admin.haleakala.app
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number f9:d8:17:cf:79:70:5d:6d:10:b1:da:c1:5e:28:64:6a was issued on by Google Trust Services LLC.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=admin.haleakala.app
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): f9:d8:17:cf:79:70:5d:6d:10:b1:da:c1:5e:28:64:6aSerial Number (int): 332099790005121626634108763661434119274
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): 5e:d2:10:7f:61:72:76:fa:dc:3e:89:a8:b8:21:48:b6:16:8c:f8:e7
Fingerprint (sha256): 4c:84:86:8d:5a:a2:b3:19:e6:26:56:e6:f7:7a:1b:93:47:e3:17:17:15:18:6e:73:ee:86:b7:b8:42:39:19:ae
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/-WgnAfK071kCRL Distribution Point: http://crls.pki.goog/gts1d4/5ZjMMdrL-rw.crl
Check the revocation status for certificate admin.haleakala.app
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for admin.haleakala.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
admin.haleakala.app
jsmart.app
obsurv.app
accessart.art
app.staging.handit.app
www.jhlincoln.com.br
lbi-abr.aws.whitelabel.com.br
dashboard.futuralabs.co
nbrief.ch
app.ontask.co
s2.sakamichi.co
sarto.co
www.nbrief.ch
www.rudsat.com.br
blog.stratifylabs.co
cf.cheerble.co
virtual-demo.2vanx.com
app.agriofinans.com
descent.aldel.com
alentejoguidedtours.com
applepromonthly.com
artsuruj.com
api.billscanners.com
brightcomputereducation.com
dev-app.ca-lmapp.com
www.coditas.com
www.caisias.com
test.calidadhealthcare.com
contratsdetravail.com
corvallismurals.com
running.dena.com
firelucent.com
digitaltxc.com
claim.geodb.com
investlinksocial.com
www.itsmarawi.com
www.izekago.com
jeroennicolai.com
lillysabriapp.com
nobul.com
app-sandbox.olliesports.com
staging.macvag.com
orchardgame.com
www.pandamg.com
www.pedrosilvestre.com
s2technovations.com
sorbetapp.com
holetex.com
theresolutesikh.com
studio.uzu-app.com
www.vervely-jordan.com
weneedjungler.com
letmeask.alysson.dev
www.28dental.de
endoskopia.eu
app.memorycube.dk
www.ollikotro.fi
www.shrinika.in
www.yakagy.com
koj.im
app-stage.vlifenow.com
beta.1lynk.io
vaccines-staging.medgrocer.io
short.health.moneytrack.io
overlab.io
dream.mahima.life
owais.me
quizes.donorflow.net
www.jesuscardona.com.mx
oflatmate.net
control-panel.tcas-backoffice.tcaster.net
letter.pmtokyo.jp
10club.team
glascosun.column.us
golfodinapoli.ro
ops.budget.com.pt
profitabull.co.uk
ibresources.study
kansaschief.column.us
www.alezy.ru
tellme.world
partners.tellme.world
www.my-records.app
uat.partners.tellme.world
www.qkqn.app
tagtag.app
qkqn.app
www.tagtag.app
demo.turbochat.app
cecrops.smovin.be
www.pockt.com.au
gsloca.com.br
www.cancianimoveis.com.br
coty.hrbot.com.br
www.appaudit.com.br
armazemsteakbeer.com.br
auth.google.conectinove.com.br
bpn-sulampapua.gms.church
clinicarc.cl
planificador.kziete.cl
jsmart.app
obsurv.app
accessart.art
app.staging.handit.app
www.jhlincoln.com.br
lbi-abr.aws.whitelabel.com.br
dashboard.futuralabs.co
nbrief.ch
app.ontask.co
s2.sakamichi.co
sarto.co
www.nbrief.ch
www.rudsat.com.br
blog.stratifylabs.co
cf.cheerble.co
virtual-demo.2vanx.com
app.agriofinans.com
descent.aldel.com
alentejoguidedtours.com
applepromonthly.com
artsuruj.com
api.billscanners.com
brightcomputereducation.com
dev-app.ca-lmapp.com
www.coditas.com
www.caisias.com
test.calidadhealthcare.com
contratsdetravail.com
corvallismurals.com
running.dena.com
firelucent.com
digitaltxc.com
claim.geodb.com
investlinksocial.com
www.itsmarawi.com
www.izekago.com
jeroennicolai.com
lillysabriapp.com
nobul.com
app-sandbox.olliesports.com
staging.macvag.com
orchardgame.com
www.pandamg.com
www.pedrosilvestre.com
s2technovations.com
sorbetapp.com
holetex.com
theresolutesikh.com
studio.uzu-app.com
www.vervely-jordan.com
weneedjungler.com
letmeask.alysson.dev
www.28dental.de
endoskopia.eu
app.memorycube.dk
www.ollikotro.fi
www.shrinika.in
www.yakagy.com
koj.im
app-stage.vlifenow.com
beta.1lynk.io
vaccines-staging.medgrocer.io
short.health.moneytrack.io
overlab.io
dream.mahima.life
owais.me
quizes.donorflow.net
www.jesuscardona.com.mx
oflatmate.net
control-panel.tcas-backoffice.tcaster.net
letter.pmtokyo.jp
10club.team
glascosun.column.us
golfodinapoli.ro
ops.budget.com.pt
profitabull.co.uk
ibresources.study
kansaschief.column.us
www.alezy.ru
tellme.world
partners.tellme.world
www.my-records.app
uat.partners.tellme.world
www.qkqn.app
tagtag.app
qkqn.app
www.tagtag.app
demo.turbochat.app
cecrops.smovin.be
www.pockt.com.au
gsloca.com.br
www.cancianimoveis.com.br
coty.hrbot.com.br
www.appaudit.com.br
armazemsteakbeer.com.br
auth.google.conectinove.com.br
bpn-sulampapua.gms.church
clinicarc.cl
planificador.kziete.cl
Other certificates including the domain name haleakala.app
(limited to 100 certificates)
admin.okolo.com.ua
malli.club
ristretto.group
dev.links.ourmosque.co.uk
www.ruffnready.ca
resource.hhc.aerus.app
login.quattrol365.com
fthinopoli.gr
www.haleakala.app
xorcare.ru
training-rtomedical.sampleassist.com
bfcards.app
www.letshappygo.tw
eltrasterobar.salvadormares.com
team.ziggu.app
s.glampinghub.com
lemonadeart.com
www.wev-app.fr
nickromero.dev
www.studysubs.com
admin.haleakala.app
resource.hhc.aerus.app
store.alemoreau.fr
anc.lookatmyparty.com
www.emilhedaya.com
firebase.socabox.com
grandmassewing.com
www.studysubs.com
golfodinapoli.ro
davidevans.org.uk
buyukayi.com
customer.driveexpert.app
memegram.apptget.com
team.blubag.app
chaichee.queuer.app
test.fifaboss.app
iltx.org
demo.redacted.ai
haleakala.app
wenow.com.br
api.knowing.app
www.mylink.fyi
app.savemywordle.com
www.haleakala.app
closedbrackets.com
techmyrmidons.com
haleakala.app
stickout.app
lcsf.turnosweb.app
gunn.app
x.tsukuba.io
api.rcsnail.com
ilanit-2020-postdocs.cf
drinkhappy.net
x-men.alandandar.com
admin.haleakala.app
www.stara-app.com
nextcheckbox.com
nuemedi.com
www.match145.com
umanity.io
warehouse.rcloud.dev
fleenier.cf
api.bepos.io
courtneyabele.com
app.must.events
mayoristas.dementeremeras.com.ar
f1recap.barnazagoni.com
app.snp.io
p.ueue.com.au
malli.club
ristretto.group
dev.links.ourmosque.co.uk
www.ruffnready.ca
resource.hhc.aerus.app
login.quattrol365.com
fthinopoli.gr
www.haleakala.app
xorcare.ru
training-rtomedical.sampleassist.com
bfcards.app
www.letshappygo.tw
eltrasterobar.salvadormares.com
team.ziggu.app
s.glampinghub.com
lemonadeart.com
www.wev-app.fr
nickromero.dev
www.studysubs.com
admin.haleakala.app
resource.hhc.aerus.app
store.alemoreau.fr
anc.lookatmyparty.com
www.emilhedaya.com
firebase.socabox.com
grandmassewing.com
www.studysubs.com
golfodinapoli.ro
davidevans.org.uk
buyukayi.com
customer.driveexpert.app
memegram.apptget.com
team.blubag.app
chaichee.queuer.app
test.fifaboss.app
iltx.org
demo.redacted.ai
haleakala.app
wenow.com.br
api.knowing.app
www.mylink.fyi
app.savemywordle.com
www.haleakala.app
closedbrackets.com
techmyrmidons.com
haleakala.app
stickout.app
lcsf.turnosweb.app
gunn.app
x.tsukuba.io
api.rcsnail.com
ilanit-2020-postdocs.cf
drinkhappy.net
x-men.alandandar.com
admin.haleakala.app
www.stara-app.com
nextcheckbox.com
nuemedi.com
www.match145.com
umanity.io
warehouse.rcloud.dev
fleenier.cf
api.bepos.io
courtneyabele.com
app.must.events
mayoristas.dementeremeras.com.ar
f1recap.barnazagoni.com
app.snp.io
p.ueue.com.au
Certificate
The complete raw certificate details for admin.haleakala.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIM8jCCC9qgAwIBAgIRAPnYF895cF1tELHawV4oZGowDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjIwNzIyMTIxMDQ4WhcNMjIxMDIw MTIxMDQ3WjAeMRwwGgYDVQQDExNhZG1pbi5oYWxlYWthbGEuYXBwMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2iQ8Ij3zzELdn6 D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvXDt1Kxj1ANOKF WDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5OHXNynFGBtfv0 aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5APQ/Fzwnwjvpt 4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyIDa8C5x+cwh8P2 ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVUVQIDAQABo4IK ATCCCf0wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFCFFwjusTCzra0+158niw2rRvbPCMB8GA1UdIwQY MBaAFCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEF BQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvLVdnbkFmSzA3MWsw MQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5k ZXIwggejBgNVHREEggeaMIIHloITYWRtaW4uaGFsZWFrYWxhLmFwcIIKanNtYXJ0 LmFwcIIKb2JzdXJ2LmFwcIINYWNjZXNzYXJ0LmFydIIWYXBwLnN0YWdpbmcuaGFu ZGl0LmFwcIIUd3d3LmpobGluY29sbi5jb20uYnKCHWxiaS1hYnIuYXdzLndoaXRl bGFiZWwuY29tLmJyghdkYXNoYm9hcmQuZnV0dXJhbGFicy5jb4IJbmJyaWVmLmNo gg1hcHAub250YXNrLmNvgg9zMi5zYWthbWljaGkuY2+CCHNhcnRvLmNvgg13d3cu bmJyaWVmLmNoghF3d3cucnVkc2F0LmNvbS5icoIUYmxvZy5zdHJhdGlmeWxhYnMu Y2+CDmNmLmNoZWVyYmxlLmNvghZ2aXJ0dWFsLWRlbW8uMnZhbnguY29tghNhcHAu YWdyaW9maW5hbnMuY29tghFkZXNjZW50LmFsZGVsLmNvbYIXYWxlbnRlam9ndWlk ZWR0b3Vycy5jb22CE2FwcGxlcHJvbW9udGhseS5jb22CDGFydHN1cnVqLmNvbYIU YXBpLmJpbGxzY2FubmVycy5jb22CG2JyaWdodGNvbXB1dGVyZWR1Y2F0aW9uLmNv bYIUZGV2LWFwcC5jYS1sbWFwcC5jb22CD3d3dy5jb2RpdGFzLmNvbYIPd3d3LmNh aXNpYXMuY29tghp0ZXN0LmNhbGlkYWRoZWFsdGhjYXJlLmNvbYIVY29udHJhdHNk ZXRyYXZhaWwuY29tghNjb3J2YWxsaXNtdXJhbHMuY29tghBydW5uaW5nLmRlbmEu Y29tgg5maXJlbHVjZW50LmNvbYIOZGlnaXRhbHR4Yy5jb22CD2NsYWltLmdlb2Ri LmNvbYIUaW52ZXN0bGlua3NvY2lhbC5jb22CEXd3dy5pdHNtYXJhd2kuY29tgg93 d3cuaXpla2Fnby5jb22CEWplcm9lbm5pY29sYWkuY29tghFsaWxseXNhYnJpYXBw LmNvbYIJbm9idWwuY29tghthcHAtc2FuZGJveC5vbGxpZXNwb3J0cy5jb22CEnN0 YWdpbmcubWFjdmFnLmNvbYIPb3JjaGFyZGdhbWUuY29tgg93d3cucGFuZGFtZy5j b22CFnd3dy5wZWRyb3NpbHZlc3RyZS5jb22CE3MydGVjaG5vdmF0aW9ucy5jb22C DXNvcmJldGFwcC5jb22CC2hvbGV0ZXguY29tghN0aGVyZXNvbHV0ZXNpa2guY29t ghJzdHVkaW8udXp1LWFwcC5jb22CFnd3dy52ZXJ2ZWx5LWpvcmRhbi5jb22CEXdl bmVlZGp1bmdsZXIuY29tghRsZXRtZWFzay5hbHlzc29uLmRldoIPd3d3LjI4ZGVu dGFsLmRlgg1lbmRvc2tvcGlhLmV1ghFhcHAubWVtb3J5Y3ViZS5ka4IQd3d3Lm9s bGlrb3Ryby5maYIPd3d3LnNocmluaWthLmlugg53d3cueWFrYWd5LmNvbYIGa29q LmltghZhcHAtc3RhZ2UudmxpZmVub3cuY29tgg1iZXRhLjFseW5rLmlvgh12YWNj aW5lcy1zdGFnaW5nLm1lZGdyb2Nlci5pb4Iac2hvcnQuaGVhbHRoLm1vbmV5dHJh Y2suaW+CCm92ZXJsYWIuaW+CEWRyZWFtLm1haGltYS5saWZlgghvd2Fpcy5tZYIU cXVpemVzLmRvbm9yZmxvdy5uZXSCF3d3dy5qZXN1c2NhcmRvbmEuY29tLm14gg1v ZmxhdG1hdGUubmV0giljb250cm9sLXBhbmVsLnRjYXMtYmFja29mZmljZS50Y2Fz dGVyLm5ldIIRbGV0dGVyLnBtdG9reW8uanCCCzEwY2x1Yi50ZWFtghNnbGFzY29z dW4uY29sdW1uLnVzghBnb2xmb2RpbmFwb2xpLnJvghFvcHMuYnVkZ2V0LmNvbS5w dIIRcHJvZml0YWJ1bGwuY28udWuCEWlicmVzb3VyY2VzLnN0dWR5ghVrYW5zYXNj aGllZi5jb2x1bW4udXOCDHd3dy5hbGV6eS5ydYIMdGVsbG1lLndvcmxkghVwYXJ0 bmVycy50ZWxsbWUud29ybGSCEnd3dy5teS1yZWNvcmRzLmFwcIIZdWF0LnBhcnRu ZXJzLnRlbGxtZS53b3JsZIIMd3d3LnFrcW4uYXBwggp0YWd0YWcuYXBwgghxa3Fu LmFwcIIOd3d3LnRhZ3RhZy5hcHCCEmRlbW8udHVyYm9jaGF0LmFwcIIRY2Vjcm9w cy5zbW92aW4uYmWCEHd3dy5wb2NrdC5jb20uYXWCDWdzbG9jYS5jb20uYnKCGXd3 dy5jYW5jaWFuaW1vdmVpcy5jb20uYnKCEWNvdHkuaHJib3QuY29tLmJyghN3d3cu YXBwYXVkaXQuY29tLmJyghdhcm1hemVtc3RlYWtiZWVyLmNvbS5icoIeYXV0aC5n b29nbGUuY29uZWN0aW5vdmUuY29tLmJyghlicG4tc3VsYW1wYXB1YS5nbXMuY2h1 cmNoggxjbGluaWNhcmMuY2yCFnBsYW5pZmljYWRvci5remlldGUuY2wwIQYDVR0g BBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6Athito dHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxZDQvNVpqTU1kckwtcncuY3JsMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHYARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy /HD+bUcAAAGCJgqzTwAABAMARzBFAiA9xbtsZBLNjebeY5DMHUSv6i9MjEox1ede 00ZBVbiK0QIhAIZkXmCFxwpND3GopxNPa1QKkyJAkvOxD6Ady7qfJnxkAHYAQcjK sd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAGCJgqzWQAABAMARzBFAiBB Zrpp8Q7tdZ9fTgdjjKRZucJ9hSH/6Fo2UoxyHgCQUQIhAOw2F8VN6DHZVPAABBpW JQaD4yw5DF8rdRhKMgF4d9+qMA0GCSqGSIb3DQEBCwUAA4IBAQAqlr5pGsFmKhyC PmChY8fZ96dk/hBcP5tCJnZrsSwQgSgQp3q74OshQR++e9INZ062c9EjF7SOBKYH 0mRMsP0GgiOH2hexJi25pa/dOiT6vQ61YNRmXBnpiiVayfz74b7v7lK+fNWMu68d U9kj1mJCKTF6swKwGv14QTEw1u0/H7P9uicwFOOC/9Q7CGWSGvULmRhEWBO2Pw0i m1YjZ0kh6kIaxNhQSdHVXpeC60HYedFGQe/ybRR/8vs8li46kdO5koQTajgaPxNb hIl9zTWD+7xZwFaYKMN5B7+y43pWC7c62vMsx2e8f9wRPEH59UVdy6Qnbmu+L2pL G3Rb/bKj -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU VQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 332099790005121626634108763661434119274 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-22 12:10:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-20 12:10:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.haleakala.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/-WgnAfK071k' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1946 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.haleakala.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsmart.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsurv.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessart.art' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.staging.handit.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhlincoln.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbi-abr.aws.whitelabel.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.futuralabs.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbrief.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ontask.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.sakamichi.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarto.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbrief.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudsat.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.stratifylabs.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.cheerble.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual-demo.2vanx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.agriofinans.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descent.aldel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alentejoguidedtours.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applepromonthly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsuruj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.billscanners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightcomputereducation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-app.ca-lmapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coditas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caisias.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.calidadhealthcare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contratsdetravail.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corvallismurals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'running.dena.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firelucent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaltxc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claim.geodb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investlinksocial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itsmarawi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.izekago.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeroennicolai.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lillysabriapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nobul.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-sandbox.olliesports.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.macvag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchardgame.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pandamg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedrosilvestre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2technovations.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorbetapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holetex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theresolutesikh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.uzu-app.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vervely-jordan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weneedjungler.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letmeask.alysson.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28dental.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endoskopia.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.memorycube.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollikotro.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shrinika.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yakagy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koj.im' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-stage.vlifenow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.1lynk.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccines-staging.medgrocer.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'short.health.moneytrack.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overlab.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dream.mahima.life' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owais.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizes.donorflow.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesuscardona.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oflatmate.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control-panel.tcas-backoffice.tcaster.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letter.pmtokyo.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10club.team' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glascosun.column.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfodinapoli.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.budget.com.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profitabull.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibresources.study' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansaschief.column.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alezy.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellme.world' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.tellme.world' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-records.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.partners.tellme.world' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qkqn.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagtag.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkqn.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tagtag.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.turbochat.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecrops.smovin.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pockt.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsloca.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cancianimoveis.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coty.hrbot.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appaudit.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armazemsteakbeer.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.google.conectinove.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpn-sulampapua.gms.church' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicarc.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planificador.kziete.cl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/5ZjMMdrL-rw.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000182260ab34f000004030047304502203dc5bb6c6412cd8de6de6390cc1d44afea2f4c8c4a31d5e75ed3464155b88ad102210086645e6085c70a4d0f71a8a7134f6b540a93224092f3b10fa01dcbba9f267c6400760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000182260ab359000004030047304502204166ba69f10eed759f5f4e07638ca459b9c27d8521ffe85a36528c721e009051022100ec3617c54de831d954f000041a56250683e32c390c5f2b75184a32017877dfaa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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