connect.canuapp.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 3e:bc:54:ea:da:ff:d0:14:12:45:0c:2b:f2:a2:25:26 was issued on by Google Trust Services LLC.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=connect.canuapp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:bc:54:ea:da:ff:d0:14:12:45:0c:2b:f2:a2:25:26
Serial Number (int): 83390009877643057639905125136584549670
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 58:b2:f8:26:eb:71:de:42:66:c0:cb:4e:ed:ae:45:6c:ee:af:d5:26
Fingerprint (sha256): e9:c9:2e:70:73:61:ca:ea:5c:30:a5:95:d2:92:7c:98:c1:d4:7a:aa:a9:7b:73:51:df:5f:1b:60:7c:ef:4e:98

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/_aZTuyitGhs
CRL Distribution Point: http://crls.pki.goog/gts1d4/8Rld6CneJeA.crl

Check the revocation status for certificate connect.canuapp.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.canuapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.canuapp.com
www.choir.cards
auth.gamepadviewer.com
tsumugi.lilacwells.com
cms.einkaklubburinn.is
www.imma-france.com
good-asian.for.dinii.jp
2020.devfestindia.com
www.ethanshowe.com
ontheoriginofcircles.com
nucleus.qoopido.com
www.bonacossaimoveis.com
2020.manage.devfestindia.com
regulus.jp
www.produvar.be
www.havensofhope.com
www.uzmez.co
www.hivefab.com
shigaku.info
www.gemini-game.com
admin.festivaldocafe.com
novaxon.com
nzcc.org.nz
morsenode.com
www.lykiq.com
www.lidoriviera.it
www.quilworks.com
me-dating.com
monarchtailors.com
beta.meuplanoclaro.com.br
naveensd.com
neelwires.com
lionkinglive.nl
meraki-apps.com
stylerpcweb.com
spacexnoticias.com
rocknsur.com
chat.karimz.com
preprod.secretsanta.mattpeskett.com
fpos.karimz.com
www.anarijo.com.br
dl.mirramian.art
www.thinkinsure.com
rao-employmentexchange.com
thomas-lloyd.com
www.myquantumwater.com
app.lodienabled.com
ui-react.com
www.test2.stunlo.com
starcodegalaxy.com
biz.sybuya.com
zamaloz.com
zpunch.com
squatchbot.squatchcity.com
tidyfork.com
www.ladycontreras.com
api.techfairlive.com
checkout.pigsub.com
ukantu.com
ilkayd.dev
erhanersoz.com
stratforddentalcare.com
theglobalkiosk.com
react-rss.grigsby.dev
luckydraw.vivowb.in
www.foxprotege.com.br
highs.dev
www.caruma.io
api.tradesbarn.com
express.testive.com
time.synpulse.com
helpful-tower.com
www.funkypeachlife.com
customizer.melzo.com
fudefulong.maauu.com
kodemuse.dev
app-dev.the-talent-accelerator.com
tomealsoft.com
www.scavenger-hunt.co.uk
www.staging.accrediti.genvision.it
www.placego.hu
app.dismissly.dev
www.samparks.dev
www.thailand-enx.com
unknownverse-s.com
www.thunderdoges.com
johnelliott.dev
robberbaron.tv
viktoriawehner.com
findthe.dev
weight.fab2.at
www.chquan.dev
www.titlecaps.com
www.ourhomegame.com
mspyratos.com
estimates.secureinc.co.jp
bestanden.11yearsafter11.nl
www.richardbonneau.com
taste.xegyn.com
www.ke-taimaster.net

Other certificates including the domain name canuapp.com

(limited to 100 certificates)
www.kitchy.club
link.libere.co.in
www.codehero.es
learnmore.biorestorative.com
demo.prototypefactory.co
me-dating.com
r.ainyaku.com
qrapplink.com
www.mcareauto.com
www.darshilpatel.com
logistics.azfalte.com
fukuoka.linx.live
brunoponne.com
agent.paycsc.in
app.growos.net
trivinn.com
www.lakva-promotions.mn
www.shoutgif.com
frisbee.today
mlconsole.com
earlybirdva.org
www.chakulabora.app
mentoro.us
www.malatovi.cz
app.loanvidya.com
connect.canuapp.com
beyondthegrades.in
zzzpod.rethela.com
qa-m.dlg1.app
orgesarizeybek.com
axleinspect.app
iprofile.app
j2d2development.com
liker.land
artisansplayhouse.com
www.rajdlova.cz
www.bluerano.com
frisbee.today
stacysinclair.ca
store.k-lab.io
olive.olivos.cl
eugene.to
pattanachaichemical.co.th
next.wap.live
fourteenislands.io
template.stepinsight.com.au
purplewave.portal.plenadata.com
www.mcareauto.com
preprod.secretsanta.mattpeskett.com
www.crai.no
idwalletpoc.bangkokbankinnohub.com
gage-admin-cci.activ8games.com
app.loanvidya.com
patrimobimoveis.com.br
affinity.portfoliolink.co.za
csun.no
www.iwayleaves.co.za
www.astroeventshouston.com
connect.canuapp.com
artisansplayhouse.com
qa-m.dlg1.app
www.transitpedia.com
indaohub.co.za

Certificate

The complete raw certificate details for connect.canuapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83390009877643057639905125136584549670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 11:58:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 12:55:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.canuapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/_aZTuyitGhs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1988 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.canuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choir.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.gamepadviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsumugi.lilacwells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.einkaklubburinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imma-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'good-asian.for.dinii.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020.devfestindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethanshowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontheoriginofcircles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nucleus.qoopido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonacossaimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020.manage.devfestindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regulus.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.produvar.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havensofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzmez.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hivefab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shigaku.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemini-game.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.festivaldocafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novaxon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morsenode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lykiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lidoriviera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quilworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me-dating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarchtailors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.meuplanoclaro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naveensd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neelwires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionkinglive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meraki-apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylerpcweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacexnoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocknsur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.karimz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.secretsanta.mattpeskett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpos.karimz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anarijo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.mirramian.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkinsure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rao-employmentexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomas-lloyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myquantumwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lodienabled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui-react.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test2.stunlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starcodegalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biz.sybuya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zamaloz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zpunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squatchbot.squatchcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tidyfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladycontreras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.techfairlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.pigsub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukantu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilkayd.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erhanersoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stratforddentalcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theglobalkiosk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react-rss.grigsby.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckydraw.vivowb.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxprotege.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highs.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caruma.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.tradesbarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'express.testive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'time.synpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpful-tower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funkypeachlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customizer.melzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fudefulong.maauu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodemuse.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dev.the-talent-accelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomealsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scavenger-hunt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.accrediti.genvision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placego.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dismissly.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samparks.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thailand-enx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unknownverse-s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thunderdoges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnelliott.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robberbaron.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viktoriawehner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findthe.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weight.fab2.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chquan.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titlecaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourhomegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mspyratos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estimates.secureinc.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestanden.11yearsafter11.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardbonneau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taste.xegyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ke-taimaster.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/8Rld6CneJeA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c445ba156000004030046304402206a48bdbab5485aa992d38b55137f3dee7005a1e54761ff977351e0b50095554402204efa1500fffab685a212aba00ee1b49fa12bcddcfc75a001020a3511990964a1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c445ba13d0000040300483046022100d87fd516f39639e0de3c1213568e35be91fd0f33a14ac14af32fe8d94d0e4db2022100e81110eeae59575010050a195df1962d9f2c987789b5a14c36f4097f96858608
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a6849074bc2281580a1aa7e64f94ea6bdf846dee951b62db4e95fd4a459955dbc7c84dae59850cdd4e6a9c41663a219f569d3a8c554e16a8d3ec5713c3f71338d75d7e7ea523afadf3c9ce28fda62f98c1f49c5de42592e1b44c4376e7b6420db642f8c7b80f5ed61819ed4277fe59a1b1e659d696caf62548f8de9ec67491e16fd1c4792b3a285f16f6f1b29f9893a15ae3f5adfe42b363d4cd08f4bf2e7d566750dfcad2c0deb0efdcd116f0e5b53a5e4f323a1fbbbf0742068058adbc4fd829b7449aa1bc5a4f082ceff4b0fb596109257284509877a72cec9eaa4144a5ea7964cab59d932c79256ac71f220434fe34e15e3d33579b3dfab6152de17af6a