www.kriterion.ai

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 10:37:ba:d3:54:29:33:e5:0a:82:5f:31:16:0b:0e:83 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kriterion.ai

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:37:ba:d3:54:29:33:e5:0a:82:5f:31:16:0b:0e:83
Serial Number (int): 21557013531153191055853653841322643075
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 06:a9:dc:d9:14:3d:50:f5:1b:98:ed:b6:dd:11:e7:bd:16:b7:0c:fc
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 9d:6b:b7:bb:52:ba:10:16:e4:de:25:ee:3e:43:54:2b:50:74:1a:74
Fingerprint (sha256): bb:8d:1a:21:d9:16:9e:3d:56:8c:4e:2f:d5:56:bd:c7:39:8a:ad:68:8e:8d:20:47:c3:dd:11:3c:3e:b4:98:5b

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/3fTuQE_347k
CRL Distribution Point: http://crls.pki.goog/gts1d4/jNFuOCd9KYk.crl

Check the revocation status for certificate www.kriterion.ai

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kriterion.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kriterion.ai
www.packbeez.com
api-dev.decaf.so
www.pestrackservices.in
app.kauteq.com
app.get-customers.co.uk
adwind.ca
www.cnery.app
tulukasanjuan.turnosweb.app
uwii.app
www.sensation-gap.com
chrishenke.us
www.anetaferreira.com
read-o.app
www.perezbrown.com.co
auth.unrestricted.eu
foodfoodfood.xyz
32farenheit.com
www.ecoceptive.co.uk
invite.heyto.live
cube.chronotope.io
www.webeese.com
bupahealthandcare.com.au
parkerschmidt.co
imagey.org
andrewtiller.com
socially.network
kama.co
www.eltctata.com
domenicopontari.site
faces.software
giftr.app
search.bastien.pw
cellular-obd-obdcns.cox2m.com
www.panlotto.com
main.scontrol.club
www.luvimac.com
flutter.autocallbox.com
closedcaptain.com
boogiesoftware.com
ipfsgateway.ownerfy.com
www.matsuborough.opendata.report
admin.saldorapido.com.ve
app.avantidance.com
betaorion.com
new-qa.beautycountertest.com
cartdiscussion.com
busright.com
app.bluechew.com
www.bir-studio.com
awaywiththehoa.com
www.firedrag.com
www.acordar.app
abazizitbi.website
staging.poster.land
firebase.worker.flexy.com
yvis.piticommerce.com
bclcopticals.com
raafconsulting.com
auth.test.tryforest.com
brooklynmarathon.com
www.vltenterprise.com
audioluceslimitada.com
www.j1ee.com
establecimientolangelica.com
www.dev.scaffcalc.com
www.app.scaffcalc.com
horseofcourseapp.com
app.ministryofpup.com
www.ioxconsulting.co.za
simonrook.nl
bellgateresearch.com
www.hyun.lawyer
zeuscargadores.com
sandbox.chargeholidays.com
www.cidadaniaportuguesa.com
www.dom.us
www.alexhollender.com
machiana.info
tsat-carga-qa.rgn.io
thehammercos.com
fun-fake-parody.fr
www.hhuynhtechlead.com
lous.wabantech.com
chamet.in
katamama.net
resound.spillpdf.com
lapointe.technis.com
uplif.spillpdf.com
lordly.wabantech.com
septeo-app.speakylink.com
app.advancedonlineinsights.com
www.go.umico.app
piclab.com
www.imagey.org
www.olegkalugin.com
xpresslis.com
ajmotor.com
rei-infra.com
app.ob-talk.com

Other certificates including the domain name kriterion.ai

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.kriterion.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINIzCCDAugAwIBAgIQEDe601QpM+UKgl8xFgsOgzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzAzMTgxMjMxNTlaFw0yMzA2MTYx
MzMwMzVaMBsxGTAXBgNVBAMTEHd3dy5rcml0ZXJpb24uYWkwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDSIDj51QpaAyxyMLB6KzB6Dj8DTy7Gt8co3Aac
Dr/P443tnK1ZoCC/H6r4RKqCB9U5jrxiCwSJOcegOGmCCtatvrYJ/8cF6LrMPjC4
kAIVEzgq1IpYcgWyP2MthqppaIib8LPih+znXBICLEjz2WWEwD2n79SJq3tfdjed
iGt/F8FDglFPqOfk73xzyq/YywJbdk1OhvlZHpYnEFLZBaT/+1UwyM5OGLr3BqHX
dsgVyCXekGUP/K5ELQn33VOpZX0JiBXXJTW2yHj0IRdkPzaNeq0ThQJQnZVHgbCt
GFymhrHNw6uFPIQ+diUcvYucRtDYkkpF0Yw56A6xV2Vzd76BAgMBAAGjggo2MIIK
MjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUBqnc2RQ9UPUbmO223RHnvRa3DPwwHwYDVR0jBBgwFoAU
JeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzAB
hilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC8zZlR1UUVfMzQ3azAxBggr
BgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjCC
B9gGA1UdEQSCB88wggfLghB3d3cua3JpdGVyaW9uLmFpghB3d3cucGFja2JlZXou
Y29tghBhcGktZGV2LmRlY2FmLnNvghd3d3cucGVzdHJhY2tzZXJ2aWNlcy5pboIO
YXBwLmthdXRlcS5jb22CF2FwcC5nZXQtY3VzdG9tZXJzLmNvLnVrgglhZHdpbmQu
Y2GCDXd3dy5jbmVyeS5hcHCCG3R1bHVrYXNhbmp1YW4udHVybm9zd2ViLmFwcIII
dXdpaS5hcHCCFXd3dy5zZW5zYXRpb24tZ2FwLmNvbYINY2hyaXNoZW5rZS51c4IV
d3d3LmFuZXRhZmVycmVpcmEuY29tggpyZWFkLW8uYXBwghV3d3cucGVyZXpicm93
bi5jb20uY2+CFGF1dGgudW5yZXN0cmljdGVkLmV1ghBmb29kZm9vZGZvb2QueHl6
gg8zMmZhcmVuaGVpdC5jb22CFHd3dy5lY29jZXB0aXZlLmNvLnVrghFpbnZpdGUu
aGV5dG8ubGl2ZYISY3ViZS5jaHJvbm90b3BlLmlvgg93d3cud2ViZWVzZS5jb22C
GGJ1cGFoZWFsdGhhbmRjYXJlLmNvbS5hdYIQcGFya2Vyc2NobWlkdC5jb4IKaW1h
Z2V5Lm9yZ4IQYW5kcmV3dGlsbGVyLmNvbYIQc29jaWFsbHkubmV0d29ya4IHa2Ft
YS5jb4IQd3d3LmVsdGN0YXRhLmNvbYIUZG9tZW5pY29wb250YXJpLnNpdGWCDmZh
Y2VzLnNvZnR3YXJlgglnaWZ0ci5hcHCCEXNlYXJjaC5iYXN0aWVuLnB3gh1jZWxs
dWxhci1vYmQtb2JkY25zLmNveDJtLmNvbYIQd3d3LnBhbmxvdHRvLmNvbYISbWFp
bi5zY29udHJvbC5jbHVigg93d3cubHV2aW1hYy5jb22CF2ZsdXR0ZXIuYXV0b2Nh
bGxib3guY29tghFjbG9zZWRjYXB0YWluLmNvbYISYm9vZ2llc29mdHdhcmUuY29t
ghdpcGZzZ2F0ZXdheS5vd25lcmZ5LmNvbYIgd3d3Lm1hdHN1Ym9yb3VnaC5vcGVu
ZGF0YS5yZXBvcnSCGGFkbWluLnNhbGRvcmFwaWRvLmNvbS52ZYITYXBwLmF2YW50
aWRhbmNlLmNvbYINYmV0YW9yaW9uLmNvbYIcbmV3LXFhLmJlYXV0eWNvdW50ZXJ0
ZXN0LmNvbYISY2FydGRpc2N1c3Npb24uY29tggxidXNyaWdodC5jb22CEGFwcC5i
bHVlY2hldy5jb22CEnd3dy5iaXItc3R1ZGlvLmNvbYISYXdheXdpdGh0aGVob2Eu
Y29tghB3d3cuZmlyZWRyYWcuY29tgg93d3cuYWNvcmRhci5hcHCCEmFiYXppeml0
Ymkud2Vic2l0ZYITc3RhZ2luZy5wb3N0ZXIubGFuZIIZZmlyZWJhc2Uud29ya2Vy
LmZsZXh5LmNvbYIVeXZpcy5waXRpY29tbWVyY2UuY29tghBiY2xjb3B0aWNhbHMu
Y29tghJyYWFmY29uc3VsdGluZy5jb22CF2F1dGgudGVzdC50cnlmb3Jlc3QuY29t
ghRicm9va2x5bm1hcmF0aG9uLmNvbYIVd3d3LnZsdGVudGVycHJpc2UuY29tghZh
dWRpb2x1Y2VzbGltaXRhZGEuY29tggx3d3cuajFlZS5jb22CHGVzdGFibGVjaW1p
ZW50b2xhbmdlbGljYS5jb22CFXd3dy5kZXYuc2NhZmZjYWxjLmNvbYIVd3d3LmFw
cC5zY2FmZmNhbGMuY29tghRob3JzZW9mY291cnNlYXBwLmNvbYIVYXBwLm1pbmlz
dHJ5b2ZwdXAuY29tghd3d3cuaW94Y29uc3VsdGluZy5jby56YYIMc2ltb25yb29r
Lm5sghRiZWxsZ2F0ZXJlc2VhcmNoLmNvbYIPd3d3Lmh5dW4ubGF3eWVyghJ6ZXVz
Y2FyZ2Fkb3Jlcy5jb22CGnNhbmRib3guY2hhcmdlaG9saWRheXMuY29tght3d3cu
Y2lkYWRhbmlhcG9ydHVndWVzYS5jb22CCnd3dy5kb20udXOCFXd3dy5hbGV4aG9s
bGVuZGVyLmNvbYINbWFjaGlhbmEuaW5mb4IUdHNhdC1jYXJnYS1xYS5yZ24uaW+C
EHRoZWhhbW1lcmNvcy5jb22CEmZ1bi1mYWtlLXBhcm9keS5mcoIWd3d3LmhodXlu
aHRlY2hsZWFkLmNvbYISbG91cy53YWJhbnRlY2guY29tggljaGFtZXQuaW6CDGth
dGFtYW1hLm5ldIIUcmVzb3VuZC5zcGlsbHBkZi5jb22CFGxhcG9pbnRlLnRlY2hu
aXMuY29tghJ1cGxpZi5zcGlsbHBkZi5jb22CFGxvcmRseS53YWJhbnRlY2guY29t
ghlzZXB0ZW8tYXBwLnNwZWFreWxpbmsuY29tgh5hcHAuYWR2YW5jZWRvbmxpbmVp
bnNpZ2h0cy5jb22CEHd3dy5nby51bWljby5hcHCCCnBpY2xhYi5jb22CDnd3dy5p
bWFnZXkub3JnghN3d3cub2xlZ2thbHVnaW4uY29tgg14cHJlc3NsaXMuY29tggth
am1vdG9yLmNvbYINcmVpLWluZnJhLmNvbYIPYXBwLm9iLXRhbGsuY29tMCEGA1Ud
IAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYr
aHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0L2pORnVPQ2Q5S1lrLmNybDCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB1ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zw
Aw55NqWaAAABhvTrg8gAAAQDAEYwRAIgeDLTt5RtHC1WM8qTr2HtgbM81dQCcOiL
BFBeyIVkygwCIBZfkpFRqyVmDITNMLHZYJ9pQg4p6NEVA7jivCQ+CxopAHcA6D7Q
2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGG9OuDrwAABAMASDBGAiEA
v1zfLciTRS/xcPboqe2qWh1cwUSpRIUnDgL/m5zTJj4CIQC8N23bFp82FEBFnZVO
EkJXcIcOy3cNE6UXi1r4sEHYojANBgkqhkiG9w0BAQsFAAOCAQEAkaY5HT5cv8aS
RQslyEf8fFm94Pw3DTAVid7uSOjpcn6TZ0Z5TtFgftDqDH6ui+UePMZ9NvZLgZxI
eCa+Z24PSIADnU0SzYtTHeTvnVWk9/+S35rdZVGN5nqQrTRTQ9FHvZS4M7qb6ZlM
rDhWZ5LRiS86P92z1wPhb5DVFVVx2uKffQmLH6aDiC8Zz1hIBJJaPsszdi+HCnGh
e68tBz9o8yHN8++AJ1uAih3EgLQHrl8+aOt8NjOVavfvvOBTkOzyy8Y8l9ULtVb1
9vK3M2J7VgGll1gS0t67RKYmbJOCYMJFvRDqF/z6DddmwQkmWtwOOCeR7HOrId6i
OwVn43WArg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iA4+dUKWgMscjCweisw
eg4/A08uxrfHKNwGnA6/z+ON7ZytWaAgvx+q+ESqggfVOY68YgsEiTnHoDhpggrW
rb62Cf/HBei6zD4wuJACFRM4KtSKWHIFsj9jLYaqaWiIm/Cz4ofs51wSAixI89ll
hMA9p+/Uiat7X3Y3nYhrfxfBQ4JRT6jn5O98c8qv2MsCW3ZNTob5WR6WJxBS2QWk
//tVMMjOThi69wah13bIFcgl3pBlD/yuRC0J991TqWV9CYgV1yU1tsh49CEXZD82
jXqtE4UCUJ2VR4GwrRhcpoaxzcOrhTyEPnYlHL2LnEbQ2JJKRdGMOegOsVdlc3e+
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21557013531153191055853653841322643075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-18 12:31:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 13:30:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kriterion.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525933580473082111902249977497198299994490395761839978378162005556210476922102498228393338084215176214197038894889124325278730686380955455712746447605380648917731815551589204020578061323224350018416055347721947400544776263522574153747128000271249321641389996925660781157998197386549805823258347667957672573970034102118826753107869834487674216475479004984314527749613089221470795786318433709790651477915732855492285840438387760600312452607599772433687779429213040087417300203697244164894481552935821991050859377758894995681469085389619826728311635349456383635012773065020430746666490592639036774769513815608292523649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9dcd9143d50f51b98edb6dd11e7bd16b70cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/3fTuQE_347k'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1999 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kriterion.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.packbeez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.decaf.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pestrackservices.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kauteq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.get-customers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adwind.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnery.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulukasanjuan.turnosweb.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uwii.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sensation-gap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrishenke.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anetaferreira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read-o.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perezbrown.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.unrestricted.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodfoodfood.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '32farenheit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecoceptive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite.heyto.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cube.chronotope.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webeese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bupahealthandcare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkerschmidt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewtiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socially.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kama.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eltctata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domenicopontari.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faces.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftr.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.bastien.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellular-obd-obdcns.cox2m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panlotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.scontrol.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luvimac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutter.autocallbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closedcaptain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boogiesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipfsgateway.ownerfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matsuborough.opendata.report'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saldorapido.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.avantidance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betaorion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-qa.beautycountertest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartdiscussion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bluechew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bir-studio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awaywiththehoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firedrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acordar.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abazizitbi.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.poster.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.worker.flexy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvis.piticommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bclcopticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raafconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.test.tryforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklynmarathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vltenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audioluceslimitada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.j1ee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'establecimientolangelica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.scaffcalc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.scaffcalc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horseofcourseapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ministryofpup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ioxconsulting.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simonrook.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellgateresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyun.lawyer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeuscargadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.chargeholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidadaniaportuguesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dom.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexhollender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'machiana.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsat-carga-qa.rgn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehammercos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fun-fake-parody.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hhuynhtechlead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lous.wabantech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamet.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katamama.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resound.spillpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapointe.technis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uplif.spillpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lordly.wabantech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'septeo-app.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.advancedonlineinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.go.umico.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piclab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imagey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olegkalugin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpresslis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajmotor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rei-infra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.ob-talk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/jNFuOCd9KYk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000186f4eb83c8000004030046304402207832d3b7946d1c2d5633ca93af61ed81b33cd5d40270e88b04505ec88564ca0c0220165f929151ab25660c84cd30b1d9609f69420e29e8d11503b8e2bc243e0b1a29007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186f4eb83af0000040300483046022100bf5cdf2dc893452ff170f6e8a9edaa5a1d5cc144a94485270e02ff9b9cd3263e022100bc376ddb169f361440459d954e12425770870ecb770d13a5178b5af8b041d8a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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