mark.kunath.co.nz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number f0:3e:c5:93:0c:e2:4c:d2:12:7d:36:af:59:97:82:b9 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mark.kunath.co.nz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): f0:3e:c5:93:0c:e2:4c:d2:12:7d:36:af:59:97:82:b9
Serial Number (int): 319340648678828177913904010880903250617
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): d6:f7:4a:c1:5c:9e:da:25:57:2f:20:52:18:70:36:9c:5f:c8:6b:ed
Fingerprint (sha256): 3b:c6:13:42:88:e5:c9:09:f6:b2:03:ef:3f:1d:72:7c:56:e9:8b:d2:e6:4d:8f:b9:de:0f:8c:84:ab:ae:8d:b4

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/knrVyhC3GYQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/nWOLpEunyFU.crl

Check the revocation status for certificate mark.kunath.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mark.kunath.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mark.kunath.co.nz
sdfsdf.kvdigital.swiss
www.rukidoo.com
withaureus.org
jsons.org
app.ricardorover.com
cobanlitekstil.com
absoluteguides.ro
auth.jazzpharmaceuticals.cyberhaven.io
bsi.pensioenstartpunt.nl
inscription.silvex.io
staging.bcb.digital
www.infiniteworlds.games
doigo.website
northlands.io
qr.davinci.lighting
canary.rpm.arrowhealth.io
tamsinlewis.uk
switch.playground.xyz
link.quii-app.de
www.meistercards.com
stkp.in
www.snookercoach147app.com
tiquisurfacademy.com
destinyhomes.in
chat.usefulbots.com
ev1.life
aasthasinha.in
www.parabarshipping.com
www.wedzee.com
invenite.id
cyber-swiss-knife.ngecamp.co.id
www.platetext.app
zaa.sa
keval.io
www.allenportfolio.net
telegram-exported-json-viewer.projects.samad.fr
az-squad.com
www.guitarlessonsderby.co.uk
gyanchat.co
www.utahtravelpass.com
www.isteuerkindschonda.de
firebase.apstndb.net
webapp.tadatada.com
www.rvafamilydentalcenter.net
sandrasoft.app
www.xscientist.in
scoop.video
doortrends.com
www.healthcare-intelligence.de
beta.everywork.co
admin.rello.co
legacy.xdao.app
edf-re.parkalot.io
dev-bechozap.gupshup.io
staff.gocactus.io
eduasis.io
eacognate.com
beta.igov.direct
www.getevee.com
evmos.clowder.club
dev.bodyfast.de
admin.sparkbase.de
photography.phineas.io
admin.myfitnessworld.in
www.futuretechs.co.in
carniceria.zellship.com
www.laar-reinigung.de
gcattendanceapp.cmrl.in
www.thehumancloud.org
t.bedeliv.com
evento.tuadomanda.it
retail.dev-bechozap.gupshup.io
cartuninghub.com
elarteacuchillo.es
takechargewellness.co.tz
ticket-admin-ip.selforder.live
kiwibudget.com
sociilaw.com
services-theterrace.smartbuildings.app
brand.promoboxx.com
peloq.com
zeitguru.de
app.proximafitness.com
api.waveride.co
www.blacklanda.com
app46.dexper.io
dev.firefanfic.com
www.theremapp.com
www.ryanburgoon.com
www.websitedocaralho.com.br
www.diligence-mc.com
app.gamekamu.com
app.justrussel.es
synappsgroup.ir
dropflow.info
mdr.risksavior.com
www.abilways-eu.com
laz-spins-cert.3dcloud.io
development.vinos.com

Other certificates including the domain name kunath.co.nz

(limited to 100 certificates)
www.mrandmrsnuzzo.com
ccapitool.ezlo.com
sabebien.app
www.varejo360.com
marigold.kunath.co.nz
promocionjj93.com
ceabnar.com
app.fusionsushi.es
lydianuniverse.xyz
beta.careey.com
www.djonan.com
mark.kunath.co.nz
aestheticrace.com
store.bunyonyidistributors.com
fortuna.segudigital.org
lydianuniverse.com
1134.pontuax.com.br
nanny.love
api.eiendomsappen.com
ticks.cloud
ayat.ai
santiagojimenez.dev
2021.cruzhacks.com
riderpath.com
tgtr.nl
apphafen.de
cdtbigdata.com
sisyphus.mathematikoi.co
evalli.fr
iskanderzamaleev.online
www.abp-consulting.com
www.7thstreetrealty.com
goldhousestudios.com
www.wbbpeonlinee.com
www.denticenter.com.mx
drinks.danno.nz
beta.queuer.app
www.fooddek.com
promocionjj93.com
effiadd.com
mobil.eliar.cloud
www.limonapp.com
sales.academondo.com
www.nubbar.com.br
callummcgeeney.com
whibball.leaguesquare.com
swiftdaters.com

Certificate

The complete raw certificate details for mark.kunath.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINcTCCDFmgAwIBAgIRAPA+xZMM4kzSEn02r1mXgrkwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwNDE2MDEzMjM0WhcNMjQwNzE1
MDIzMDQ5WjAcMRowGAYDVQQDExFtYXJrLmt1bmF0aC5jby5uejCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAKrbNMni4A1i6VxvLEQdokPCI988xC3Z+g+h
MQkCJFBxgr+h7sJfUPDyCF7ImcmrfokkL0IQWfcEh2GLmBVr1w7dSsY9QDTihVg5
Flr4gvc1nYXWij3ZWM7QiXnDfpwK6xj5+iR6KYzxq6aAsjauTh1zcpxRgbX79Gh3
z5t+9WP3lK2lDnRAQzJV97aDnMoSC5WZ40IehpXRFfTbBnc+QD0Pxc8J8I76beGj
yR1T2ghfQBpANJeGDvqqu+yfLb6vnfw1y7HQ87v8x4cmaxciA2vAucfnMIfD9qIb
Q3OWLy4OCYZxsqSI2P78TOOmTpYatQXRCJBePS0GyVlg+V5VVFUCAwEAAaOCCoIw
ggp+MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQhRcI7rEws62tPtefJ4sNq0b2zwjAfBgNVHSMEGDAW
gBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUH
MAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L2tuclZ5aEMzR1lRMDEG
CCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVy
MIIIJAYDVR0RBIIIGzCCCBeCEW1hcmsua3VuYXRoLmNvLm56ghZzZGZzZGYua3Zk
aWdpdGFsLnN3aXNzgg93d3cucnVraWRvby5jb22CDndpdGhhdXJldXMub3Jngglq
c29ucy5vcmeCFGFwcC5yaWNhcmRvcm92ZXIuY29tghJjb2JhbmxpdGVrc3RpbC5j
b22CEWFic29sdXRlZ3VpZGVzLnJvgiZhdXRoLmphenpwaGFybWFjZXV0aWNhbHMu
Y3liZXJoYXZlbi5pb4IYYnNpLnBlbnNpb2Vuc3RhcnRwdW50Lm5sghVpbnNjcmlw
dGlvbi5zaWx2ZXguaW+CE3N0YWdpbmcuYmNiLmRpZ2l0YWyCGHd3dy5pbmZpbml0
ZXdvcmxkcy5nYW1lc4INZG9pZ28ud2Vic2l0ZYINbm9ydGhsYW5kcy5pb4ITcXIu
ZGF2aW5jaS5saWdodGluZ4IZY2FuYXJ5LnJwbS5hcnJvd2hlYWx0aC5pb4IOdGFt
c2lubGV3aXMudWuCFXN3aXRjaC5wbGF5Z3JvdW5kLnh5eoIQbGluay5xdWlpLWFw
cC5kZYIUd3d3Lm1laXN0ZXJjYXJkcy5jb22CB3N0a3AuaW6CGnd3dy5zbm9va2Vy
Y29hY2gxNDdhcHAuY29tghR0aXF1aXN1cmZhY2FkZW15LmNvbYIPZGVzdGlueWhv
bWVzLmlughNjaGF0LnVzZWZ1bGJvdHMuY29tgghldjEubGlmZYIOYWFzdGhhc2lu
aGEuaW6CF3d3dy5wYXJhYmFyc2hpcHBpbmcuY29tgg53d3cud2VkemVlLmNvbYIL
aW52ZW5pdGUuaWSCH2N5YmVyLXN3aXNzLWtuaWZlLm5nZWNhbXAuY28uaWSCEXd3
dy5wbGF0ZXRleHQuYXBwggZ6YWEuc2GCCGtldmFsLmlvghZ3d3cuYWxsZW5wb3J0
Zm9saW8ubmV0gi90ZWxlZ3JhbS1leHBvcnRlZC1qc29uLXZpZXdlci5wcm9qZWN0
cy5zYW1hZC5mcoIMYXotc3F1YWQuY29tghx3d3cuZ3VpdGFybGVzc29uc2RlcmJ5
LmNvLnVrggtneWFuY2hhdC5jb4IWd3d3LnV0YWh0cmF2ZWxwYXNzLmNvbYIZd3d3
LmlzdGV1ZXJraW5kc2Nob25kYS5kZYIUZmlyZWJhc2UuYXBzdG5kYi5uZXSCE3dl
YmFwcC50YWRhdGFkYS5jb22CHXd3dy5ydmFmYW1pbHlkZW50YWxjZW50ZXIubmV0
gg5zYW5kcmFzb2Z0LmFwcIIRd3d3LnhzY2llbnRpc3QuaW6CC3Njb29wLnZpZGVv
gg5kb29ydHJlbmRzLmNvbYIed3d3LmhlYWx0aGNhcmUtaW50ZWxsaWdlbmNlLmRl
ghFiZXRhLmV2ZXJ5d29yay5jb4IOYWRtaW4ucmVsbG8uY2+CD2xlZ2FjeS54ZGFv
LmFwcIISZWRmLXJlLnBhcmthbG90LmlvghdkZXYtYmVjaG96YXAuZ3Vwc2h1cC5p
b4IRc3RhZmYuZ29jYWN0dXMuaW+CCmVkdWFzaXMuaW+CDWVhY29nbmF0ZS5jb22C
EGJldGEuaWdvdi5kaXJlY3SCD3d3dy5nZXRldmVlLmNvbYISZXZtb3MuY2xvd2Rl
ci5jbHVigg9kZXYuYm9keWZhc3QuZGWCEmFkbWluLnNwYXJrYmFzZS5kZYIWcGhv
dG9ncmFwaHkucGhpbmVhcy5pb4IXYWRtaW4ubXlmaXRuZXNzd29ybGQuaW6CFXd3
dy5mdXR1cmV0ZWNocy5jby5pboIXY2FybmljZXJpYS56ZWxsc2hpcC5jb22CFXd3
dy5sYWFyLXJlaW5pZ3VuZy5kZYIXZ2NhdHRlbmRhbmNlYXBwLmNtcmwuaW6CFXd3
dy50aGVodW1hbmNsb3VkLm9yZ4INdC5iZWRlbGl2LmNvbYIUZXZlbnRvLnR1YWRv
bWFuZGEuaXSCHnJldGFpbC5kZXYtYmVjaG96YXAuZ3Vwc2h1cC5pb4IQY2FydHVu
aW5naHViLmNvbYISZWxhcnRlYWN1Y2hpbGxvLmVzghh0YWtlY2hhcmdld2VsbG5l
c3MuY28udHqCHnRpY2tldC1hZG1pbi1pcC5zZWxmb3JkZXIubGl2ZYIOa2l3aWJ1
ZGdldC5jb22CDHNvY2lpbGF3LmNvbYImc2VydmljZXMtdGhldGVycmFjZS5zbWFy
dGJ1aWxkaW5ncy5hcHCCE2JyYW5kLnByb21vYm94eC5jb22CCXBlbG9xLmNvbYIL
emVpdGd1cnUuZGWCFmFwcC5wcm94aW1hZml0bmVzcy5jb22CD2FwaS53YXZlcmlk
ZS5jb4ISd3d3LmJsYWNrbGFuZGEuY29tgg9hcHA0Ni5kZXhwZXIuaW+CEmRldi5m
aXJlZmFuZmljLmNvbYIRd3d3LnRoZXJlbWFwcC5jb22CE3d3dy5yeWFuYnVyZ29v
bi5jb22CG3d3dy53ZWJzaXRlZG9jYXJhbGhvLmNvbS5icoIUd3d3LmRpbGlnZW5j
ZS1tYy5jb22CEGFwcC5nYW1la2FtdS5jb22CEWFwcC5qdXN0cnVzc2VsLmVzgg9z
eW5hcHBzZ3JvdXAuaXKCDWRyb3BmbG93LmluZm+CEm1kci5yaXNrc2F2aW9yLmNv
bYITd3d3LmFiaWx3YXlzLWV1LmNvbYIZbGF6LXNwaW5zLWNlcnQuM2RjbG91ZC5p
b4IVZGV2ZWxvcG1lbnQudmlub3MuY29tMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwG
CisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdv
b2cvZ3RzMWQ0L25XT0xwRXVueUZVLmNybDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjuS/vt4AAAQD
AEgwRgIhAJyAsdxtahUKGV5UaK8tQQ8Xu+w2TvGj6yGfFokg8uIlAiEA7q32dLFJ
MpPXxaaMbTM9eF6UW1wINuhmHOe4sCyQ+W8AdQB2/4g/Crb7lVHCYcz1h7o0tKTN
uyncaEIKn+ZnTFo6dAAAAY7kv77kAAAEAwBGMEQCIFu3H4wUocBmPZwmKOJYCMfk
JqCFuuUIHG1lRLDETaYmAiAUfefWQFv2TPfagRvBQ9ByLiofQEnHs087f2UPLI0n
hDANBgkqhkiG9w0BAQsFAAOCAQEAMnXWAH4cqYMDf1j+fixvAzAoBl0tThwUTjiT
Jkfq6K9xLbA9Ohvir61E7WfajMaSxgT5/Sr2sdqrEWCftORi93PDu5MVBvz9E/C+
yajVlCJrC7L0syTACMM1SZq0X3KjNmgWGyXPUiM7n8HLjxG6FYblYiSjdw0et+/9
Oh6cL1hvrYV+kg7Rd8BNx09j6EgdFSck2YCjMBHNEqrp78UwOWS/RPdDffy1EejK
wwohF016pdrx0p81/zpD3LRBJCE8KRhflKSgDzkt5cnGFJCRLm5lZ93TnEAnubWz
/NFC0pPcYZHeSi+6jFsLBd1+eOy/jQK9K9Av0z0TSXSg3YYmng==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319340648678828177913904010880903250617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 01:32:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 02:30:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mark.kunath.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/knrVyhC3GYQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2075 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mark.kunath.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdfsdf.kvdigital.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rukidoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withaureus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ricardorover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobanlitekstil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absoluteguides.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jazzpharmaceuticals.cyberhaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsi.pensioenstartpunt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscription.silvex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bcb.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infiniteworlds.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doigo.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northlands.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.davinci.lighting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary.rpm.arrowhealth.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamsinlewis.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switch.playground.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.quii-app.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meistercards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stkp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snookercoach147app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiquisurfacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinyhomes.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.usefulbots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ev1.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aasthasinha.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parabarshipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wedzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invenite.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyber-swiss-knife.ngecamp.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platetext.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaa.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keval.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allenportfolio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telegram-exported-json-viewer.projects.samad.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az-squad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guitarlessonsderby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyanchat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahtravelpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isteuerkindschonda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.apstndb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.tadatada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rvafamilydentalcenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandrasoft.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xscientist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoop.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doortrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthcare-intelligence.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.everywork.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rello.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.xdao.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edf-re.parkalot.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bechozap.gupshup.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.gocactus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduasis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eacognate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.igov.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getevee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evmos.clowder.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bodyfast.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sparkbase.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photography.phineas.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.myfitnessworld.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futuretechs.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carniceria.zellship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laar-reinigung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcattendanceapp.cmrl.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehumancloud.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.bedeliv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evento.tuadomanda.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.dev-bechozap.gupshup.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartuninghub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elarteacuchillo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takechargewellness.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket-admin-ip.selforder.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwibudget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sociilaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-theterrace.smartbuildings.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.promoboxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peloq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeitguru.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.proximafitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.waveride.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blacklanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app46.dexper.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.firefanfic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theremapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryanburgoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websitedocaralho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diligence-mc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gamekamu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.justrussel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synappsgroup.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dropflow.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdr.risksavior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abilways-eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laz-spins-cert.3dcloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.vinos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/nWOLpEunyFU.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee4bfbede00000403004830460221009c80b1dc6d6a150a195e5468af2d410f17bbec364ef1a3eb219f168920f2e225022100eeadf674b1493293d7c5a68c6d333d785e945b5c0836e8661ce7b8b02c90f96f00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee4bfbee4000004030046304402205bb71f8c14a1c0663d9c2628e25808c7e426a085bae5081c6d6544b0c44da6260220147de7d6405bf64cf7da811bc143d0722e2a1f4049c7b34f3b7f650f2c8d2784
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003275d6007e1ca983037f58fe7e2c6f033028065d2d4e1c144e38932647eae8af712db03d3a1be2afad44ed67da8cc692c604f9fd2af6b1daab11609fb4e462f773c3bb931506fcfd13f0bec9a8d594226b0bb2f4b324c008c335499ab45f72a33668161b25cf52233b9fc1cb8f11ba1586e56224a3770d1eb7effd3a1e9c2f586fad857e920ed177c04dc74f63e8481d152724d980a33011cd12aae9efc5303964bf44f7437dfcb511e8cac30a21174d7aa5daf1d29f35ff3a43dcb44124213c29185f94a4a00f392de5c9c61490912e6e6567ddd39c4027b9b5b3fcd142d293dc6191de4a2fba8c5b0b05dd7e78ecbf8d02bd2bd02fd33d134974a0dd86269e