pwa.kardbank.com.br

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 38:b6:d8:ba:ab:15:72:fc:10:00:00:00:00:0e:77:16 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pwa.kardbank.com.br

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:b6:d8:ba:ab:15:72:fc:10:00:00:00:00:0e:77:16
Serial Number (int): 75386161582069111046157499896645449494
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 6b:15:a2:e1:ee:4d:7f:89:0b:19:67:71:6e:5f:00:05:e0:f7:af:60
Fingerprint (sha256): 74:4a:56:c7:73:98:10:d1:8c:48:0d:29:5b:5b:59:c8:64:19:7e:1d:a2:c1:cf:21:79:70:40:11:54:0d:98:57

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/3JE0hR0ryZA
CRL Distribution Point: http://crls.pki.goog/gts1d4/73mEGYQCgDc.crl

Check the revocation status for certificate pwa.kardbank.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pwa.kardbank.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pwa.kardbank.com.br
mta-sts.epageot.com
www.epageot.com
devuzit.com
www.gardenstatekokikai.com
www.hannahcorrello.com
glimbaro.com
heridoanything.com
helloworldapp.com
assets.heridoanything.com
www.coconutplace.kr
academy.kasbahtalfin.com
www.johnsbarden.com
www.lorinformer.com
www.kamytech.com
manabie.com
www.ecom.tintoc.vn
es.blog.lovers14.com
www.mapsweeper.com
mapsweeper.com
kaizen.oonlive.com
maxcues.com
www.nikafoundation.com
dashboard.persistiny.com
camps.refquest.com
www.roqnet.com
royalcryptoworld.com
www.makingpositivewaves.com
swlacy.com
thehellodiary.com
www.sevanakendram.com
www.thehellodiary.com
sagicarmel.com
test.torkkecrj.com
www.trumpdeathclock.com
www.theiocollective.com
youmatchwho.com
www.youmatchwho.com
vicmarserv.com
coventry.vygoapp.com
c.z7jv.com
fabian-glueck.de
x.vonderswap.finance
havre-paix.fr
www.yasaineko.com
clipster.matthiasschicker.de
staging.caduceus.merkkur.de
the.gives
www.unknowngamer.in
www.khishaenterprises.in
ericbess.fr
auth.deployment-k2t9er.cyberhaven.io
auth.siempre.io
srvenibpiqvja4mx7bzy.smartimob.io
foodeli.life
www.foodeli.life
invoicy.reflog.me
furytime.net
www.mondadoriacquiterme.it
imbeton.mk
go.zoektjou.nu
geniusacademy.one
www.meetshepherd.no
history.mayash.org
horarum.org
www.verdensbiblioteket.no
www.neki.org
www.slimmerverhuizen.nl
prime-chimes.org
primechimes.org
frederikniesner.page
springout.org
www.dahderma.my
www.mariannaalexandraki.photos
matthieuharbich.photography
www.moliri.space
freshgreencart.store
nelreina.tech
pos-staging.pubq.se
www.bni-romania.ro
staging.api.v2.tnsj.pt
dispatcher.porta.tools
dev.deliver.porta.tools
dev.console.porta.tools
dev.dispatcher.porta.tools
www.phntm.xyz
despace.app
link.payremit.app
questions.najibu.app
huntingtonatallah.wedding
app.computinglab.co.uk
pokertable.app
www.pokertable.app
www.sofatv.app
www.studyu.app
crossbulls.turnosweb.app
quarantinedreams.app
www.peterip.associates
jardiparc.stepinsight.com.au
go.wegfinder.app

Other certificates including the domain name kardbank.com.br

(limited to 100 certificates)
www.neki.org
ecoinscan.ecoe.vn
www.athomearticulation.com
portal.rpsit.ac.in
learnmore.biorestorative.com
merce.io
patrie-hachinohe.com
www.getitapp.co
www.developeranil.tech
nextercare.it
beta.quantumfintech.group
shop247.top
supportus.karriereheld.team
idapps.id2son.fr
www.lakva-promotions.mn
cryptocs.online
k.ozonehl.com
kahkecioglu.com
app.talket.io
www.herox-technologies.com
www.minuto.ca
learn.tamilarasi.org
app.joosmoo.com
les2palmiers.com
nossosamba.com.br
pwa.kardbank.com.br
www.anasmo.no
app-v1.thirdfort.com
eskole.ccwc.io
humancloudmanifesto.org
elena-consulting.art
www.anasmo.no
databridgeanalytica.com
www.dealcraft.org
www.bwltech.com
pwa.kardbank.com.br
www.partylyd.no
flaxboll.io
market-muse-standalone.parlor.io
app.aqabacc.org
checkout.paiementloxam.fr
external.signing.bondvet.dev
www.codepitcher.io
alexandreidier.fr
shop247.top
www.thefirst.in
picathlon.com
mail.escoladechoro.com.br
admin.safecatarman.today
www.sevendazebeerleague.com
heridoanything.com
devtek.info
oasis.libf.ac.uk
palsup.com
flashalpha.xyz
atwellness360.com
brianmerlin.fr
atwellness360.com
zdo.com
cms.dieringe.com
www.digger.fi
www.balkanboymedia.com
calendarly.app

Certificate

The complete raw certificate details for pwa.kardbank.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINYjCCDEqgAwIBAgIQOLbYuqsVcvwQAAAAAA53FjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMjAzMjIxNjE2MTRaFw0yMjA2MjAx
NjE2MTNaMB4xHDAaBgNVBAMTE3B3YS5rYXJkYmFuay5jb20uYnIwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2zTJ4uANYulcbyxEHaJDwiPfPMQt2foP
oTEJAiRQcYK/oe7CX1Dw8gheyJnJq36JJC9CEFn3BIdhi5gVa9cO3UrGPUA04oVY
ORZa+IL3NZ2F1oo92VjO0Il5w36cCusY+fokeimM8aumgLI2rk4dc3KcUYG1+/Ro
d8+bfvVj95StpQ50QEMyVfe2g5zKEguVmeNCHoaV0RX02wZ3PkA9D8XPCfCO+m3h
o8kdU9oIX0AaQDSXhg76qrvsny2+r538Ncux0PO7/MeHJmsXIgNrwLnH5zCHw/ai
G0Nzli8uDgmGcbKkiNj+/Ezjpk6WGrUF0QiQXj0tBslZYPleVVRVAgMBAAGjggpy
MIIKbjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUIUXCO6xMLOtrT7XnyeLDatG9s8IwHwYDVR0jBBgw
FoAUJeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUF
BzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC8zSkUwaFIwcnlaQTAx
BggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRl
cjCCCBYGA1UdEQSCCA0wgggJghNwd2Eua2FyZGJhbmsuY29tLmJyghNtdGEtc3Rz
LmVwYWdlb3QuY29tgg93d3cuZXBhZ2VvdC5jb22CC2RldnV6aXQuY29tghp3d3cu
Z2FyZGVuc3RhdGVrb2tpa2FpLmNvbYIWd3d3Lmhhbm5haGNvcnJlbGxvLmNvbYIM
Z2xpbWJhcm8uY29tghJoZXJpZG9hbnl0aGluZy5jb22CEWhlbGxvd29ybGRhcHAu
Y29tghlhc3NldHMuaGVyaWRvYW55dGhpbmcuY29tghN3d3cuY29jb251dHBsYWNl
LmtyghhhY2FkZW15Lmthc2JhaHRhbGZpbi5jb22CE3d3dy5qb2huc2JhcmRlbi5j
b22CE3d3dy5sb3JpbmZvcm1lci5jb22CEHd3dy5rYW15dGVjaC5jb22CC21hbmFi
aWUuY29tghJ3d3cuZWNvbS50aW50b2Mudm6CFGVzLmJsb2cubG92ZXJzMTQuY29t
ghJ3d3cubWFwc3dlZXBlci5jb22CDm1hcHN3ZWVwZXIuY29tghJrYWl6ZW4ub29u
bGl2ZS5jb22CC21heGN1ZXMuY29tghZ3d3cubmlrYWZvdW5kYXRpb24uY29tghhk
YXNoYm9hcmQucGVyc2lzdGlueS5jb22CEmNhbXBzLnJlZnF1ZXN0LmNvbYIOd3d3
LnJvcW5ldC5jb22CFHJveWFsY3J5cHRvd29ybGQuY29tght3d3cubWFraW5ncG9z
aXRpdmV3YXZlcy5jb22CCnN3bGFjeS5jb22CEXRoZWhlbGxvZGlhcnkuY29tghV3
d3cuc2V2YW5ha2VuZHJhbS5jb22CFXd3dy50aGVoZWxsb2RpYXJ5LmNvbYIOc2Fn
aWNhcm1lbC5jb22CEnRlc3QudG9ya2tlY3JqLmNvbYIXd3d3LnRydW1wZGVhdGhj
bG9jay5jb22CF3d3dy50aGVpb2NvbGxlY3RpdmUuY29tgg95b3VtYXRjaHdoby5j
b22CE3d3dy55b3VtYXRjaHdoby5jb22CDnZpY21hcnNlcnYuY29tghRjb3ZlbnRy
eS52eWdvYXBwLmNvbYIKYy56N2p2LmNvbYIQZmFiaWFuLWdsdWVjay5kZYIUeC52
b25kZXJzd2FwLmZpbmFuY2WCDWhhdnJlLXBhaXguZnKCEXd3dy55YXNhaW5la28u
Y29tghxjbGlwc3Rlci5tYXR0aGlhc3NjaGlja2VyLmRlghtzdGFnaW5nLmNhZHVj
ZXVzLm1lcmtrdXIuZGWCCXRoZS5naXZlc4ITd3d3LnVua25vd25nYW1lci5pboIY
d3d3LmtoaXNoYWVudGVycHJpc2VzLmluggtlcmljYmVzcy5mcoIkYXV0aC5kZXBs
b3ltZW50LWsydDllci5jeWJlcmhhdmVuLmlvgg9hdXRoLnNpZW1wcmUuaW+CIXNy
dmVuaWJwaXF2amE0bXg3Ynp5LnNtYXJ0aW1vYi5pb4IMZm9vZGVsaS5saWZlghB3
d3cuZm9vZGVsaS5saWZlghFpbnZvaWN5LnJlZmxvZy5tZYIMZnVyeXRpbWUubmV0
ghp3d3cubW9uZGFkb3JpYWNxdWl0ZXJtZS5pdIIKaW1iZXRvbi5ta4IOZ28uem9l
a3Rqb3UubnWCEWdlbml1c2FjYWRlbXkub25lghN3d3cubWVldHNoZXBoZXJkLm5v
ghJoaXN0b3J5Lm1heWFzaC5vcmeCC2hvcmFydW0ub3Jnghl3d3cudmVyZGVuc2Jp
Ymxpb3Rla2V0Lm5vggx3d3cubmVraS5vcmeCF3d3dy5zbGltbWVydmVyaHVpemVu
Lm5sghBwcmltZS1jaGltZXMub3Jngg9wcmltZWNoaW1lcy5vcmeCFGZyZWRlcmlr
bmllc25lci5wYWdlgg1zcHJpbmdvdXQub3Jngg93d3cuZGFoZGVybWEubXmCHnd3
dy5tYXJpYW5uYWFsZXhhbmRyYWtpLnBob3Rvc4IbbWF0dGhpZXVoYXJiaWNoLnBo
b3RvZ3JhcGh5ghB3d3cubW9saXJpLnNwYWNlghRmcmVzaGdyZWVuY2FydC5zdG9y
ZYINbmVscmVpbmEudGVjaIITcG9zLXN0YWdpbmcucHVicS5zZYISd3d3LmJuaS1y
b21hbmlhLnJvghZzdGFnaW5nLmFwaS52Mi50bnNqLnB0ghZkaXNwYXRjaGVyLnBv
cnRhLnRvb2xzghdkZXYuZGVsaXZlci5wb3J0YS50b29sc4IXZGV2LmNvbnNvbGUu
cG9ydGEudG9vbHOCGmRldi5kaXNwYXRjaGVyLnBvcnRhLnRvb2xzgg13d3cucGhu
dG0ueHl6ggtkZXNwYWNlLmFwcIIRbGluay5wYXlyZW1pdC5hcHCCFHF1ZXN0aW9u
cy5uYWppYnUuYXBwghlodW50aW5ndG9uYXRhbGxhaC53ZWRkaW5nghZhcHAuY29t
cHV0aW5nbGFiLmNvLnVrgg5wb2tlcnRhYmxlLmFwcIISd3d3LnBva2VydGFibGUu
YXBwgg53d3cuc29mYXR2LmFwcIIOd3d3LnN0dWR5dS5hcHCCGGNyb3NzYnVsbHMu
dHVybm9zd2ViLmFwcIIUcXVhcmFudGluZWRyZWFtcy5hcHCCFnd3dy5wZXRlcmlw
LmFzc29jaWF0ZXOCHGphcmRpcGFyYy5zdGVwaW5zaWdodC5jb20uYXWCEGdvLndl
Z2ZpbmRlci5hcHAwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8
BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxZDQvNzNt
RUdZUUNnRGMuY3JsMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA36Veq2iCTx9s
re64X04+WurNohKkal6OOxLAIERcKnMAAAF/sqZpxAAABAMARjBEAiAmTo/sSGgO
zB6UMOLpJgErX3QlCsaSzacxzD2etkDcNAIgf6jLXbZZEtTkg4NW1KHY/owmfEeO
o7QdynYLkALLZ7YAdQBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAA
AX+ypmmsAAAEAwBGMEQCIAf5VoOkdpK1A0x53+dBy+VGxMZUrNru0ceuPwByqxgG
AiB8LpfaDau0PXZlsgZ5xCqJaPoW0UJLsSCip3npUQeHjDANBgkqhkiG9w0BAQsF
AAOCAQEADHB0yC+1NkXIHLKFAN9E/v8t2SG43PMbL8hKkN5icHRpDo8dmyuUThCD
Zi7A6Wno4keBA1HIpSxLOWCW6x80boabSfNV3m5eHSuLFMUlNUbJXxCxH99mVSaZ
Le+xtiaSaf5+mhfuNRQ3V5aZSU+QZjeVTI9uJVqM1muB9fmrBK+emy6HskwtqV1/
ifQPBpG+seGXjmx07onQ4TAZZovcr25tXzspIZWBP9XpGfMCRyMD6pgVVltzqOna
2HQviapm1kaVWWZuc9g4wr5UxURtjDxb//FHe35N8x59XiiKlWLWyfcOYSNt6wFZ
7/1CdvEPz7H+gows6iH5qcN3OZimzg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75386161582069111046157499896645449494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-22 16:16:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-20 16:16:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pwa.kardbank.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/3JE0hR0ryZA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2061 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwa.kardbank.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.epageot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epageot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devuzit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardenstatekokikai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hannahcorrello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glimbaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heridoanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helloworldapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.heridoanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coconutplace.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.kasbahtalfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsbarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorinformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manabie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecom.tintoc.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.blog.lovers14.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mapsweeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapsweeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaizen.oonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxcues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikafoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.persistiny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camps.refquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roqnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcryptoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makingpositivewaves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swlacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehellodiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sevanakendram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehellodiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagicarmel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.torkkecrj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trumpdeathclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theiocollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youmatchwho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youmatchwho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicmarserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coventry.vygoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.z7jv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabian-glueck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x.vonderswap.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havre-paix.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yasaineko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clipster.matthiasschicker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.caduceus.merkkur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the.gives'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unknowngamer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khishaenterprises.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericbess.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.deployment-k2t9er.cyberhaven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.siempre.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srvenibpiqvja4mx7bzy.smartimob.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodeli.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodeli.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoicy.reflog.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furytime.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mondadoriacquiterme.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imbeton.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.zoektjou.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniusacademy.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetshepherd.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.mayash.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horarum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verdensbiblioteket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neki.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slimmerverhuizen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime-chimes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primechimes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frederikniesner.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dahderma.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariannaalexandraki.photos'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthieuharbich.photography'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moliri.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshgreencart.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelreina.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos-staging.pubq.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bni-romania.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.v2.tnsj.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dispatcher.porta.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.deliver.porta.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.console.porta.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dispatcher.porta.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phntm.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'despace.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.payremit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questions.najibu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonatallah.wedding'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.computinglab.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokertable.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pokertable.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sofatv.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyu.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossbulls.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quarantinedreams.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peterip.associates'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jardiparc.stepinsight.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.wegfinder.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/73mEGYQCgDc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017fb2a669c400000403004630440220264e8fec48680ecc1e9430e2e926012b5f74250ac692cda731cc3d9eb640dc3402207fa8cb5db65912d4e4838356d4a1d8fe8c267c478ea3b41dca760b9002cb67b600750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017fb2a669ac0000040300463044022007f95683a47692b5034c79dfe741cbe546c4c654acdaeed1c7ae3f0072ab180602207c2e97da0dabb43d7665b20679c42a8968fa16d1424bb120a2a779e95107878c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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