connect.canuapp.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a7:09:d8:b6:73:b6:98:18:10:98:d6:c2:67:a7:3f:6f was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=connect.canuapp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a7:09:d8:b6:73:b6:98:18:10:98:d6:c2:67:a7:3f:6f
Serial Number (int): 222032201423619249452761309364823211887
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b8:fb:db:40:3b:ad:bc:2c:66:32:92:2e:3c:f1:cf:84:33:31:29:37
Fingerprint (sha256): 65:b6:d6:53:42:e8:3d:ca:e6:16:93:6d:39:8b:1d:95:45:e4:d7:77:84:cd:1e:7c:33:e9:ec:dd:37:b7:b4:52

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/HNFIIPW00Qg
CRL Distribution Point: http://crls.pki.goog/gts1d4/1ULi3EjEd-w.crl

Check the revocation status for certificate connect.canuapp.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.canuapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.canuapp.com
taste.xegyn.com
findthe.dev
smrt.scry.one
somm.fi
radioapp.easy4u.co
tomealsoft.com
api.cougargrades.io
express.testive.com
unknownverse-s.com
www.thailand-enx.com
celinecaly.net
api.techfairlive.com
time.synpulse.com
viktoriawehner.com
kodemuse.dev
account.weightplan.com
www.titlecaps.com
react-rss.grigsby.dev
eanx.lapieza.io
www.richardbonneau.com
barminga.de
editas-partyservice.de
www.yellawajadhav.com
www.ourhomegame.com
digitalsymphony.org
www.lykiq.com
parasol.ink
cn-dev.da.letsdive.io
cenog.net
dev.nifty.ink
link.youps.info
www.ancla.me
yuryev.me
app.dismissly.dev
www.5pointcare.com.au
www.stevemaguire.dev
agent.paycsc.in
www.anarijo.com.br
theexperienceclub.net
concordiabank.org
practicalml.net
comeonraw.app
haurakiroofpainting.co.nz
wwfypc.xyz
htlw.de
app.pongo.is
trueelectrix.co.nz
www.lunarworks.co.uk
whendidilast.xyz
securelink.bettercorp.co.za
app.learnchildrights.org
mspyratos.com
www.jurilica101.hr
crazylovepenguins.com
wittopkoning.nl
rnagroup.eu
www.chquan.dev
malaywhere.org
www.octopusmanmarketing.io
www.mixingboard.org
ukantu.com
decorstore.org
erhanersoz.com
survey.aroyomatch.com
beta.giveatip.io
au.creatoradar.com
social-manager-120445746.diendantuyendung.com
moje.oddzwaniaj.pl
reptilium.io
www.quilworks.com
highs.dev
tudormanufacture.eventsconcept.com
esgn.pro
ilkayd.dev
www.squadra.work
auth.gamepadviewer.com
www.sapp.mx
playlist.dj
www.gdgpescara.it
www.myquantumwater.com
www.zamaloz.com
johnelliott.dev
www.thunderdoges.com
auredjs.ca
calculating.geekings.net
www.thinkinsure.com
zamaloz.com
weight.fab2.at
naveensd.com
www.ethanshowe.com
www.ligzer.com
auth.ascap.cyberhaven.io
www.samparks.dev
app.loesuspedagogia.fr
dbs.llc
www.imnogood.fr
www.paragonatlas.com
apcsociety.org
www.stov.io

Other certificates including the domain name canuapp.com

(limited to 100 certificates)
www.kitchy.club
link.libere.co.in
www.codehero.es
learnmore.biorestorative.com
demo.prototypefactory.co
me-dating.com
r.ainyaku.com
app.neurau.com.br
qrapplink.com
www.mcareauto.com
www.darshilpatel.com
logistics.azfalte.com
fukuoka.linx.live
brunoponne.com
agent.paycsc.in
app.growos.net
trivinn.com
www.lakva-promotions.mn
www.shoutgif.com
frisbee.today
tieng.wiki
mlconsole.com
earlybirdva.org
www.chakulabora.app
mentoro.us
www.malatovi.cz
app.loanvidya.com
connect.canuapp.com
beyondthegrades.in
zzzpod.rethela.com
oriyahrs.com
qa-m.dlg1.app
orgesarizeybek.com
axleinspect.app
iprofile.app
j2d2development.com
liker.land
artisansplayhouse.com
www.rajdlova.cz
www.bluerano.com
frisbee.today
stacysinclair.ca
store.k-lab.io
olive.olivos.cl
eugene.to
pattanachaichemical.co.th
next.wap.live
fourteenislands.io
template.stepinsight.com.au
purplewave.portal.plenadata.com
www.mcareauto.com
preprod.secretsanta.mattpeskett.com
www.crai.no
idwalletpoc.bangkokbankinnohub.com
kumo.jrbotros.com
gage-admin-cci.activ8games.com
app.loanvidya.com
patrimobimoveis.com.br
affinity.portfoliolink.co.za
csun.no
www.iwayleaves.co.za
www.astroeventshouston.com
connect.canuapp.com
artisansplayhouse.com
qa-m.dlg1.app
www.transitpedia.com
indaohub.co.za

Certificate

The complete raw certificate details for connect.canuapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 222032201423619249452761309364823211887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 22:33:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 23:31:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.canuapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/HNFIIPW00Qg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1863 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.canuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taste.xegyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findthe.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smrt.scry.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somm.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioapp.easy4u.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomealsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.cougargrades.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'express.testive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unknownverse-s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thailand-enx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celinecaly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.techfairlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time.synpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viktoriawehner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodemuse.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.weightplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titlecaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react-rss.grigsby.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eanx.lapieza.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardbonneau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barminga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editas-partyservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellawajadhav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourhomegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lykiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parasol.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn-dev.da.letsdive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cenog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nifty.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.youps.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ancla.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuryev.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dismissly.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5pointcare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevemaguire.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.paycsc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anarijo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theexperienceclub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concordiabank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practicalml.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comeonraw.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haurakiroofpainting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwfypc.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htlw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pongo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trueelectrix.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lunarworks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whendidilast.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securelink.bettercorp.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.learnchildrights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mspyratos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurilica101.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazylovepenguins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wittopkoning.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnagroup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chquan.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaywhere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.octopusmanmarketing.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mixingboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukantu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decorstore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erhanersoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.aroyomatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.giveatip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.creatoradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-manager-120445746.diendantuyendung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moje.oddzwaniaj.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reptilium.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quilworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highs.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tudormanufacture.eventsconcept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgn.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilkayd.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squadra.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.gamepadviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sapp.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playlist.dj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gdgpescara.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myquantumwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zamaloz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnelliott.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thunderdoges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auredjs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculating.geekings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkinsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zamaloz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weight.fab2.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naveensd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethanshowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ligzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.ascap.cyberhaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samparks.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.loesuspedagogia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbs.llc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imnogood.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paragonatlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apcsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stov.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/1ULi3EjEd-w.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b16ca01b50000040300463044022041da951b9963133413427ea40c7a4faaa9501b188d42fbecf942a2551a5268ee0220149af12a419ad6267f9e0ea06dd7dd93804b20001fc204ec28f3df4bd2f6c90600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b16ca01bf0000040300473045022049279aea2dd937c40dd5294c5382d0953b63b2ea9c10180409f21b52b6edf252022100c21a78552cd237382899035962847ee3a2808658633177d4a170dd3b3959f594
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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