marigold.kunath.co.nz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 7d:6a:86:c2:93:c5:e4:bf:12:ca:d8:89:ca:e5:6f:41 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=marigold.kunath.co.nz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:6a:86:c2:93:c5:e4:bf:12:ca:d8:89:ca:e5:6f:41
Serial Number (int): 166706616199003127987160569357036515137
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): bb:c5:bb:b5:10:64:f7:41:3e:f3:ec:87:67:3a:c8:8c:3c:fc:c0:03
Fingerprint (sha256): 0e:ec:15:54:b4:7b:38:34:a5:21:e1:37:36:36:86:ee:ad:ed:0c:e6:d8:b9:99:b3:ff:08:83:bd:88:6b:0d:36

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/sCiLMoRqlYA
CRL Distribution Point: http://crls.pki.goog/gts1d4/mocb8gX3uX0.crl

Check the revocation status for certificate marigold.kunath.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marigold.kunath.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marigold.kunath.co.nz
www.justsayyellow.ca
admin.altoke.uy
mumbai-app.bailout.xyz
starydream.com
booking.biz.justlorry.com
www.suicidehotline.org
pickmeup12345.com
www.stanford2026.com
dl.playstore.playship.com
radiologyacademyuk.events
telemedicina.hsc.org.br
www.bestsolutionlogistics.rw
ulearnabroad.com
www.vibey.site
admin.hurreytech.com
www.eventvio.com
manage.emmapresta.com
www.pcminc.co
www.safetail.pet
amberleaf-v2.studiossolution.com
app.visitorapi.com
mappu.cl
refer.playstore.playship.com
seed-app.oz-tms.com
uk.tenczyninfo.com
standardsapp.io
oleg-olena.invito.link
www.whitetreedevices.com
irisloebbering.de
www.idilium.net
commandefournisseur-outils.provenc-halles.fr
fzz.me
www.tokyo-accounting-professionals.co.jp
manager.gatepass.io
auth.zsoft.link
www.student-loan-calculator.co.uk
primabonheur.kards.fr
game.identitychallenge.me
documator.app
rac.l1nk.in
multitasker.xyz
www.plan.vmi-technologies.com
www.dcareservice.in
www.chiesaveterocattolica.it
timeboxe.com
test.illumine.app
warehouse.texcloud.app
www.contabsmart.com.br
angular.mystikweb.net
edrivenscore.app
app.kopark.io
horndaschgmbh.pacta-cloud.app
events.qpidapp.com
kanzleiwolter.pacta-cloud.app
aysia.art
www.laverdine.ca
www.tnnl.app
scatterfm.markhansen.co.nz
www.wesit.co
kaffeineminds.com
evalli.fr
www.voidit.nl
xplodium.sbs
afyr.io
www.kit-campervans.com
www.tokel.jp
wieiswie.vdab.be
pedidos.sigcaixa.com.br
forms.vamdo.de
publik.simawar.net
ces.emotic.fr
www.gaali.vn
admin.smartrails.ch
vantageit.app.1on1navi.com
admin.raiseandwin.com
app.mydrivingacademy.com
app.biud.com.br
admin-dev.businessman.africa
hata.pl.ua
automattesera.se
jk66klub.waw.pl
willianson.com.br
www.forskolankorallen.se
www.shipkoo.com
www.ignite.com
ignite.com
docs.ignite.com
mexsic.com
vrcenter-010.vrplus.info
jellyinvest.mahrsrv.xyz
portfolio.mahrsrv.xyz
monsterlabstudios.com
danaaliyah.com
maderasdeoaxacalaitaliana.com
animize.my.id
karada16cp.jp
app.posible.in
plotu.io
preview.seatingch.art

Other certificates including the domain name kunath.co.nz

(limited to 100 certificates)
www.mrandmrsnuzzo.com
ccapitool.ezlo.com
sabebien.app
www.varejo360.com
marigold.kunath.co.nz
promocionjj93.com
ceabnar.com
app.fusionsushi.es
lydianuniverse.xyz
beta.careey.com
www.djonan.com
mark.kunath.co.nz
aestheticrace.com
store.bunyonyidistributors.com
fortuna.segudigital.org
lydianuniverse.com
1134.pontuax.com.br
nanny.love
api.eiendomsappen.com
ticks.cloud
ayat.ai
santiagojimenez.dev
2021.cruzhacks.com
riderpath.com
tgtr.nl
apphafen.de
cdtbigdata.com
sisyphus.mathematikoi.co
evalli.fr
iskanderzamaleev.online
www.abp-consulting.com
www.7thstreetrealty.com
goldhousestudios.com
www.wbbpeonlinee.com
www.denticenter.com.mx
drinks.danno.nz
beta.queuer.app
www.fooddek.com
promocionjj93.com
effiadd.com
mobil.eliar.cloud
www.limonapp.com
sales.academondo.com
www.nubbar.com.br
callummcgeeney.com
whibball.leaguesquare.com
swiftdaters.com

Certificate

The complete raw certificate details for marigold.kunath.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINcDCCDFigAwIBAgIQfWqGwpPF5L8SytiJyuVvQTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzEyMjIwODI0NDRaFw0yNDAzMjEw
OTIzMjZaMCAxHjAcBgNVBAMTFW1hcmlnb2xkLmt1bmF0aC5jby5uejCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKrbNMni4A1i6VxvLEQdokPCI988xC3Z
+g+hMQkCJFBxgr+h7sJfUPDyCF7ImcmrfokkL0IQWfcEh2GLmBVr1w7dSsY9QDTi
hVg5Flr4gvc1nYXWij3ZWM7QiXnDfpwK6xj5+iR6KYzxq6aAsjauTh1zcpxRgbX7
9Gh3z5t+9WP3lK2lDnRAQzJV97aDnMoSC5WZ40IehpXRFfTbBnc+QD0Pxc8J8I76
beGjyR1T2ghfQBpANJeGDvqqu+yfLb6vnfw1y7HQ87v8x4cmaxciA2vAucfnMIfD
9qIbQ3OWLy4OCYZxsqSI2P78TOOmTpYatQXRCJBePS0GyVlg+V5VVFUCAwEAAaOC
Cn4wggp6MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBQhRcI7rEws62tPtefJ4sNq0b2zwjAfBgNVHSME
GDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYB
BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L3NDaUxNb1JxbFlB
MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQu
ZGVyMIIIIgYDVR0RBIIIGTCCCBWCFW1hcmlnb2xkLmt1bmF0aC5jby5ueoIUd3d3
Lmp1c3RzYXl5ZWxsb3cuY2GCD2FkbWluLmFsdG9rZS51eYIWbXVtYmFpLWFwcC5i
YWlsb3V0Lnh5eoIOc3RhcnlkcmVhbS5jb22CGWJvb2tpbmcuYml6Lmp1c3Rsb3Jy
eS5jb22CFnd3dy5zdWljaWRlaG90bGluZS5vcmeCEXBpY2ttZXVwMTIzNDUuY29t
ghR3d3cuc3RhbmZvcmQyMDI2LmNvbYIZZGwucGxheXN0b3JlLnBsYXlzaGlwLmNv
bYIZcmFkaW9sb2d5YWNhZGVteXVrLmV2ZW50c4IXdGVsZW1lZGljaW5hLmhzYy5v
cmcuYnKCHHd3dy5iZXN0c29sdXRpb25sb2dpc3RpY3MucneCEHVsZWFybmFicm9h
ZC5jb22CDnd3dy52aWJleS5zaXRlghRhZG1pbi5odXJyZXl0ZWNoLmNvbYIQd3d3
LmV2ZW50dmlvLmNvbYIVbWFuYWdlLmVtbWFwcmVzdGEuY29tgg13d3cucGNtaW5j
LmNvghB3d3cuc2FmZXRhaWwucGV0giBhbWJlcmxlYWYtdjIuc3R1ZGlvc3NvbHV0
aW9uLmNvbYISYXBwLnZpc2l0b3JhcGkuY29tgghtYXBwdS5jbIIccmVmZXIucGxh
eXN0b3JlLnBsYXlzaGlwLmNvbYITc2VlZC1hcHAub3otdG1zLmNvbYISdWsudGVu
Y3p5bmluZm8uY29tgg9zdGFuZGFyZHNhcHAuaW+CFm9sZWctb2xlbmEuaW52aXRv
LmxpbmuCGHd3dy53aGl0ZXRyZWVkZXZpY2VzLmNvbYIRaXJpc2xvZWJiZXJpbmcu
ZGWCD3d3dy5pZGlsaXVtLm5ldIIsY29tbWFuZGVmb3Vybmlzc2V1ci1vdXRpbHMu
cHJvdmVuYy1oYWxsZXMuZnKCBmZ6ei5tZYIod3d3LnRva3lvLWFjY291bnRpbmct
cHJvZmVzc2lvbmFscy5jby5qcIITbWFuYWdlci5nYXRlcGFzcy5pb4IPYXV0aC56
c29mdC5saW5rgiF3d3cuc3R1ZGVudC1sb2FuLWNhbGN1bGF0b3IuY28udWuCFXBy
aW1hYm9uaGV1ci5rYXJkcy5mcoIZZ2FtZS5pZGVudGl0eWNoYWxsZW5nZS5tZYIN
ZG9jdW1hdG9yLmFwcIILcmFjLmwxbmsuaW6CD211bHRpdGFza2VyLnh5eoIdd3d3
LnBsYW4udm1pLXRlY2hub2xvZ2llcy5jb22CE3d3dy5kY2FyZXNlcnZpY2UuaW6C
HHd3dy5jaGllc2F2ZXRlcm9jYXR0b2xpY2EuaXSCDHRpbWVib3hlLmNvbYIRdGVz
dC5pbGx1bWluZS5hcHCCFndhcmVob3VzZS50ZXhjbG91ZC5hcHCCFnd3dy5jb250
YWJzbWFydC5jb20uYnKCFWFuZ3VsYXIubXlzdGlrd2ViLm5ldIIQZWRyaXZlbnNj
b3JlLmFwcIINYXBwLmtvcGFyay5pb4IdaG9ybmRhc2NoZ21iaC5wYWN0YS1jbG91
ZC5hcHCCEmV2ZW50cy5xcGlkYXBwLmNvbYIda2FuemxlaXdvbHRlci5wYWN0YS1j
bG91ZC5hcHCCCWF5c2lhLmFydIIQd3d3LmxhdmVyZGluZS5jYYIMd3d3LnRubmwu
YXBwghpzY2F0dGVyZm0ubWFya2hhbnNlbi5jby5ueoIMd3d3Lndlc2l0LmNvghFr
YWZmZWluZW1pbmRzLmNvbYIJZXZhbGxpLmZygg13d3cudm9pZGl0Lm5sggx4cGxv
ZGl1bS5zYnOCB2FmeXIuaW+CFnd3dy5raXQtY2FtcGVydmFucy5jb22CDHd3dy50
b2tlbC5qcIIQd2llaXN3aWUudmRhYi5iZYIXcGVkaWRvcy5zaWdjYWl4YS5jb20u
YnKCDmZvcm1zLnZhbWRvLmRlghJwdWJsaWsuc2ltYXdhci5uZXSCDWNlcy5lbW90
aWMuZnKCDHd3dy5nYWFsaS52boITYWRtaW4uc21hcnRyYWlscy5jaIIadmFudGFn
ZWl0LmFwcC4xb24xbmF2aS5jb22CFWFkbWluLnJhaXNlYW5kd2luLmNvbYIYYXBw
Lm15ZHJpdmluZ2FjYWRlbXkuY29tgg9hcHAuYml1ZC5jb20uYnKCHGFkbWluLWRl
di5idXNpbmVzc21hbi5hZnJpY2GCCmhhdGEucGwudWGCEGF1dG9tYXR0ZXNlcmEu
c2WCD2prNjZrbHViLndhdy5wbIIRd2lsbGlhbnNvbi5jb20uYnKCGHd3dy5mb3Jz
a29sYW5rb3JhbGxlbi5zZYIPd3d3LnNoaXBrb28uY29tgg53d3cuaWduaXRlLmNv
bYIKaWduaXRlLmNvbYIPZG9jcy5pZ25pdGUuY29tggptZXhzaWMuY29tghh2cmNl
bnRlci0wMTAudnJwbHVzLmluZm+CF2plbGx5aW52ZXN0Lm1haHJzcnYueHl6ghVw
b3J0Zm9saW8ubWFocnNydi54eXqCFW1vbnN0ZXJsYWJzdHVkaW9zLmNvbYIOZGFu
YWFsaXlhaC5jb22CHW1hZGVyYXNkZW9heGFjYWxhaXRhbGlhbmEuY29tgg1hbmlt
aXplLm15Lmlkgg1rYXJhZGExNmNwLmpwgg5hcHAucG9zaWJsZS5pboIIcGxvdHUu
aW+CFXByZXZpZXcuc2VhdGluZ2NoLmFydDAhBgNVHSAEGjAYMAgGBmeBDAECATAM
BgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5n
b29nL2d0czFkNC9tb2NiOGdYM3VYMC5jcmwwggECBgorBgEEAdZ5AgQCBIHzBIHw
AO4AdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYyQ12r7AAAE
AwBGMEQCICjS3CnmdQwS9Jc18GWOYLbSvvBvabDj4hSS/vRwmvvWAiAnnWCYof0g
iYTr73kkJk7GFn2O9TOeYDQG5osrBQ679wB1AKLiv9Ye3i8vB6DWTm03p9xlQ7DG
tS6i2reK+Jpt9RfYAAABjJDXaxYAAAQDAEYwRAIgEMZAbufIOh61HY+JGLBfieot
FKughDjZdiwOFqNOdr0CICQXqU/OTzkhX1ziBLlrxDg6WmQxDdytqMzFI74uKXuC
MA0GCSqGSIb3DQEBCwUAA4IBAQBgL49NMFspVaUvUjUy01kuZFA1067PPkZgMasZ
RFeqMat2GRip2Z77Ce3b9msvlTbIrXeR58Iim5fALFqklfubfT9FLx7W4iEyHVlE
BguPaf/bTbIIU8qPWMKlb5V6QwS5nZV2BU6ME3yyxrxnvnVwmJqzU3yejUKRq0kH
JTVbhn1E1iDkwGULGzEdpGNWADj7hu/+Zs69J6Xoy82TP9p67kC5ovPXuqYu9B1P
IPA2T53DOT5TguHqVMXSZkzoNdIwrSycDZf9++x8/yskQvhcc6A4Rsnw/nS8N9WE
J28evkMu0YhnnWtvHT1S2udeSXO9oLk+0Fck9bUckmtGs7xW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 166706616199003127987160569357036515137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 08:24:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 09:23:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marigold.kunath.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/sCiLMoRqlYA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2073 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marigold.kunath.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justsayyellow.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.altoke.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mumbai-app.bailout.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starydream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.biz.justlorry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suicidehotline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickmeup12345.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanford2026.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.playstore.playship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiologyacademyuk.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemedicina.hsc.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsolutionlogistics.rw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulearnabroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vibey.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hurreytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventvio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage.emmapresta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcminc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safetail.pet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amberleaf-v2.studiossolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.visitorapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappu.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refer.playstore.playship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed-app.oz-tms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.tenczyninfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standardsapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oleg-olena.invito.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitetreedevices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irisloebbering.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idilium.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commandefournisseur-outils.provenc-halles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyo-accounting-professionals.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manager.gatepass.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.zsoft.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.student-loan-calculator.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primabonheur.kards.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game.identitychallenge.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documator.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rac.l1nk.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multitasker.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plan.vmi-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcareservice.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiesaveterocattolica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeboxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.illumine.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouse.texcloud.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contabsmart.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angular.mystikweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edrivenscore.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kopark.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horndaschgmbh.pacta-cloud.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.qpidapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzleiwolter.pacta-cloud.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aysia.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laverdine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnnl.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scatterfm.markhansen.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wesit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaffeineminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evalli.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voidit.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xplodium.sbs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afyr.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kit-campervans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokel.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wieiswie.vdab.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedidos.sigcaixa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.vamdo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publik.simawar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.emotic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaali.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.smartrails.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantageit.app.1on1navi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.raiseandwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mydrivingacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.biud.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-dev.businessman.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hata.pl.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automattesera.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jk66klub.waw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willianson.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forskolankorallen.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipkoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ignite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.ignite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexsic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrcenter-010.vrplus.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jellyinvest.mahrsrv.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.mahrsrv.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterlabstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danaaliyah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maderasdeoaxacalaitaliana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animize.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karada16cp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.posible.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plotu.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.seatingch.art'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/mocb8gX3uX0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c90d76afb0000040300463044022028d2dc29e6750c12f49735f0658e60b6d2bef06f69b0e3e21492fef4709afbd60220279d6098a1fd208984ebef7924264ec6167d8ef5339e603406e68b2b050ebbf7007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c90d76b160000040300463044022010c6406ee7c83a1eb51d8f8918b05f89ea2d14aba08438d9762c0e16a34e76bd02202417a94fce4f39215f5ce204b96bc4383a5a64310ddcada8ccc523be2e297b82
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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