devsite-sni.developers.google.com

Issued by GTS CA 1C3

About this certificate

This digital certificate with serial number 40:b8:38:ca:e0:01:79:88:10:ef:e3:bf:9b:b5:49:bf was issued on by Google Trust Services LLC.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=devsite-sni.developers.google.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:b8:38:ca:e0:01:79:88:10:ef:e3:bf:9b:b5:49:bf
Serial Number (int): 86027126240558081566556173835695376831
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8d:9a:db:30:d6:3e:58:da:e5:e1:73:c5:24:cd:f7:a8:eb:d6:77:8b
AuthorityKeyId: 8a:74:7f:af:85:cd:ee:95:cd:3d:9c:d0:e2:46:14:f3:71:35:1d:27

Fingerprint (sha1): 04:3e:9f:c0:35:f3:d0:12:30:2d:c8:01:75:9f:34:e5:45:e8:50:20
Fingerprint (sha256): 16:42:07:0c:12:0f:3c:88:5a:c5:ae:70:4b:c8:ef:d3:3b:79:fb:a4:4d:12:1c:a0:88:9d:97:8c:06:3a:e5:49

Issuing Certificate URL: http://pki.goog/repo/certs/gts1c3.der

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1c3
CRL Distribution Point: http://crls.pki.goog/gts1c3/zdATt0Ex_Fk.crl

Check the revocation status for certificate devsite-sni.developers.google.com

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devsite-sni.developers.google.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

devsite-sni.developers.google.com
actifio.com
*.actifio.com
apigee.com
*.apigee.com
appdefensealliance.dev
*.appdefensealliance.dev
bazel.build
*.bazel.build
cel.dev
*.cel.dev
developer.nest.com
developers.nest.com
devsitetest.how
*.devsitetest.how
dialogflow.com
*.dialogflow.com
fuchsia.dev
*.fuchsia.dev
generativeai.google
*.generativeai.google
*.generativeai.google.com
google.dev
ai.google.dev
www.ai.google.dev
*.google.dev
intrinsic.ai
*.intrinsic.ai
jibemobile.com
*.jibemobile.com
onboarding.off.goog
*.onboarding.off.goog
openthread.io
*.openthread.io
openweave.io
*.openweave.io
openxla.org
*.openxla.org
preview.source.android.com
quantumai.google
*.quantumai.google
tensorflow.org
*.tensorflow.org
web.dev
*.web.dev
webrtc.org
www.webrtc.org
wing.com
*.wing.com
wing.dev
*.wing.dev
devsite.google
*.devsite.google
mediapipe.dev
*.mediapipe.dev

Other certificates including the domain name google.com

(limited to 100 certificates)
netcracker-staging.corp.google.com
*.google.com
m.google.com
mx.google.com
*.vp.video.l.google.com
uberproxy-cctlds.corp.google.com
ax-uat-ingestion02.corp.google.com
misc.google.com
www.google.com
*.google.com
*.c.docs.google.com
uberproxy-san.cert.corp.google.com
edge-static.google.com
*.ext.google.com
warpspeed-color.corp.google.com
uberproxy-san.corp.google.com
cert-test.sandbox.google.com
upload.video.google.com
google.com
mail.google.com
uberproxy-san.dclk.google.com
uberproxy-san.x20web.corp.google.com
sandbox.google.com
get.duo.google.com
mail.google.com
misc-sni.google.com
www.google.com
*.mail.google.com
cert-test.sandbox.google.com
*.googlecode.com
upload.video.google.com
misc-sni.google.com
uberproxy-san.printer.corp.google.com
wifi.google.com
wifi.google.com
*.clients.google.com
m.google.com
login.corp.google.com
uberproxy-san.x20web.corp.google.com
time.google.com
login.corp.google.com
mail.google.com
captive.googleapis.com
uberproxy-san.x20web.corp.google.com
*.calljoy.com
uberproxy-san.corp.google.com
upload.video.google.com
misc.google.com
*.rucn.google.com
wifi.google.com
accounts.google.com
edge-static.google.com
*.payments.googleapis.com
*.google.com
login.corp.google.com
supl.google.com
*.googlecode.com
uberproxy-san.dclk.google.com
*.google.com
sandbox.google.com
uberproxy-san.printer.corp.google.com
www.google.com
uberproxy-apphosting.corp.google.com
sandbox.google.com
m.google.com
uberproxy-san.dclk.google.com
cert-test.sandbox.google.com
sandbox.google.com
*.vp.video.l.google.com
ax-prod-ingestion15.corp.google.com
apps-secure-data-connector.google.com
wpri12.hot.corp.google.com
cert-test.sandbox.google.com
*.google.com
sandbox.google.com
devsite-wildcards.corp.google.com
m.google.com
*.mail.google.com
pry-bastion01.tarsier.prod.google.com
*.clients.google.com
parkstreet-color.corp.google.com
wpil13.hot.corp.google.com
adwords.google.com
mail.google.com
ads.google.com
*.google.com
uberproxy.corp.google.com
*.google.com
*.chrome.google.com
uberproxy-cctlds.corp.google.com
da-twd-7.da.ext.google.com
adwords.google.com
*.google.com
*.clients.google.com
edge-static.google.com
*.google.com
www.google.com
sandbox.google.com
uberproxy-san.cnsviewer-static.corp.google.com
mail.google.com

Certificate

The complete raw certificate details for devsite-sni.developers.google.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIIDCCBwigAwIBAgIQQLg4yuABeYgQ7+O/m7VJvzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFDMzAeFw0yNDAyMTkwODAzNTRaFw0yNDA1MTMw
ODAzNTNaMCwxKjAoBgNVBAMTIWRldnNpdGUtc25pLmRldmVsb3BlcnMuZ29vZ2xl
LmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABC8DDpRiWboPtP4t4kIvMJPk
mSTrQeR65I7g01aExicJCb2CAuVtVQhL6FkjzwJXRtGXEGQxqikje0ZbIjD8sX+j
ggXtMIIF6TAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUjZrbMNY+WNrl4XPFJM33qOvWd4swHwYDVR0j
BBgwFoAUinR/r4XN7pXNPZzQ4kYU83E1HScwagYIKwYBBQUHAQEEXjBcMCcGCCsG
AQUFBzABhhtodHRwOi8vb2NzcC5wa2kuZ29vZy9ndHMxYzMwMQYIKwYBBQUHMAKG
JWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFjMy5kZXIwggOeBgNVHREE
ggOVMIIDkYIhZGV2c2l0ZS1zbmkuZGV2ZWxvcGVycy5nb29nbGUuY29tggthY3Rp
ZmlvLmNvbYINKi5hY3RpZmlvLmNvbYIKYXBpZ2VlLmNvbYIMKi5hcGlnZWUuY29t
ghZhcHBkZWZlbnNlYWxsaWFuY2UuZGV2ghgqLmFwcGRlZmVuc2VhbGxpYW5jZS5k
ZXaCC2JhemVsLmJ1aWxkgg0qLmJhemVsLmJ1aWxkggdjZWwuZGV2ggkqLmNlbC5k
ZXaCEmRldmVsb3Blci5uZXN0LmNvbYITZGV2ZWxvcGVycy5uZXN0LmNvbYIPZGV2
c2l0ZXRlc3QuaG93ghEqLmRldnNpdGV0ZXN0Lmhvd4IOZGlhbG9nZmxvdy5jb22C
ECouZGlhbG9nZmxvdy5jb22CC2Z1Y2hzaWEuZGV2gg0qLmZ1Y2hzaWEuZGV2ghNn
ZW5lcmF0aXZlYWkuZ29vZ2xlghUqLmdlbmVyYXRpdmVhaS5nb29nbGWCGSouZ2Vu
ZXJhdGl2ZWFpLmdvb2dsZS5jb22CCmdvb2dsZS5kZXaCDWFpLmdvb2dsZS5kZXaC
EXd3dy5haS5nb29nbGUuZGV2ggwqLmdvb2dsZS5kZXaCDGludHJpbnNpYy5haYIO
Ki5pbnRyaW5zaWMuYWmCDmppYmVtb2JpbGUuY29tghAqLmppYmVtb2JpbGUuY29t
ghNvbmJvYXJkaW5nLm9mZi5nb29nghUqLm9uYm9hcmRpbmcub2ZmLmdvb2eCDW9w
ZW50aHJlYWQuaW+CDyoub3BlbnRocmVhZC5pb4IMb3BlbndlYXZlLmlvgg4qLm9w
ZW53ZWF2ZS5pb4ILb3BlbnhsYS5vcmeCDSoub3BlbnhsYS5vcmeCGnByZXZpZXcu
c291cmNlLmFuZHJvaWQuY29tghBxdWFudHVtYWkuZ29vZ2xlghIqLnF1YW50dW1h
aS5nb29nbGWCDnRlbnNvcmZsb3cub3JnghAqLnRlbnNvcmZsb3cub3Jnggd3ZWIu
ZGV2ggkqLndlYi5kZXaCCndlYnJ0Yy5vcmeCDnd3dy53ZWJydGMub3Jnggh3aW5n
LmNvbYIKKi53aW5nLmNvbYIId2luZy5kZXaCCioud2luZy5kZXaCDmRldnNpdGUu
Z29vZ2xlghAqLmRldnNpdGUuZ29vZ2xlgg1tZWRpYXBpcGUuZGV2gg8qLm1lZGlh
cGlwZS5kZXYwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNV
HR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxYzMvemRBVHQw
RXhfRmsuY3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA7s3QZNXbGs7FXLed
tM0TojKHRny87N7DUUhZRnEftZsAAAGNwJuRGgAABAMARjBEAiAl1Fs1JTHEd6cP
k9FwWRxqFLl3BxFYEQPHS6E7uKK/ngIgRNg7yDiZxJncy4szoRe40tCwaNf3lav2
CryqOgyifZQAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY3A
m5E+AAAEAwBHMEUCIQCUxGeVgInUAziWZr0LPbonNz0PQvpKX/+bdoRaWUWyJQIg
F+Dl3LwcgRBD1iHnctrl89luaUA43b1FLyNetRb/oS0wDQYJKoZIhvcNAQELBQAD
ggEBACCywxv4ESyhXU6yb1oLz3zP4uSJ/cPG8aZrHqYBrPU/Xct+YGfL0XrgX5qC
Vl7FrtHVTLRU1nWXdDVpE7OKCATcLBt5qIiYwKQT5lquXUpBRfjzfoXHp8DFvdDb
T17fU/K6fIQsRYh8yD6aYS00kYQmPNdwTp4G+6n54LHA6oaDSxPdoRVX6fGgGHr+
U6NS8Cj+grhsPZZ4U7XzshkywwdBpvA6SksZmi1ZZIiji+Mc40z4XyETKEWEtqyy
eGNRxUYi0X9mPtJLhub3yS7f9LSC4eDJ0gtAXjyGZvsKFRlk15DtiiOpC84QfJRi
9A4mz78QV/2ukdVPpmz/Qn0X1N4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELwMOlGJZug+0/i3iQi8wk+SZJOtB
5HrkjuDTVoTGJwkJvYIC5W1VCEvoWSPPAldG0ZcQZDGqKSN7RlsiMPyxfw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86027126240558081566556173835695376831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1C3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 08:03:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 08:03:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devsite-sni.developers.google.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00042f030e946259ba0fb4fe2de2422f3093e49924eb41e47ae48ee0d35684c6270909bd8202e56d55084be85923cf025746d197106431aa29237b465b2230fcb17f
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d9adb30d63e58dae5e173c524cdf7a8ebd6778b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a747faf85cdee95cd3d9cd0e24614f371351d27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1c3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1c3.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (917 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsite-sni.developers.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actifio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actifio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apigee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apigee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdefensealliance.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appdefensealliance.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazel.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazel.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cel.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cel.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.nest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.nest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsitetest.how'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devsitetest.how'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dialogflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuchsia.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuchsia.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generativeai.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.generativeai.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.generativeai.google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.google.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ai.google.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsic.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intrinsic.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jibemobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jibemobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.off.goog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onboarding.off.goog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openthread.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openthread.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openweave.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openweave.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openxla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openxla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.source.android.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantumai.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quantumai.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tensorflow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tensorflow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webrtc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webrtc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wing.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wing.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devsite.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devsite.google'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediapipe.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediapipe.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1c3/zdATt0Ex_Fk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc09b911a0000040300463044022025d45b352531c477a70f93d170591c6a14b9770711581103c74ba13bb8a2bf9e022044d83bc83899c499dccb8b33a117b8d2d0b068d7f795abf60abcaa3a0ca27d9400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc09b913e000004030047304502210094c467958089d403389666bd0b3dba27373d0f42fa4a5fff9b76845a5945b225022017e0e5dcbc1c811043d621e772dae5f3d96e694038ddbd452f235eb516ffa12d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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