdlZC5maYIZd3d3LndvcmtpbmdjbGFzc2lkaW90LmNvbYIOd3d3Lm5pbGVhci5j
b22CEHd3dy51dGt1ZXJheS5jb22CEGFwcC5zdWl0ZWphci5jb22CF3d3dy5zdXJp
YXdob2xlc2FsZXIuY29tghdhZG1pbi50aGVjYWxsc3BvcnRzLmNvbYINd3d3Lmds
ZW9pdC5zZYIXY2xpZW50LmRldi5yZWJ1cy5jb20uY2+CJXd3dy5pbnNlbnRzYW5k
Ym94MS53ZWItdGVzdC5pbnNlbnQuYWmCGHd3dy5jcmlzdGlhbmVsaWFzLmNvbS5i
coILaHlwZS5sdXh1cnmCEWlkLnJlc2VsbG1lLmNvLnp3ghhhcHAuZGV2LmdyYXBo
LmRpdmRvdC5jb22CHHNibGl0ei5nYW1lc2VydmVyLm1hZ21pYy5jb22CC21pbmRs
aW5nLmlvgh1wb3J0YWwucHJlcmVsZWFzZS51c2VuYXNoLmNvbYILcGhhbWh1Yi5j
b22CHWZsYXNoc2Vuc2UubWV0ZW1jeWJlci5udHQuY29tghhvZWsucWEtcG9zLWFw
cC5jb2FyYS54eXqCJWVuamluLWtvbnNvbC1kZXZlbG9wbWVudC5jb3VydHNpdGUu
bXmCG2FwcHMucmVub3ZhdGlvbnJ1bWFoLmNvbS5teYISZGEuaW5zdGFudC1oZWxw
LmRlghdtb3JpdGEtZmFybS1rYW1ha3VyYS5qcIIXd3d3LmV4cHJlc3Ntb250ZXJy
ZXkubXiCDGFwcC5vcGxpdC5mcoIbYmFja3N0YWdlLXFhLnB5cm90ZWtuaWtrLm5v
ghJib29rcy5sYW1iZGEuY28uaWyCFmJsb2cuZGFuaWVsaWJyYWhpbS5uZXSCGGNv
bXBsaWFuY2UubWNrZW93bi5jby5ueoIed2ViLWlybWEtYWRtaW4uY2MtaXJkaWdp
dGFsLnBlgglzaGVkci5hcHCCE3d3dy5pb3R0YWJsZS5vbmxpbmWCDWdpdmUyZ2xh
dC5vcmeCCmh1ZXNsaS5vcmeCFHd3dy53YW4tc29sdXRpb24uY29tghltZWpvcmVt
cHJlc2EubmFibGFzb2wubmV0ggtsYXNzaXNlci5ub4IVd3d3LmRyb2lkaW5maW5p
dHkueHl6ghZhLWJldGEuZ2V0cmVzcG9uc2UuY29tgiBiYWNrb2ZmaWNlLWRlbW8t
YmEuZGV2LmFpdGxhYi5pdIIVYmVzdGVsbGVuLmFsbGluZGV4Lm5sggdhcnJ4LnVr
ghJ0c3VraW5vLXdvcmxkLnNob3CCDWFscGhhLmNudC5vbmWCEGRvbmFsZGJvd2xl
ci5wcm+CD2Rldi5yZWFjdGJoLm9yZ4IPZm9ybXMubW1waWUub3Jngg5saW5rLmFw
ZXJxLm9yZ4INcHJvb2ZsaXN0LmFwcIIRYmxvY2tjaGFsbGVuZ2UuY2GCCmFwcC5p
Yi54eXqCEnd3dy5yZWNvdmVyd2l0aC51czAhBgNVHSAEGjAYMAgGBmeBDAECATAM
BgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5n
b29nL2d0czFkNC9TNG5jUmRWZnZ1RS5jcmwwggEGBgorBgEEAdZ5AgQCBIH3BIH0
APIAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY8bAqmyAAAE
AwBIMEYCIQD9z+1G0aM4JSs2tPBLEZzFjrBL6NRMJW/qFTEgUCYfkQIhALDHq/VL
F8oWOb46J0t4PoM2kpS0rzIv6KZvB1MjF+m4AHcA2ra/az+1tiKfm8K7XGvocJFx
bLtRhIU0vaQ9MEjX+6sAAAGPGwKprAAABAMASDBGAiEA8xexFn5S7c/YqIa49X+m
mc3wLXz+6TVzoiQdx10cW4QCIQD6xv9Pq9s1xa81tv/M0gqsUjeOjhNQeMoPHS38
Yl4UpDANBgkqhkiG9w0BAQsFAAOCAQEADq7/6j//mUH91w5byZwWiLhld8bgcJfx
FMhbu2Aet/MZ3jCbP80A5BMcqtxfYcMaxr+BeLcwo04qcQmf7On+lJ8uMd6Fdi7Q
FJXDZHIkJnTD0VqmuuoABJ+FL/oIvfta78uhPABGspywqK02Ew6pBSHdFpO8AmQ7
FyFNZ+6m6OGZYWrOQa53tbRKRuKcMO/ikMBMp2gzC3pxlXxiRPbJJuyLMrDBwjKm
DZwgioUqXRyYdVI9oP73BvGvM2FR4Vhu8+ttc6sdIKSqUhY3HhIbqv6lIfuailTi
y8YK6SOmbjv6gpRy7Qf/tPiW3HiK3RysQLE9H1PMTmW0+qulAAM9Dw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzJbk1o9thCDPn8EBwP
DxRgbYO27ytZaZr48YqRBXXFKzBh7xok1uGfrOPiL4W9ZASsMfecoW8BcKRL67NF
vqRmxWeQcamHH+SkLPui/lKpn22AJgAFY/rrFaMjI9F14W7K24sFxGx39ewcwUor
1Edo701TqUuGcFXrw85IKsDInz3XEabKkfRJPZGyrLQiIkej6SVYwQ8B9M1BOvOE
3m7cY7gNCOJwJmxwW2b7bU/43WrJ2DRubSQLytkG719esH4p4AjVia+OZiEgwpYR
sEQinoxv3NiFhY1oq+DU2BTJjSeM6aZYQvVvIX/5T9tdarptYDNbiQUoyTrT22wh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 170709754236075806156489772508718907458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 14:25:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 15:22:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.mytogs.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774523138065173880144330839879559996839282298520201096340025136575862995707435476524457116592174930682297140414971055039109526496516021068085428489924640749445340770964953196233131808772155178178847578184811604281152612301783704251832035785975634256332684368952689289273974513874353510689553365565517738191181934271905151424332958115646568456403348588341665128013683986256421525466928660531252135847084654658016292471425327276619477891477759939436224780052388631203944642613498004245464320460958655086190546072812166334819424804022238032069306078512037050685523080406465372853373268890819005232898796644724913217967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c702441c419fd4a6f1a9bd58fa2144e262110c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/rpOeWRqo6F8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.mytogs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alnassrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2048super.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callpro.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danielgarcia.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haverford.engage.sasaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrotrust.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrusclean.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialauth.waltonplaza.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'positune.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurse.oakwoodfriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allthingsdevrelated.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dansmusculartechniques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-neues.umishun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.leiter-check.bghw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siteqr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.getintheloop.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dustinrichmond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docaffix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservesmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryanparkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vayupe.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.govforms.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'class-oms.gaoyangonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raintreedigital.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan.broniow.ski'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webbworkers.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usachincommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finurligt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.crowdcanvas.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tormap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hits.game.adiop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccin.biloba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eternitysaga.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classroom-components.illuminateed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlknet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steveaxtmann.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deeplink.staging.delcom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoenggong.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krea.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'likforvaring.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amuro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taqcursos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.admin.myride.dotdev.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrtaxi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.researchpad.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallet.charged.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingclassidiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nilear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utkueray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.suitejar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suriawholesaler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thecallsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gleoit.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.dev.rebus.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insentsandbox1.web-test.insent.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cristianelias.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hype.luxury'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.resellme.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.graph.divdot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sblitz.gameserver.magmic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindling.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.prerelease.usenash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phamhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashsense.metemcyber.ntt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oek.qa-pos-app.coara.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enjin-konsol-development.courtsite.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.renovationrumah.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da.instant-help.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morita-farm-kamakura.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expressmonterrey.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.oplit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage-qa.pyroteknikk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.lambda.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.danielibrahim.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.mckeown.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-irma-admin.cc-irdigital.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shedr.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iottable.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give2glat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huesli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wan-solution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mejorempresa.nablasol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lassiser.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.droidinfinity.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-beta.getresponse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice-demo-ba.dev.aitlab.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestellen.allindex.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrx.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsukino-world.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha.cnt.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donaldbowler.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.reactbh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.mmpie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.aperq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prooflist.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchallenge.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ib.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoverwith.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/S4ncRdVfvuE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f1b02a9b20000040300483046022100fdcfed46d1a338252b36b4f04b119cc58eb04be8d44c256fea15312050261f91022100b0c7abf54b17ca1639be3a274b783e83369294b4af322fe8a66f07532317e9b8007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f1b02a9ac0000040300483046022100f317b1167e52edcfd8a886b8f57fa699cdf02d7cfee93573a2241dc75d1c5b84022100fac6ff4fabdb35c5af35b6ffccd20aac52378e8e135078ca0f1d2dfc625e14a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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