www.spendmysuper.org.nz

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 91:13:ad:2f:18:15:13:14:0a:e7:36:e4:60:43:c8:75 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.spendmysuper.org.nz

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 91:13:ad:2f:18:15:13:14:0a:e7:36:e4:60:43:c8:75
Serial Number (int): 192840225617163150978009214815951898741
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 28:48:b5:c6:5e:24:88:b9:82:d8:10:b5:5d:48:4c:41:11:fd:f1:cc
Fingerprint (sha256): c5:e2:b1:79:6a:c7:4a:ba:2d:46:df:44:62:3e:e5:da:19:f9:ca:55:48:0b:63:16:92:ad:64:92:ce:bf:09:fe

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/-3e-H8HZ7O4
CRL Distribution Point: http://crls.pki.goog/gts1d4/xII4Pd1eREs.crl

Check the revocation status for certificate www.spendmysuper.org.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.spendmysuper.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.spendmysuper.org.nz
www.phdpatologia.com.br
dynamic.firebase.sxyxy.top
did.daekyo.com
camp.kinderville.lviv.ua
congviec.kasoft.vn
www.condensis.com
www.andreydobrinski.com
weather.nyamikan.net
finalversion2.com
mtivate.com
launchteam.com
oneinterpreterdocs.sweethuman.tech
www.shopq.co.za
rekkons.ertim.org
actions.b-tastic.com
ar.a360.tech
giddyeffects.com
www.foodsandfeelings.com
ariyalur.yazhdroptaxi.co.in
golfcash.games
app.kiwi.com
tdespenza.com
goodnight2inn.com
www.friendlysoccer.com
opodoroapp.com
www.mymedifam.com
www.itztheappleeye.com
madebyayan.com
app.etsyemaildownloader.com
admin.azure-ar.com
firebase.sayvoca.com
recat-agr-dev.veronafiere.ozwol.tech
cms-prod.opennaukri.com
dev.remedyhealthapp.com
www.snookercoach147.com
www.thechatwynclinic.co.uk
excelinn.gb.hotekan.com
www.nograbass.com
thedevpin.com
www.tsbfoundation.app
streetside.aerialcincy.com
thetriodesk.com
links.royalgambit.app
www.devtools.best
www.newyorkstreetbystreet.com
clearwater-inspector.dev.resre.bm
popyn.app
applinks.eis24.me
marquetingproject.com
nahuelvillarino.com
www.trelly.co
beta.nowdraft.com
opportunitiesforzimbabweans.com
www.smartdeck.poker
onboarding.finrax.com
predictivpro-app.speakylink.com
company.doorkel-internship.com
blog.jubitz.ch
thehawaiitrader.com
www.vamelon.gr
stablebonds.com
placepartners.spreeloop.com
rostyslavsokolov.com
resoidusoleil.com
www.saurabh-dua.com
www.skiptoncamerata.com
slackinoffwork.com
www.total-promo.com
www.cornycohbs.com
vnbus.com.ua
games.mycluetivity.com
appanjo.com.br
godwinjibs.dev
yokimaa.com
kouwakai.app.1on1navi.com
thetechieking.com
jrcodingac.kr
intranet.hiqpix.com
admin.lovb.com
tpvindustry.com
uarmy-help.com
billy.ashmall.com
smart-timetable.app
admin.pagapresto.com
services.uniteddisability.com.au
www.thinkapart.com
www.agricolanectar.com
www.bytepic.dev
ugurcankilic.com
blog.vibepay.com
mintmyguitar.rocks
www.mercaderestatesales.com
calendario.jazida.com
www.thecatalyst.app
home.alexamin.de
app.quick-dictionary.com
www.topibrotech.com
datastore.odyssee.jp
link.rocketchart.co.kr

Other certificates including the domain name spendmysuper.org.nz

(limited to 100 certificates)
spendmysuper.org.nz
www.spendmysuper.org.nz
spendmysuper.org.nz
termine.hlm.at
www.aniadapt.com
le-cinq-moozi.site
www.beats-radio.com
spendmysuper.org.nz
app.pokeraid.me
alphadx.net
spendmysuper.org.nz
qwangu.com
beginu.life
savanrpatel.com
sooyongjie.codes
spendmysuper.org.nz
swcbba.org
www.machinelabs.ai
tobiaseilertsen.no
www.abwzher.website
myfuel.network
spendmysuper.org.nz
bns.backpackfordrive.app
dobbymail.com
spendmysuper.org.nz
spendmysuper.org.nz
www.spendmysuper.org.nz
theislandline.com
ashland.io
www.creativesminds.com
spendmysuper.org.nz
spendmysuper.org.nz
sls-qa.mobilenxt.app
o-o7.com

Certificate

The complete raw certificate details for www.spendmysuper.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINyTCCDLGgAwIBAgIRAJETrS8YFRMUCuc25GBDyHUwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwMzI0MDkyMjIzWhcNMjQwNjIy
MTAyMTA2WjAiMSAwHgYDVQQDExd3d3cuc3BlbmRteXN1cGVyLm9yZy5uejCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKrbNMni4A1i6VxvLEQdokPCI988
xC3Z+g+hMQkCJFBxgr+h7sJfUPDyCF7ImcmrfokkL0IQWfcEh2GLmBVr1w7dSsY9
QDTihVg5Flr4gvc1nYXWij3ZWM7QiXnDfpwK6xj5+iR6KYzxq6aAsjauTh1zcpxR
gbX79Gh3z5t+9WP3lK2lDnRAQzJV97aDnMoSC5WZ40IehpXRFfTbBnc+QD0Pxc8J
8I76beGjyR1T2ghfQBpANJeGDvqqu+yfLb6vnfw1y7HQ87v8x4cmaxciA2vAucfn
MIfD9qIbQ3OWLy4OCYZxsqSI2P78TOOmTpYatQXRCJBePS0GyVlg+V5VVFUCAwEA
AaOCCtQwggrQMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQhRcI7rEws62tPtefJ4sNq0b2zwjAfBgNV
HSMEGDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYI
KwYBBQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0Ly0zZS1IOEha
N080MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMx
ZDQuZGVyMIIIdgYDVR0RBIIIbTCCCGmCF3d3dy5zcGVuZG15c3VwZXIub3JnLm56
ghd3d3cucGhkcGF0b2xvZ2lhLmNvbS5icoIaZHluYW1pYy5maXJlYmFzZS5zeHl4
eS50b3CCDmRpZC5kYWVreW8uY29tghhjYW1wLmtpbmRlcnZpbGxlLmx2aXYudWGC
EmNvbmd2aWVjLmthc29mdC52boIRd3d3LmNvbmRlbnNpcy5jb22CF3d3dy5hbmRy
ZXlkb2JyaW5za2kuY29tghR3ZWF0aGVyLm55YW1pa2FuLm5ldIIRZmluYWx2ZXJz
aW9uMi5jb22CC210aXZhdGUuY29tgg5sYXVuY2h0ZWFtLmNvbYIib25laW50ZXJw
cmV0ZXJkb2NzLnN3ZWV0aHVtYW4udGVjaIIPd3d3LnNob3BxLmNvLnphghFyZWtr
b25zLmVydGltLm9yZ4IUYWN0aW9ucy5iLXRhc3RpYy5jb22CDGFyLmEzNjAudGVj
aIIQZ2lkZHllZmZlY3RzLmNvbYIYd3d3LmZvb2RzYW5kZmVlbGluZ3MuY29tghth
cml5YWx1ci55YXpoZHJvcHRheGkuY28uaW6CDmdvbGZjYXNoLmdhbWVzggxhcHAu
a2l3aS5jb22CDXRkZXNwZW56YS5jb22CEWdvb2RuaWdodDJpbm4uY29tghZ3d3cu
ZnJpZW5kbHlzb2NjZXIuY29tgg5vcG9kb3JvYXBwLmNvbYIRd3d3Lm15bWVkaWZh
bS5jb22CFnd3dy5pdHp0aGVhcHBsZWV5ZS5jb22CDm1hZGVieWF5YW4uY29tghth
cHAuZXRzeWVtYWlsZG93bmxvYWRlci5jb22CEmFkbWluLmF6dXJlLWFyLmNvbYIU
ZmlyZWJhc2Uuc2F5dm9jYS5jb22CJHJlY2F0LWFnci1kZXYudmVyb25hZmllcmUu
b3p3b2wudGVjaIIXY21zLXByb2Qub3Blbm5hdWtyaS5jb22CF2Rldi5yZW1lZHlo
ZWFsdGhhcHAuY29tghd3d3cuc25vb2tlcmNvYWNoMTQ3LmNvbYIad3d3LnRoZWNo
YXR3eW5jbGluaWMuY28udWuCF2V4Y2VsaW5uLmdiLmhvdGVrYW4uY29tghF3d3cu
bm9ncmFiYXNzLmNvbYINdGhlZGV2cGluLmNvbYIVd3d3LnRzYmZvdW5kYXRpb24u
YXBwghpzdHJlZXRzaWRlLmFlcmlhbGNpbmN5LmNvbYIPdGhldHJpb2Rlc2suY29t
ghVsaW5rcy5yb3lhbGdhbWJpdC5hcHCCEXd3dy5kZXZ0b29scy5iZXN0gh13d3cu
bmV3eW9ya3N0cmVldGJ5c3RyZWV0LmNvbYIhY2xlYXJ3YXRlci1pbnNwZWN0b3Iu
ZGV2LnJlc3JlLmJtgglwb3B5bi5hcHCCEWFwcGxpbmtzLmVpczI0Lm1lghVtYXJx
dWV0aW5ncHJvamVjdC5jb22CE25haHVlbHZpbGxhcmluby5jb22CDXd3dy50cmVs
bHkuY2+CEWJldGEubm93ZHJhZnQuY29tgh9vcHBvcnR1bml0aWVzZm9yemltYmFi
d2VhbnMuY29tghN3d3cuc21hcnRkZWNrLnBva2VyghVvbmJvYXJkaW5nLmZpbnJh
eC5jb22CH3ByZWRpY3RpdnByby1hcHAuc3BlYWt5bGluay5jb22CHmNvbXBhbnku
ZG9vcmtlbC1pbnRlcm5zaGlwLmNvbYIOYmxvZy5qdWJpdHouY2iCE3RoZWhhd2Fp
aXRyYWRlci5jb22CDnd3dy52YW1lbG9uLmdygg9zdGFibGVib25kcy5jb22CG3Bs
YWNlcGFydG5lcnMuc3ByZWVsb29wLmNvbYIUcm9zdHlzbGF2c29rb2xvdi5jb22C
EXJlc29pZHVzb2xlaWwuY29tghN3d3cuc2F1cmFiaC1kdWEuY29tghd3d3cuc2tp
cHRvbmNhbWVyYXRhLmNvbYISc2xhY2tpbm9mZndvcmsuY29tghN3d3cudG90YWwt
cHJvbW8uY29tghJ3d3cuY29ybnljb2hicy5jb22CDHZuYnVzLmNvbS51YYIWZ2Ft
ZXMubXljbHVldGl2aXR5LmNvbYIOYXBwYW5qby5jb20uYnKCDmdvZHdpbmppYnMu
ZGV2ggt5b2tpbWFhLmNvbYIZa291d2FrYWkuYXBwLjFvbjFuYXZpLmNvbYIRdGhl
dGVjaGlla2luZy5jb22CDWpyY29kaW5nYWMua3KCE2ludHJhbmV0LmhpcXBpeC5j
b22CDmFkbWluLmxvdmIuY29tgg90cHZpbmR1c3RyeS5jb22CDnVhcm15LWhlbHAu
Y29tghFiaWxseS5hc2htYWxsLmNvbYITc21hcnQtdGltZXRhYmxlLmFwcIIUYWRt
aW4ucGFnYXByZXN0by5jb22CIHNlcnZpY2VzLnVuaXRlZGRpc2FiaWxpdHkuY29t
LmF1ghJ3d3cudGhpbmthcGFydC5jb22CFnd3dy5hZ3JpY29sYW5lY3Rhci5jb22C
D3d3dy5ieXRlcGljLmRldoIQdWd1cmNhbmtpbGljLmNvbYIQYmxvZy52aWJlcGF5
LmNvbYISbWludG15Z3VpdGFyLnJvY2tzght3d3cubWVyY2FkZXJlc3RhdGVzYWxl
cy5jb22CFWNhbGVuZGFyaW8uamF6aWRhLmNvbYITd3d3LnRoZWNhdGFseXN0LmFw
cIIQaG9tZS5hbGV4YW1pbi5kZYIYYXBwLnF1aWNrLWRpY3Rpb25hcnkuY29tghN3
d3cudG9waWJyb3RlY2guY29tghRkYXRhc3RvcmUub2R5c3NlZS5qcIIWbGluay5y
b2NrZXRjaGFydC5jby5rcjAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5
AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFk
NC94SUk0UGQxZVJFcy5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB2/4g/
Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY5v+58NAAAEAwBHMEUCIBxN
kOQ+qfDIOBKU1DM6JwT4ld0WnC4Fyor7FxWfwwULAiEAgKwzLnUWziEXIe+8qVNv
IDyxbAj2hvITLX77zPFqZP4AdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv
4frUFwAAAY5v+57qAAAEAwBHMEUCIQCL5szL3r1NRSNPMeM5hs+T6soN9cx+rOlZ
oiLtQgGFSwIgNHNkYvyoqj/izwmsHwhKkt+y025B6lWxP8OHvgxev1AwDQYJKoZI
hvcNAQELBQADggEBAFT0lp8PAIJepe5uoCeuDa4CKb0Ph7b1rL2RU2ciN1L8gSVU
IxYvDrvFdOQq7Lwm+WVQoz98COokcU55M3JgmJD4zyNbUMe1m64xw1SrzYVemVeF
eun7iOHUk+m2dCN+aMzkfr4tpmO/W37qKOGoGM1aJEttoAFOvtHkT6LuS7t2VYJG
UStPihBTWGAOXMbFly8PWcH1fJAkQX5msONlQhspISF5QdlvJkx3a1KOjm795uX0
Rx1E/p+lWMrIhZMwyTBW1AgiqA+hcsljNyoEfAj82coysNPtOTYibuJFgZ3Res+x
VlXs0G4egyHYFY8JmHwOeadUPBavwm95P6VJZ6I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 192840225617163150978009214815951898741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 09:22:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 10:21:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.spendmysuper.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/-3e-H8HZ7O4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spendmysuper.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phdpatologia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic.firebase.sxyxy.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'did.daekyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp.kinderville.lviv.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congviec.kasoft.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.condensis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andreydobrinski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weather.nyamikan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finalversion2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtivate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launchteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneinterpreterdocs.sweethuman.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopq.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rekkons.ertim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actions.b-tastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.a360.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giddyeffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodsandfeelings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariyalur.yazhdroptaxi.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfcash.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.kiwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdespenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodnight2inn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendlysoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opodoroapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymedifam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itztheappleeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madebyayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.etsyemaildownloader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.azure-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebase.sayvoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recat-agr-dev.veronafiere.ozwol.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-prod.opennaukri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.remedyhealthapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snookercoach147.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thechatwynclinic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excelinn.gb.hotekan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nograbass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedevpin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsbfoundation.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetside.aerialcincy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetriodesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.royalgambit.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devtools.best'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkstreetbystreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearwater-inspector.dev.resre.bm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popyn.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applinks.eis24.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marquetingproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nahuelvillarino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trelly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.nowdraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunitiesforzimbabweans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartdeck.poker'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.finrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predictivpro-app.speakylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'company.doorkel-internship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.jubitz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehawaiitrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vamelon.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stablebonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placepartners.spreeloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rostyslavsokolov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resoidusoleil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saurabh-dua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skiptoncamerata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slackinoffwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.total-promo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornycohbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnbus.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.mycluetivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appanjo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godwinjibs.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yokimaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kouwakai.app.1on1navi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetechieking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrcodingac.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.hiqpix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lovb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpvindustry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarmy-help.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billy.ashmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-timetable.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pagapresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.uniteddisability.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkapart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agricolanectar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bytepic.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugurcankilic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.vibepay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mintmyguitar.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercaderestatesales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendario.jazida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecatalyst.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.alexamin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.quick-dictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topibrotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datastore.odyssee.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.rocketchart.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/xII4Pd1eREs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e6ffb9f0d000004030047304502201c4d90e43ea9f0c8381294d4333a2704f895dd169c2e05ca8afb17159fc3050b02210080ac332e7516ce211721efbca9536f203cb16c08f686f2132d7efbccf16a64fe0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e6ffb9eea00000403004730450221008be6cccbdebd4d45234f31e33986cf93eaca0df5cc7eace959a222ed4201854b022034736462fca8aa3fe2cf09ac1f084a92dfb2d36e41ea55b13fc387be0c5ebf50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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