{
   "@category" : "ctl",
   "@timestamp" : "2025-05-26T22:17:57.000Z",
   "basicconstraints" : [
      "critical"
   ],
   "ca" : "false",
   "domain" : [
      "abc.xyz",
      "adsense.com",
      "adsensecustomsearchads.com",
      "adsenseformobileapps.com",
      "advertisercommunity.com",
      "alphanucleo.google",
      "amie.google",
      "ampcache.com",
      "ampproject.com",
      "ampproject.net",
      "ampproject.org",
      "androidify.com",
      "app-ads-services.com",
      "bazel.build",
      "brocaproject.com",
      "channel-app.google",
      "chronicle.security",
      "chronicleforgood.com",
      "chroniclesec.com",
      "cloud.google",
      "cloudyoryx.dev",
      "crossmediapanel.com",
      "crowdcalling.google",
      "dataliberation.org",
      "digitalassetlinks.org",
      "domains.google",
      "duetai.google",
      "eageroryx.dev",
      "earlydays.google",
      "engineering.google",
      "fastlane.ci",
      "floonet.goog",
      "g.dev",
      "g.page",
      "gateway.dev",
      "gmbads.gle",
      "go-lang.com",
      "go-lang.net",
      "go-lang.org",
      "golang.com",
      "golang.net",
      "golang.org",
      "goo.gl",
      "google-syndication.com",
      "google.cn",
      "google.co.in",
      "google.com",
      "googleacquisitionmigration.com",
      "googleblog.com",
      "googlecert.net",
      "googlestore.com",
      "grow.google",
      "gvt5.com",
      "hats.goog",
      "hey.gle",
      "iamremarkable.org",
      "identityplatform.google",
      "lanternal.com",
      "lers.google",
      "macservice.goog",
      "makersuite.google",
      "nel.goog",
      "nomulus.foo",
      "notebooklm.google",
      "ok.gle",
      "ordering.page",
      "payment.goog",
      "picasaweb.com",
      "picasaweb.net",
      "picasaweb.org",
      "picnik.com",
      "pixate.com",
      "pki.goog",
      "play.space",
      "podcasts.goog",
      "projectgomie.google",
      "rbm.goog",
      "registry-qa.google",
      "registry-sandbox.google",
      "registry.google",
      "research.youtube",
      "savethedate.foo",
      "searchingforsyria.org",
      "share.google",
      "songwriters.youtube",
      "sprayscape.com",
      "tfhub.dev",
      "thegooglestore.com",
      "tiltbrush.com",
      "travel.google",
      "waze.com",
      "web.dev",
      "webmproject.org",
      "webpkgcache.com",
      "webrtc.org",
      "workinxr.dev",
      "xn--ngstr-lra8j.com",
      "xplr.co",
      "zynamics.com"
   ],
   "extkeyusage" : [
      "serverAuth"
   ],
   "fingerprint" : {
      "md5" : "c5c01ed04d9a7d3dae04da0552021d91",
      "sha1" : "afdd43c73a8c666427966426811f0eb1109718a1",
      "sha256" : "9d3a5f18bf65d97151512029b3c67d13933993b5916547b52b86ce425e60691e"
   },
   "host" : [
      "aiplatform-notebook",
      "aiplatform-training",
      "app",
      "au",
      "autopush-global",
      "backstory",
      "backstory-staging",
      "backupdr",
      "backupdr-autopush",
      "backupdr-dev",
      "backupdr-sandbox",
      "backupdr-staging",
      "bugs",
      "ca",
      "cdn",
      "code",
      "colab",
      "composer",
      "composer-dev",
      "composer-qa",
      "composer-staging",
      "console",
      "datafusion",
      "datafusion-api",
      "datafusion-api-dev",
      "datafusion-api-staging",
      "datafusion-dev",
      "datafusion-staging",
      "datalab",
      "dataplex",
      "dataplex-dev",
      "dataplex-staging",
      "dataproc",
      "dataproc-image-staging",
      "dataproc-staging",
      "dataproc-test",
      "datasetsearch",
      "de",
      "dev",
      "dg-meta",
      "discover",
      "earthengine",
      "ehr-search",
      "en",
      "es",
      "eu",
      "ew",
      "fiber",
      "fr",
      "gapi",
      "global",
      "golang",
      "healthcare",
      "id",
      "il",
      "in",
      "issues",
      "it",
      "ja",
      "jp",
      "looker",
      "looker-staging",
      "mapmaker",
      "microhost",
      "misc-sni",
      "notebooks",
      "pagespeed",
      "pipelines",
      "pl",
      "privacysandbox",
      "pt",
      "recaptcha",
      "ru",
      "sa",
      "source",
      "stage",
      "staging",
      "staging-global",
      "support",
      "tensorboard",
      "tensorboard-autopush",
      "tensorboard-dev",
      "tensorboard-staging",
      "tensorboard-test",
      "th",
      "uc",
      "uk",
      "us",
      "vi",
      "www",
      "zh"
   ],
   "hostname" : [
      "abc.xyz",
      "adsense.com",
      "adsensecustomsearchads.com",
      "adsenseformobileapps.com",
      "advertisercommunity.com",
      "aiplatform-notebook.cloud.google.com",
      "aiplatform-training.cloud.google.com",
      "alphanucleo.google",
      "amie.google",
      "ampproject.com",
      "ampproject.net",
      "ampproject.org",
      "androidify.com",
      "app-ads-services.com",
      "app.goo.gl",
      "au.cloud.google",
      "autopush-global.identityplatform.google",
      "backstory-staging.chronicle.security",
      "backstory.chronicle.security",
      "backstory.chroniclesec.com",
      "backupdr-autopush.cloud.google",
      "backupdr-autopush.cloud.google.com",
      "backupdr-dev.cloud.google",
      "backupdr-dev.cloud.google.com",
      "backupdr-sandbox.cloud.google",
      "backupdr-sandbox.cloud.google.com",
      "backupdr-staging.cloud.google",
      "backupdr-staging.cloud.google.com",
      "backupdr.cloud.google",
      "backupdr.cloud.google.com",
      "brocaproject.com",
      "bugs.webrtc.org",
      "ca.cloud.google",
      "cdn.ampproject.org",
      "channel-app.google",
      "chronicle.security",
      "chronicleforgood.com",
      "chroniclesec.com",
      "cloudyoryx.dev",
      "code.webrtc.org",
      "colab.research.google.com",
      "composer-dev.cloud.google",
      "composer-dev.cloud.google.com",
      "composer-qa.cloud.google",
      "composer-qa.cloud.google.com",
      "composer-staging.cloud.google",
      "composer-staging.cloud.google.com",
      "composer.cloud.google",
      "composer.cloud.google.com",
      "console.au.cloud.google",
      "console.ca.cloud.google",
      "console.eu.cloud.google",
      "console.eu.cloud.google.com",
      "console.il.cloud.google",
      "console.in.cloud.google",
      "console.it.cloud.google",
      "console.jp.cloud.google",
      "console.sa.cloud.google",
      "console.uk.cloud.google",
      "console.us.cloud.google",
      "crossmediapanel.com",
      "crowdcalling.google",
      "datafusion-api-dev.cloud.google",
      "datafusion-api-dev.cloud.google.com",
      "datafusion-api-staging.cloud.google",
      "datafusion-api-staging.cloud.google.com",
      "datafusion-api.cloud.google",
      "datafusion-api.cloud.google.com",
      "datafusion-dev.cloud.google",
      "datafusion-dev.cloud.google.com",
      "datafusion-staging.cloud.google",
      "datafusion-staging.cloud.google.com",
      "datafusion.cloud.google",
      "datafusion.cloud.google.com",
      "datalab.cloud.google.com",
      "dataliberation.org",
      "dataplex-dev.cloud.google.com",
      "dataplex-staging.cloud.google.com",
      "dataplex.cloud.google.com",
      "dataproc-image-staging.cloud.google",
      "dataproc-image-staging.cloud.google.com",
      "dataproc-staging.cloud.google",
      "dataproc-staging.cloud.google.com",
      "dataproc-test.cloud.google",
      "dataproc-test.cloud.google.com",
      "dataproc.cloud.google",
      "dataproc.cloud.google.com",
      "datasetsearch.research.google.com",
      "de.advertisercommunity.com",
      "de.gateway.dev",
      "dev.google-syndication.com",
      "dg-meta.video.google.com",
      "digitalassetlinks.org",
      "discover.google.com",
      "domains.google",
      "eageroryx.dev",
      "earlydays.google",
      "earthengine.google.co.in",
      "earthengine.google.com",
      "ehr-search.health.google.com",
      "en.advertisercommunity.com",
      "engineering.google",
      "es.advertisercommunity.com",
      "eu.cloud.google",
      "ew.gateway.dev",
      "fastlane.ci",
      "fiber.google.com",
      "fr.advertisercommunity.com",
      "g.dev",
      "g.page",
      "gapi.waze.com",
      "global.accountverification.cloud.google",
      "global.identityplatform.google",
      "gmbads.gle",
      "go-lang.com",
      "go-lang.net",
      "go-lang.org",
      "golang.com",
      "golang.google.cn",
      "golang.net",
      "golang.org",
      "googleblog.com",
      "googlecert.net",
      "googlestore.com",
      "grow.google",
      "hats.goog",
      "healthcare.cloud.google.com",
      "hey.gle",
      "iamremarkable.org",
      "id.advertisercommunity.com",
      "il.cloud.google",
      "in.cloud.google",
      "issues.webmproject.org",
      "issues.webrtc.org",
      "it.advertisercommunity.com",
      "it.cloud.google",
      "ja.advertisercommunity.com",
      "jp.cloud.google",
      "lanternal.com",
      "lers.google",
      "looker-staging.chronicle.security",
      "looker.chronicle.security",
      "makersuite.google",
      "mapmaker.google.com",
      "microhost.google.com",
      "misc-sni.google.com",
      "nomulus.foo",
      "notebooklm.google",
      "notebooks.cloud.google",
      "notebooks.cloud.google.com",
      "ok.gle",
      "ordering.page",
      "pagespeed.web.dev",
      "payment.goog",
      "picasaweb.com",
      "picasaweb.net",
      "picasaweb.org",
      "picnik.com",
      "pipelines.cloud.google.com",
      "pixate.com",
      "pki.goog",
      "pl.advertisercommunity.com",
      "play.space",
      "podcasts.goog",
      "privacysandbox.google.com",
      "projectgomie.google",
      "pt.advertisercommunity.com",
      "rbm.goog",
      "recaptcha.ampproject.net",
      "registry-qa.google",
      "registry-sandbox.google",
      "registry.google",
      "research.youtube",
      "ru.advertisercommunity.com",
      "sa.cloud.google",
      "savethedate.foo",
      "searchingforsyria.org",
      "share.google",
      "songwriters.youtube",
      "source.bazel.build",
      "sprayscape.com",
      "stage.advertisercommunity.com",
      "staging-global.identityplatform.google",
      "staging.google-syndication.com",
      "support.registry-qa.google",
      "support.registry-sandbox.google",
      "support.registry.google",
      "tensorboard-autopush.cloud.google.com",
      "tensorboard-dev.cloud.google.com",
      "tensorboard-staging.cloud.google.com",
      "tensorboard-test.cloud.google.com",
      "tensorboard.cloud.google.com",
      "tfhub.dev",
      "th.advertisercommunity.com",
      "thegooglestore.com",
      "tiltbrush.com",
      "travel.google",
      "uc.gateway.dev",
      "uk.cloud.google",
      "us.cloud.google",
      "vi.advertisercommunity.com",
      "webmproject.org",
      "webpkgcache.com",
      "workinxr.dev",
      "www.adsense.com",
      "www.googlestore.com",
      "www.iamremarkable.org",
      "www.pixate.com",
      "www.registry-qa.google",
      "www.registry-sandbox.google",
      "www.registry.google",
      "www.sprayscape.com",
      "www.thegooglestore.com",
      "xplr.co",
      "zh.advertisercommunity.com",
      "zynamics.com"
   ],
   "ip" : [
      "2a00:1450:4007:810:0:0:0:2011",
      "2a00:1450:4001:80e:0:0:0:200e",
      "2a00:1450:4006:801:0:0:0:2004",
      "172.217.20.164",
      "66.102.1.138",
      "2a00:1450:4007:810:0:0:0:200e",
      "2a00:1450:4007:80c:0:0:0:2004",
      "216.58.213.78",
      "2a00:1450:400e:805:0:0:0:2001",
      "2a00:1450:400e:80e:0:0:0:200e",
      "142.250.185.174",
      "2001:4860:4802:38:0:0:0:15",
      "2a00:1450:4006:805:0:0:0:200e",
      "2001:4860:4802:32:0:0:0:1b",
      "162.159.130.11",
      "142.250.179.206",
      "142.250.201.46",
      "2a00:1450:4001:829:0:0:0:2004",
      "2606:4700:7:0:0:0:a29f:820b",
      "2001:4860:4802:36:0:0:0:180",
      "2a00:1450:400e:80f:0:0:0:2004",
      "142.250.178.142",
      "216.239.36.152",
      "172.217.20.177",
      "2a00:1450:400e:803:0:0:0:2011",
      "142.250.179.81",
      "2a00:1450:4001:811:0:0:0:200e",
      "142.251.39.110",
      "162.159.129.11",
      "142.250.179.142",
      "142.251.37.174",
      "142.250.203.238",
      "2a00:1450:4006:804:0:0:0:200e",
      "2a00:1450:4001:827:0:0:0:200e",
      "216.58.212.145",
      "172.217.19.142",
      "172.217.168.206",
      "2a00:1450:4007:813:0:0:0:200e",
      "216.58.215.46",
      "216.239.38.21",
      "142.250.181.241",
      "66.102.1.139",
      "2a00:1450:400e:801:0:0:0:200e",
      "216.239.36.21",
      "216.58.212.174",
      "216.58.214.14",
      "2a00:1450:400e:80c:0:0:0:200e",
      "2001:4860:4802:34:0:0:0:15",
      "216.58.211.209",
      "216.58.205.206",
      "2a00:1450:4007:818:0:0:0:200e",
      "2a00:1450:4006:803:0:0:0:2011",
      "142.250.75.238",
      "2a00:1450:4006:812:0:0:0:200e",
      "2a00:1450:4007:80d:0:0:0:2003",
      "2a00:1450:400c:c00:0:0:0:8b",
      "2a00:1450:4006:809:0:0:0:200e",
      "66.102.1.100",
      "216.58.214.174",
      "142.251.39.97",
      "142.250.201.174",
      "2606:4700:7:0:0:0:a29f:810b",
      "216.58.206.36",
      "142.251.221.14",
      "142.250.179.174",
      "2a00:1450:4007:80e:0:0:0:2013",
      "2a00:1450:4001:80b:0:0:0:200e",
      "142.250.200.206",
      "2a00:1450:400e:811:0:0:0:2003",
      "2a00:1450:4007:808:0:0:0:200e",
      "142.251.37.238",
      "66.102.1.113",
      "142.251.36.14",
      "172.217.20.174",
      "216.239.36.56",
      "142.251.221.1",
      "2a00:1450:400c:c00:0:0:0:65",
      "2001:4860:4802:38:0:0:0:180",
      "2a00:1450:400e:801:0:0:0:2001",
      "2a00:1450:4007:806:0:0:0:200e",
      "2001:4860:4802:32:0:0:0:180",
      "142.251.36.4",
      "2001:4860:4802:38:0:0:0:81",
      "216.239.36.180",
      "216.239.38.180",
      "216.58.214.78",
      "2a00:1450:400c:c00:0:0:0:8a",
      "2a00:1450:4007:80d:0:0:0:200e",
      "142.250.201.14",
      "216.58.208.110",
      "2a00:1450:4006:80f:0:0:0:2003",
      "172.217.23.206",
      "142.251.37.46",
      "2a00:1450:400e:805:0:0:0:200e",
      "2a00:1450:4006:800:0:0:0:200e",
      "142.250.201.164",
      "172.217.168.238",
      "2a00:1450:4001:806:0:0:0:200e",
      "2a00:1450:4006:806:0:0:0:200e",
      "2a00:1450:4006:809:0:0:0:2011",
      "142.250.178.145",
      "172.217.18.36",
      "2a00:1450:4007:813:0:0:0:2011",
      "172.217.20.206",
      "2a00:1450:4007:80e:0:0:0:200e",
      "172.217.18.241",
      "216.239.34.21",
      "35.244.233.98",
      "216.58.214.179",
      "2a00:1450:4006:807:0:0:0:200e",
      "2a00:1450:4007:81a:0:0:0:2004",
      "2a00:1450:4006:811:0:0:0:200e",
      "216.239.32.180",
      "2a00:1450:4007:819:0:0:0:200e",
      "216.239.32.27",
      "2a00:1450:4006:80a:0:0:0:200e",
      "2a00:1450:4007:81a:0:0:0:200e",
      "216.239.32.29",
      "2a00:1450:4007:818:0:0:0:2001",
      "2a00:1450:400e:811:0:0:0:200e",
      "142.250.186.174",
      "2a00:1450:400e:805:0:0:0:2011",
      "142.251.36.46",
      "142.250.179.110",
      "2a00:1450:4006:813:0:0:0:200e",
      "66.102.1.101",
      "142.250.201.35",
      "2a00:1450:400e:810:0:0:0:200e",
      "142.250.201.17",
      "2001:4860:4802:32:0:0:0:15",
      "142.250.186.142",
      "2001:4860:4802:36:0:0:0:98",
      "172.217.23.209",
      "216.58.214.161",
      "2a00:1450:400c:c00:0:0:0:64",
      "2a00:1450:4006:812:0:0:0:2011",
      "216.239.38.129",
      "2a00:1450:4007:805:0:0:0:200e",
      "142.251.37.206",
      "2a00:1450:4007:80c:0:0:0:200e",
      "172.217.20.163",
      "2a00:1450:400e:80d:0:0:0:200e",
      "216.239.34.180",
      "2a00:1450:4007:80b:0:0:0:200e",
      "142.250.179.163",
      "172.217.16.206",
      "142.250.179.78",
      "2a00:1450:400e:802:0:0:0:200e",
      "172.217.18.206",
      "2a00:1450:400e:80f:0:0:0:200e",
      "2a00:1450:4007:807:0:0:0:200e",
      "2a00:1450:400e:80f:0:0:0:2011",
      "216.239.32.21",
      "2001:4860:4802:34:0:0:0:180",
      "2001:4860:4802:36:0:0:0:38",
      "2001:4860:4802:36:0:0:0:15",
      "2a00:1450:4007:819:0:0:0:2011",
      "2001:4860:4802:32:0:0:0:1d",
      "142.250.184.206",
      "66.102.1.102",
      "2404:6800:4017:800:0:0:0:200e",
      "2a00:1450:400e:801:0:0:0:2011",
      "142.250.185.238"
   ],
   "issuer" : {
      "commonname" : "WE2",
      "country" : "US",
      "organization" : "Google Trust Services"
   },
   "keyusage" : [
      "critical",
      "digitalSignature"
   ],
   "publickey" : {
      "algorithm" : "id-ecPublicKey"
   },
   "seen_date" : "2025-05-26",
   "serial" : "ba:dc:0d:2b:a6:d7:8d:15:12:d9:7b:60:3f:13:24:fc",
   "signature" : {
      "algorithm" : "ecdsa-with-SHA256"
   },
   "source" : "digicertyeti2025log",
   "subdomains" : [
      "accountverification.cloud.google",
      "au.cloud.google",
      "ca.cloud.google",
      "cloud.google.com",
      "eu.cloud.google",
      "eu.cloud.google.com",
      "health.google.com",
      "il.cloud.google",
      "in.cloud.google",
      "it.cloud.google",
      "jp.cloud.google",
      "research.google.com",
      "sa.cloud.google",
      "uk.cloud.google",
      "us.cloud.google",
      "video.google.com"
   ],
   "subject" : {
      "altname" : [
         "nomulus.foo",
         "*.digitalassetlinks.org",
         "nel.goog",
         "*.grow.google",
         "www.pixate.com",
         "*.fiber.google.com",
         "*.datafusion.cloud.google",
         "*.macservice.goog",
         "*.earthengine.google.com",
         "webpkgcache.com",
         "googlestore.com",
         "misc-sni.google.com",
         "console.uk.cloud.google",
         "*.datafusion-api-dev.cloud.google.com",
         "www.registry-sandbox.google",
         "*.aiplatform-notebook.cloud.google.com",
         "*.androidify.com",
         "*.il.cloud.google",
         "*.datalab.cloud.google.com",
         "*.uc.gateway.dev",
         "*.composer.cloud.google",
         "macservice.goog",
         "registry-qa.google",
         "*.dataplex-staging.cloud.google.com",
         "*.datafusion.cloud.google.com",
         "earlydays.google",
         "ampcache.com",
         "*.ok.gle",
         "*.go-lang.org",
         "pt.advertisercommunity.com",
         "*.payment.goog",
         "gmbads.gle",
         "colab.research.google.com",
         "eageroryx.dev",
         "*.eageroryx.dev",
         "ehr-search.health.google.com",
         "*.floonet.goog",
         "*.datafusion-staging.cloud.google.com",
         "console.jp.cloud.google",
         "*.au.cloud.google",
         "*.webpkgcache.com",
         "de.advertisercommunity.com",
         "*.mapmaker.google.com",
         "*.backupdr-sandbox.cloud.google",
         "*.picasaweb.org",
         "*.it.advertisercommunity.com",
         "*.earthengine.google.co.in",
         "hey.gle",
         "*.searchingforsyria.org",
         "cloud.google",
         "*.ampproject.com",
         "golang.net",
         "floonet.goog",
         "*.eu.cloud.google",
         "*.googleacquisitionmigration.com",
         "*.staging.google-syndication.com",
         "chronicle.security",
         "www.iamremarkable.org",
         "tiltbrush.com",
         "*.microhost.google.com",
         "googlecert.net",
         "*.go-lang.net",
         "es.advertisercommunity.com",
         "*.tfhub.dev",
         "www.googlestore.com",
         "*.composer-qa.cloud.google",
         "*.it.cloud.google",
         "console.ca.cloud.google",
         "crossmediapanel.com",
         "*.composer-staging.cloud.google",
         "*.notebooks.cloud.google",
         "*.chronicle.security",
         "*.datafusion-dev.cloud.google.com",
         "fastlane.ci",
         "code.webrtc.org",
         "*.ca.cloud.google",
         "g.dev",
         "console.au.cloud.google",
         "*.staging-global.identityplatform.google",
         "*.in.cloud.google",
         "*.dataproc.cloud.google",
         "*.global.accountverification.cloud.google",
         "*.datafusion-api.cloud.google.com",
         "*.backupdr-sandbox.cloud.google.com",
         "issues.webmproject.org",
         "*.backupdr-dev.cloud.google.com",
         "*.dataplex.cloud.google.com",
         "payment.goog",
         "console.eu.cloud.google.com",
         "*.backstory.chroniclesec.com",
         "th.advertisercommunity.com",
         "adsensecustomsearchads.com",
         "share.google",
         "*.googleblog.com",
         "golang.google.cn",
         "*.id.advertisercommunity.com",
         "*.pipelines.cloud.google.com",
         "*.rbm.goog",
         "issues.webrtc.org",
         "*.en.advertisercommunity.com",
         "travel.google",
         "*.gateway.dev",
         "picasaweb.org",
         "savethedate.foo",
         "*.datafusion-staging.cloud.google",
         "*.pt.advertisercommunity.com",
         "pki.goog",
         "fr.advertisercommunity.com",
         "*.issues.webrtc.org",
         "*.adsensecustomsearchads.com",
         "digitalassetlinks.org",
         "stage.advertisercommunity.com",
         "*.notebooks.cloud.google.com",
         "*.backupdr.cloud.google",
         "*.hey.gle",
         "*.ordering.page",
         "*.es.advertisercommunity.com",
         "*.uk.cloud.google",
         "*.share.google",
         "it.advertisercommunity.com",
         "*.crossmediapanel.com",
         "*.xplr.co",
         "*.dataproc-staging.cloud.google.com",
         "*.golang.org",
         "console.sa.cloud.google",
         "www.registry.google",
         "*.g.page",
         "*.app-ads-services.com",
         "pagespeed.web.dev",
         "*.fr.advertisercommunity.com",
         "*.composer.cloud.google.com",
         "picasaweb.net",
         "discover.google.com",
         "research.youtube",
         "chroniclesec.com",
         "chronicleforgood.com",
         "*.recaptcha.ampproject.net",
         "console.il.cloud.google",
         "*.dataplex-dev.cloud.google.com",
         "picnik.com",
         "rbm.goog",
         "*.zh.advertisercommunity.com",
         "*.tensorboard-dev.cloud.google.com",
         "tfhub.dev",
         "id.advertisercommunity.com",
         "go-lang.net",
         "*.dataproc.cloud.google.com",
         "*.identityplatform.google",
         "*.zynamics.com",
         "*.privacysandbox.google.com",
         "*.nel.goog",
         "*.google-syndication.com",
         "ok.gle",
         "abc.xyz",
         "*.dataproc-test.cloud.google",
         "*.hats.goog",
         "www.sprayscape.com",
         "*.backstory.chronicle.security",
         "go-lang.com",
         "*.chronicleforgood.com",
         "golang.com",
         "ampproject.org",
         "*.aiplatform-training.cloud.google.com",
         "*.pki.goog",
         "*.ru.advertisercommunity.com",
         "bugs.webrtc.org",
         "registry-sandbox.google",
         "identityplatform.google",
         "console.us.cloud.google",
         "gapi.waze.com",
         "support.registry-qa.google",
         "*.amie.google",
         "console.eu.cloud.google",
         "*.picasaweb.net",
         "g.page",
         "amie.google",
         "searchingforsyria.org",
         "en.advertisercommunity.com",
         "ampproject.net",
         "*.backstory-staging.chronicle.security",
         "*.dataproc-staging.cloud.google",
         "*.tensorboard.cloud.google.com",
         "*.golang.com",
         "*.earlydays.google",
         "brocaproject.com",
         "*.golang.net",
         "*.lanternal.com",
         "*.source.bazel.build",
         "*.googlecert.net",
         "*.de.gateway.dev",
         "*.gvt5.com",
         "*.cloudyoryx.dev",
         "notebooklm.google",
         "crowdcalling.google",
         "*.savethedate.foo",
         "www.adsense.com",
         "*.datafusion-api-staging.cloud.google",
         "play.space",
         "*.makersuite.google",
         "alphanucleo.google",
         "*.duetai.google",
         "lanternal.com",
         "songwriters.youtube",
         "console.it.cloud.google",
         "*.ja.advertisercommunity.com",
         "xplr.co",
         "www.registry-qa.google",
         "*.picnik.com",
         "*.cloud.google",
         "app.goo.gl",
         "*.backupdr-autopush.cloud.google",
         "pixate.com",
         "*.backupdr-staging.cloud.google",
         "sprayscape.com",
         "support.registry.google",
         "advertisercommunity.com",
         "*.datafusion-api-staging.cloud.google.com",
         "*.dataproc-image-staging.cloud.google.com",
         "*.go-lang.com",
         "*.research.youtube",
         "*.webmproject.org",
         "*.tiltbrush.com",
         "engineering.google",
         "*.g.dev",
         "looker-staging.chronicle.security",
         "zynamics.com",
         "*.picasaweb.com",
         "lers.google",
         "source.bazel.build",
         "thegooglestore.com",
         "*.domains.google",
         "googleblog.com",
         "ja.advertisercommunity.com",
         "*.gmbads.gle",
         "*.pl.advertisercommunity.com",
         "*.vi.advertisercommunity.com",
         "*.composer-staging.cloud.google.com",
         "*.dataliberation.org",
         "*.ampproject.net",
         "go-lang.org",
         "makersuite.google",
         "console.in.cloud.google",
         "registry.google",
         "*.advertisercommunity.com",
         "*.cdn.ampproject.org",
         "zh.advertisercommunity.com",
         "*.backupdr-dev.cloud.google",
         "privacysandbox.google.com",
         "*.alphanucleo.google",
         "*.projectgomie.google",
         "app-ads-services.com",
         "ampproject.com",
         "*.tensorboard-staging.cloud.google.com",
         "*.looker-staging.chronicle.security",
         "*.backupdr.cloud.google.com",
         "workinxr.dev",
         "*.abc.xyz",
         "channel-app.google",
         "*.stage.advertisercommunity.com",
         "datasetsearch.research.google.com",
         "*.autopush-global.identityplatform.google",
         "*.ew.gateway.dev",
         "*.engineering.google",
         "cloudyoryx.dev",
         "*.play.space",
         "hats.goog",
         "*.sa.cloud.google",
         "grow.google",
         "domains.google",
         "*.us.cloud.google",
         "*.composer-dev.cloud.google.com",
         "*.ampcache.com",
         "*.nomulus.foo",
         "*.xn--ngstr-lra8j.com",
         "*.composer-qa.cloud.google.com",
         "*.backupdr-staging.cloud.google.com",
         "*.songwriters.youtube",
         "*.dataproc-test.cloud.google.com",
         "*.dataproc-image-staging.cloud.google",
         "*.backupdr-autopush.cloud.google.com",
         "pl.advertisercommunity.com",
         "*.chroniclesec.com",
         "duetai.google",
         "golang.org",
         "*.de.advertisercommunity.com",
         "iamremarkable.org",
         "*.golang.google.cn",
         "xn--ngstr-lra8j.com",
         "*.workinxr.dev",
         "adsenseformobileapps.com",
         "dg-meta.video.google.com",
         "*.app.goo.gl",
         "*.th.advertisercommunity.com",
         "*.global.identityplatform.google",
         "*.healthcare.cloud.google.com",
         "*.tensorboard-test.cloud.google.com",
         "looker.chronicle.security",
         "webmproject.org",
         "*.issues.webmproject.org",
         "adsense.com",
         "*.travel.google",
         "*.composer-dev.cloud.google",
         "support.registry-sandbox.google",
         "*.podcasts.goog",
         "picasaweb.com",
         "androidify.com",
         "ru.advertisercommunity.com",
         "*.looker.chronicle.security",
         "*.ampproject.org",
         "*.brocaproject.com",
         "projectgomie.google",
         "*.jp.cloud.google",
         "*.datafusion-dev.cloud.google",
         "dataliberation.org",
         "vi.advertisercommunity.com",
         "www.thegooglestore.com",
         "*.discover.google.com",
         "*.tensorboard-autopush.cloud.google.com",
         "*.datafusion-api.cloud.google",
         "*.dev.google-syndication.com",
         "ordering.page",
         "*.datafusion-api-dev.cloud.google"
      ],
      "commonname" : "misc-sni.google.com"
   },
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "build",
      "ci",
      "cn",
      "co",
      "co.in",
      "com",
      "dev",
      "foo",
      "gl",
      "gle",
      "goog",
      "google",
      "net",
      "org",
      "page",
      "security",
      "space",
      "xyz",
      "youtube"
   ],
   "validity" : {
      "notafter" : "2025-08-18T08:40:46.000Z",
      "notbefore" : "2025-05-26T08:40:47.000Z"
   },
   "version" : "v3",
   "wildcard" : "true"
}

{
   "@category" : "ctl",
   "@timestamp" : "2025-05-26T09:42:34.000Z",
   "basicconstraints" : [
      "critical"
   ],
   "ca" : "false",
   "domain" : [
      "abc.xyz",
      "adsense.com",
      "adsensecustomsearchads.com",
      "adsenseformobileapps.com",
      "advertisercommunity.com",
      "alphanucleo.google",
      "amie.google",
      "ampcache.com",
      "ampproject.com",
      "ampproject.net",
      "ampproject.org",
      "androidify.com",
      "app-ads-services.com",
      "bazel.build",
      "brocaproject.com",
      "channel-app.google",
      "chronicle.security",
      "chronicleforgood.com",
      "chroniclesec.com",
      "cloud.google",
      "cloudyoryx.dev",
      "crossmediapanel.com",
      "crowdcalling.google",
      "dataliberation.org",
      "digitalassetlinks.org",
      "domains.google",
      "duetai.google",
      "eageroryx.dev",
      "earlydays.google",
      "engineering.google",
      "fastlane.ci",
      "floonet.goog",
      "g.dev",
      "g.page",
      "gateway.dev",
      "gmbads.gle",
      "go-lang.com",
      "go-lang.net",
      "go-lang.org",
      "golang.com",
      "golang.net",
      "golang.org",
      "goo.gl",
      "google-syndication.com",
      "google.cn",
      "google.co.in",
      "google.com",
      "googleacquisitionmigration.com",
      "googleblog.com",
      "googlecert.net",
      "googlestore.com",
      "grow.google",
      "gvt5.com",
      "hats.goog",
      "hey.gle",
      "iamremarkable.org",
      "identityplatform.google",
      "lanternal.com",
      "lers.google",
      "macservice.goog",
      "makersuite.google",
      "nel.goog",
      "nomulus.foo",
      "notebooklm.google",
      "ok.gle",
      "ordering.page",
      "payment.goog",
      "picasaweb.com",
      "picasaweb.net",
      "picasaweb.org",
      "picnik.com",
      "pixate.com",
      "pki.goog",
      "play.space",
      "podcasts.goog",
      "projectgomie.google",
      "rbm.goog",
      "registry-qa.google",
      "registry-sandbox.google",
      "registry.google",
      "research.youtube",
      "savethedate.foo",
      "searchingforsyria.org",
      "share.google",
      "songwriters.youtube",
      "sprayscape.com",
      "tfhub.dev",
      "thegooglestore.com",
      "tiltbrush.com",
      "travel.google",
      "waze.com",
      "web.dev",
      "webmproject.org",
      "webpkgcache.com",
      "webrtc.org",
      "workinxr.dev",
      "xn--ngstr-lra8j.com",
      "xplr.co",
      "zynamics.com"
   ],
   "extkeyusage" : [
      "serverAuth"
   ],
   "fingerprint" : {
      "md5" : "19d69330e27cbea74fd0155a79dba4fb",
      "sha1" : "8ae053915131f0ddd3102c451c5c22f26f3e48b1",
      "sha256" : "ec014bdb403e5604f28c8c743df6eb57571c1e9dd7a3ae9e80dd5adca2827c39"
   },
   "host" : [
      "aiplatform-notebook",
      "aiplatform-training",
      "app",
      "au",
      "autopush-global",
      "backstory",
      "backstory-staging",
      "backupdr",
      "backupdr-autopush",
      "backupdr-dev",
      "backupdr-sandbox",
      "backupdr-staging",
      "bugs",
      "ca",
      "cdn",
      "code",
      "colab",
      "composer",
      "composer-dev",
      "composer-qa",
      "composer-staging",
      "console",
      "datafusion",
      "datafusion-api",
      "datafusion-api-dev",
      "datafusion-api-staging",
      "datafusion-dev",
      "datafusion-staging",
      "datalab",
      "dataplex",
      "dataplex-dev",
      "dataplex-staging",
      "dataproc",
      "dataproc-image-staging",
      "dataproc-staging",
      "dataproc-test",
      "datasetsearch",
      "de",
      "dev",
      "dg-meta",
      "discover",
      "earthengine",
      "ehr-search",
      "en",
      "es",
      "eu",
      "ew",
      "fiber",
      "fr",
      "gapi",
      "global",
      "golang",
      "healthcare",
      "id",
      "il",
      "in",
      "issues",
      "it",
      "ja",
      "jp",
      "looker",
      "looker-staging",
      "mapmaker",
      "microhost",
      "misc-sni",
      "notebooks",
      "pagespeed",
      "pipelines",
      "pl",
      "privacysandbox",
      "pt",
      "recaptcha",
      "ru",
      "sa",
      "source",
      "stage",
      "staging",
      "staging-global",
      "support",
      "tensorboard",
      "tensorboard-autopush",
      "tensorboard-dev",
      "tensorboard-staging",
      "tensorboard-test",
      "th",
      "uc",
      "uk",
      "us",
      "vi",
      "www",
      "zh"
   ],
   "hostname" : [
      "abc.xyz",
      "adsense.com",
      "adsensecustomsearchads.com",
      "adsenseformobileapps.com",
      "advertisercommunity.com",
      "aiplatform-notebook.cloud.google.com",
      "aiplatform-training.cloud.google.com",
      "alphanucleo.google",
      "amie.google",
      "ampproject.com",
      "ampproject.net",
      "ampproject.org",
      "androidify.com",
      "app-ads-services.com",
      "app.goo.gl",
      "au.cloud.google",
      "autopush-global.identityplatform.google",
      "backstory-staging.chronicle.security",
      "backstory.chronicle.security",
      "backstory.chroniclesec.com",
      "backupdr-autopush.cloud.google",
      "backupdr-autopush.cloud.google.com",
      "backupdr-dev.cloud.google",
      "backupdr-dev.cloud.google.com",
      "backupdr-sandbox.cloud.google",
      "backupdr-sandbox.cloud.google.com",
      "backupdr-staging.cloud.google",
      "backupdr-staging.cloud.google.com",
      "backupdr.cloud.google",
      "backupdr.cloud.google.com",
      "brocaproject.com",
      "bugs.webrtc.org",
      "ca.cloud.google",
      "cdn.ampproject.org",
      "channel-app.google",
      "chronicle.security",
      "chronicleforgood.com",
      "chroniclesec.com",
      "cloudyoryx.dev",
      "code.webrtc.org",
      "colab.research.google.com",
      "composer-dev.cloud.google",
      "composer-dev.cloud.google.com",
      "composer-qa.cloud.google",
      "composer-qa.cloud.google.com",
      "composer-staging.cloud.google",
      "composer-staging.cloud.google.com",
      "composer.cloud.google",
      "composer.cloud.google.com",
      "console.au.cloud.google",
      "console.ca.cloud.google",
      "console.eu.cloud.google",
      "console.eu.cloud.google.com",
      "console.il.cloud.google",
      "console.in.cloud.google",
      "console.it.cloud.google",
      "console.jp.cloud.google",
      "console.sa.cloud.google",
      "console.uk.cloud.google",
      "console.us.cloud.google",
      "crossmediapanel.com",
      "crowdcalling.google",
      "datafusion-api-dev.cloud.google",
      "datafusion-api-dev.cloud.google.com",
      "datafusion-api-staging.cloud.google",
      "datafusion-api-staging.cloud.google.com",
      "datafusion-api.cloud.google",
      "datafusion-api.cloud.google.com",
      "datafusion-dev.cloud.google",
      "datafusion-dev.cloud.google.com",
      "datafusion-staging.cloud.google",
      "datafusion-staging.cloud.google.com",
      "datafusion.cloud.google",
      "datafusion.cloud.google.com",
      "datalab.cloud.google.com",
      "dataliberation.org",
      "dataplex-dev.cloud.google.com",
      "dataplex-staging.cloud.google.com",
      "dataplex.cloud.google.com",
      "dataproc-image-staging.cloud.google",
      "dataproc-image-staging.cloud.google.com",
      "dataproc-staging.cloud.google",
      "dataproc-staging.cloud.google.com",
      "dataproc-test.cloud.google",
      "dataproc-test.cloud.google.com",
      "dataproc.cloud.google",
      "dataproc.cloud.google.com",
      "datasetsearch.research.google.com",
      "de.advertisercommunity.com",
      "de.gateway.dev",
      "dev.google-syndication.com",
      "dg-meta.video.google.com",
      "digitalassetlinks.org",
      "discover.google.com",
      "domains.google",
      "eageroryx.dev",
      "earlydays.google",
      "earthengine.google.co.in",
      "earthengine.google.com",
      "ehr-search.health.google.com",
      "en.advertisercommunity.com",
      "engineering.google",
      "es.advertisercommunity.com",
      "eu.cloud.google",
      "ew.gateway.dev",
      "fastlane.ci",
      "fiber.google.com",
      "fr.advertisercommunity.com",
      "g.dev",
      "g.page",
      "gapi.waze.com",
      "global.accountverification.cloud.google",
      "global.identityplatform.google",
      "gmbads.gle",
      "go-lang.com",
      "go-lang.net",
      "go-lang.org",
      "golang.com",
      "golang.google.cn",
      "golang.net",
      "golang.org",
      "googleblog.com",
      "googlecert.net",
      "googlestore.com",
      "grow.google",
      "hats.goog",
      "healthcare.cloud.google.com",
      "hey.gle",
      "iamremarkable.org",
      "id.advertisercommunity.com",
      "il.cloud.google",
      "in.cloud.google",
      "issues.webmproject.org",
      "issues.webrtc.org",
      "it.advertisercommunity.com",
      "it.cloud.google",
      "ja.advertisercommunity.com",
      "jp.cloud.google",
      "lanternal.com",
      "lers.google",
      "looker-staging.chronicle.security",
      "looker.chronicle.security",
      "makersuite.google",
      "mapmaker.google.com",
      "microhost.google.com",
      "misc-sni.google.com",
      "nomulus.foo",
      "notebooklm.google",
      "notebooks.cloud.google",
      "notebooks.cloud.google.com",
      "ok.gle",
      "ordering.page",
      "pagespeed.web.dev",
      "payment.goog",
      "picasaweb.com",
      "picasaweb.net",
      "picasaweb.org",
      "picnik.com",
      "pipelines.cloud.google.com",
      "pixate.com",
      "pki.goog",
      "pl.advertisercommunity.com",
      "play.space",
      "podcasts.goog",
      "privacysandbox.google.com",
      "projectgomie.google",
      "pt.advertisercommunity.com",
      "rbm.goog",
      "recaptcha.ampproject.net",
      "registry-qa.google",
      "registry-sandbox.google",
      "registry.google",
      "research.youtube",
      "ru.advertisercommunity.com",
      "sa.cloud.google",
      "savethedate.foo",
      "searchingforsyria.org",
      "share.google",
      "songwriters.youtube",
      "source.bazel.build",
      "sprayscape.com",
      "stage.advertisercommunity.com",
      "staging-global.identityplatform.google",
      "staging.google-syndication.com",
      "support.registry-qa.google",
      "support.registry-sandbox.google",
      "support.registry.google",
      "tensorboard-autopush.cloud.google.com",
      "tensorboard-dev.cloud.google.com",
      "tensorboard-staging.cloud.google.com",
      "tensorboard-test.cloud.google.com",
      "tensorboard.cloud.google.com",
      "tfhub.dev",
      "th.advertisercommunity.com",
      "thegooglestore.com",
      "tiltbrush.com",
      "travel.google",
      "uc.gateway.dev",
      "uk.cloud.google",
      "us.cloud.google",
      "vi.advertisercommunity.com",
      "webmproject.org",
      "webpkgcache.com",
      "workinxr.dev",
      "www.adsense.com",
      "www.googlestore.com",
      "www.iamremarkable.org",
      "www.pixate.com",
      "www.registry-qa.google",
      "www.registry-sandbox.google",
      "www.registry.google",
      "www.sprayscape.com",
      "www.thegooglestore.com",
      "xplr.co",
      "zh.advertisercommunity.com",
      "zynamics.com"
   ],
   "ip" : [
      "2a00:1450:400e:805:0:0:0:200e",
      "142.251.36.1",
      "142.250.75.238",
      "2a00:1450:400e:811:0:0:0:200e",
      "2a00:1450:400c:c09:0:0:0:79",
      "2a00:1450:400c:c0a:0:0:0:5e",
      "142.251.221.14",
      "2001:4860:4802:36:0:0:0:15",
      "142.250.75.241",
      "216.58.214.174",
      "142.250.186.46",
      "2001:4860:4802:32:0:0:0:15",
      "2a00:1450:400e:805:0:0:0:2003",
      "2a00:1450:400e:800:0:0:0:2003",
      "2a00:1450:400e:80f:0:0:0:2011",
      "2a00:1450:4006:80b:0:0:0:200e",
      "2001:4860:4802:38:0:0:0:15",
      "172.217.20.174",
      "172.217.168.238",
      "35.244.233.98",
      "172.217.171.238",
      "2a00:1450:4006:80c:0:0:0:2011",
      "2606:4700:7:0:0:0:a29f:820b",
      "2a00:1450:400e:803:0:0:0:2004",
      "142.250.179.142",
      "172.217.21.17",
      "142.251.36.14",
      "142.250.184.238",
      "2a00:1450:400e:80c:0:0:0:200e",
      "2a00:1450:400e:80f:0:0:0:200e",
      "142.251.39.110",
      "2001:4860:4802:32:0:0:0:1d",
      "108.177.15.113",
      "108.177.15.101",
      "2001:4860:4802:34:0:0:0:15",
      "2a00:1450:400e:811:0:0:0:2001",
      "2a00:1450:4007:80c:0:0:0:2011",
      "172.217.18.206",
      "2a00:1450:400e:805:0:0:0:2004",
      "2a00:1450:400c:c09:0:0:0:8a",
      "142.250.179.206",
      "2a00:1450:4007:805:0:0:0:200e",
      "142.250.179.65",
      "142.250.179.110",
      "2a00:1450:4001:829:0:0:0:200e",
      "216.239.32.21",
      "142.250.203.238",
      "216.239.32.180",
      "108.177.15.102",
      "2a00:1450:4006:80a:0:0:0:200e",
      "142.251.36.46",
      "2a00:1450:4001:812:0:0:0:200e",
      "2a00:1450:4007:818:0:0:0:200e",
      "2a00:1450:4007:80d:0:0:0:2011",
      "142.250.201.164",
      "2a00:1450:4007:813:0:0:0:2001",
      "2a00:1450:4006:80f:0:0:0:200e",
      "216.239.38.129",
      "142.250.201.14",
      "2a00:1450:4007:813:0:0:0:200e",
      "142.250.179.196",
      "142.250.179.145",
      "216.239.36.56",
      "2a00:1450:4001:82f:0:0:0:200e",
      "2606:4700:7:0:0:0:a29f:810b",
      "2a00:1450:400e:800:0:0:0:200e",
      "172.217.168.209",
      "2a00:1450:400c:c09:0:0:0:65",
      "2a00:1450:4006:80c:0:0:0:200e",
      "64.233.166.121",
      "142.251.37.206",
      "162.159.130.11",
      "142.251.39.100",
      "142.250.179.113",
      "2a00:1450:4001:81c:0:0:0:200e",
      "2a00:1450:4007:810:0:0:0:200e",
      "2a00:1450:400e:803:0:0:0:200e",
      "216.58.213.78",
      "172.217.23.209",
      "142.250.201.46",
      "172.217.16.206",
      "216.239.32.27",
      "142.250.201.174",
      "2a00:1450:400c:c09:0:0:0:71",
      "2a00:1450:4007:808:0:0:0:200e",
      "2a00:1450:4006:812:0:0:0:200e",
      "2a00:1450:4007:80b:0:0:0:200e",
      "216.58.214.78",
      "108.177.15.138",
      "142.250.181.225",
      "2a00:1450:4007:806:0:0:0:200e",
      "2a00:1450:400e:80d:0:0:0:2011",
      "216.58.206.46",
      "2a00:1450:4001:80e:0:0:0:200e",
      "2a00:1450:4007:81a:0:0:0:200e",
      "142.250.178.132",
      "2a00:1450:4007:818:0:0:0:2011",
      "172.217.18.46",
      "2001:4860:4802:36:0:0:0:38",
      "2001:4860:4802:32:0:0:0:1b",
      "2a00:1450:4007:819:0:0:0:2004",
      "216.239.36.152",
      "2a00:1450:4006:80e:0:0:0:200e",
      "2a00:1450:4007:80d:0:0:0:200e",
      "2a00:1450:4007:80c:0:0:0:200e",
      "2a00:1450:4007:80e:0:0:0:200e",
      "216.58.215.46",
      "2a00:1450:400e:801:0:0:0:200e",
      "142.251.37.46",
      "216.58.211.206",
      "142.251.37.209",
      "142.250.179.132",
      "2a00:1450:400e:80f:0:0:0:2004",
      "108.177.15.100",
      "172.217.20.206",
      "172.217.23.206",
      "2a00:1450:400c:c09:0:0:0:8b",
      "142.250.185.174",
      "2a00:1450:400e:802:0:0:0:2011",
      "142.250.74.238",
      "2a00:1450:4007:819:0:0:0:200e",
      "142.250.186.163",
      "142.251.220.206",
      "216.58.212.110",
      "2001:4860:4802:38:0:0:0:81",
      "2a00:1450:400e:801:0:0:0:2004",
      "142.250.186.110",
      "216.239.38.180",
      "2a00:1450:4007:807:0:0:0:2004",
      "2a00:1450:4006:803:0:0:0:200e",
      "2a00:1450:4006:800:0:0:0:200e",
      "142.251.36.3",
      "216.239.38.21",
      "2a00:1450:400e:802:0:0:0:200e",
      "2a00:1450:4007:807:0:0:0:200e",
      "172.217.18.238",
      "172.217.20.177",
      "162.159.129.11",
      "216.239.32.29",
      "108.177.15.139",
      "142.251.36.17",
      "2a00:1450:4001:81d:0:0:0:2001",
      "216.239.34.21",
      "216.239.36.180",
      "2a00:1450:400e:810:0:0:0:200e",
      "216.239.36.21",
      "216.239.34.180",
      "2a00:1450:4001:831:0:0:0:200e",
      "142.250.179.78",
      "2a00:1450:400e:80d:0:0:0:200e",
      "2a00:1450:4006:811:0:0:0:200e",
      "2001:4860:4802:36:0:0:0:98",
      "142.251.168.94",
      "142.250.181.238"
   ],
   "issuer" : {
      "commonname" : "WE2",
      "country" : "US",
      "organization" : "Google Trust Services"
   },
   "keyusage" : [
      "critical",
      "digitalSignature",
      "keyEncipherment"
   ],
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "exponent" : 65537,
      "length" : 2048
   },
   "seen_date" : "2025-05-26",
   "serial" : "d8:2e:41:1e:cb:aa:2a:5f:12:cf:b8:16:89:59:ca:14",
   "signature" : {
      "algorithm" : "ecdsa-with-SHA256"
   },
   "source" : "googlexenon2025h2log",
   "subdomains" : [
      "accountverification.cloud.google",
      "au.cloud.google",
      "ca.cloud.google",
      "cloud.google.com",
      "eu.cloud.google",
      "eu.cloud.google.com",
      "health.google.com",
      "il.cloud.google",
      "in.cloud.google",
      "it.cloud.google",
      "jp.cloud.google",
      "research.google.com",
      "sa.cloud.google",
      "uk.cloud.google",
      "us.cloud.google",
      "video.google.com"
   ],
   "subject" : {
      "altname" : [
         "*.backupdr-dev.cloud.google.com",
         "console.ca.cloud.google",
         "*.backstory.chroniclesec.com",
         "*.pl.advertisercommunity.com",
         "*.tensorboard-dev.cloud.google.com",
         "*.ampproject.net",
         "vi.advertisercommunity.com",
         "chronicle.security",
         "*.dataliberation.org",
         "*.datafusion-staging.cloud.google",
         "misc-sni.google.com",
         "support.registry-qa.google",
         "registry.google",
         "*.picasaweb.net",
         "*.g.dev",
         "*.identityplatform.google",
         "stage.advertisercommunity.com",
         "*.xn--ngstr-lra8j.com",
         "*.composer-qa.cloud.google",
         "*.looker-staging.chronicle.security",
         "*.tensorboard-staging.cloud.google.com",
         "*.datafusion-api-staging.cloud.google.com",
         "golang.com",
         "*.backupdr-staging.cloud.google.com",
         "www.adsense.com",
         "*.issues.webmproject.org",
         "webmproject.org",
         "privacysandbox.google.com",
         "support.registry-sandbox.google",
         "*.macservice.goog",
         "projectgomie.google",
         "*.composer-dev.cloud.google",
         "www.iamremarkable.org",
         "digitalassetlinks.org",
         "*.googleacquisitionmigration.com",
         "console.uk.cloud.google",
         "*.duetai.google",
         "*.datafusion.cloud.google",
         "*.ca.cloud.google",
         "*.datafusion-dev.cloud.google.com",
         "gmbads.gle",
         "nomulus.foo",
         "thegooglestore.com",
         "*.eu.cloud.google",
         "*.pki.goog",
         "*.composer.cloud.google",
         "crossmediapanel.com",
         "support.registry.google",
         "*.backupdr-dev.cloud.google",
         "*.datafusion.cloud.google.com",
         "*.dataproc-test.cloud.google.com",
         "searchingforsyria.org",
         "channel-app.google",
         "*.share.google",
         "*.source.bazel.build",
         "*.backstory-staging.chronicle.security",
         "*.earlydays.google",
         "*.microhost.google.com",
         "*.backupdr.cloud.google",
         "*.cloudyoryx.dev",
         "*.datalab.cloud.google.com",
         "*.datafusion-api.cloud.google.com",
         "console.jp.cloud.google",
         "*.backupdr.cloud.google.com",
         "*.chronicleforgood.com",
         "*.dataplex-dev.cloud.google.com",
         "adsensecustomsearchads.com",
         "cloud.google",
         "picasaweb.net",
         "duetai.google",
         "*.de.gateway.dev",
         "id.advertisercommunity.com",
         "*.engineering.google",
         "www.registry.google",
         "*.app.goo.gl",
         "fr.advertisercommunity.com",
         "g.page",
         "dg-meta.video.google.com",
         "*.chronicle.security",
         "*.googlecert.net",
         "chronicleforgood.com",
         "*.jp.cloud.google",
         "*.gmbads.gle",
         "*.dataproc-test.cloud.google",
         "*.stage.advertisercommunity.com",
         "pagespeed.web.dev",
         "*.amie.google",
         "www.googlestore.com",
         "*.tensorboard.cloud.google.com",
         "*.privacysandbox.google.com",
         "*.abc.xyz",
         "*.staging.google-syndication.com",
         "*.tensorboard-autopush.cloud.google.com",
         "adsense.com",
         "savethedate.foo",
         "datasetsearch.research.google.com",
         "de.advertisercommunity.com",
         "*.adsensecustomsearchads.com",
         "*.research.youtube",
         "zh.advertisercommunity.com",
         "*.datafusion-staging.cloud.google.com",
         "engineering.google",
         "*.uk.cloud.google",
         "lers.google",
         "pl.advertisercommunity.com",
         "cloudyoryx.dev",
         "en.advertisercommunity.com",
         "*.sa.cloud.google",
         "console.eu.cloud.google",
         "*.pipelines.cloud.google.com",
         "*.global.accountverification.cloud.google",
         "*.projectgomie.google",
         "share.google",
         "ampcache.com",
         "console.it.cloud.google",
         "*.dataproc-image-staging.cloud.google.com",
         "golang.google.cn",
         "colab.research.google.com",
         "*.ja.advertisercommunity.com",
         "*.crossmediapanel.com",
         "*.ampproject.org",
         "console.sa.cloud.google",
         "golang.org",
         "*.it.cloud.google",
         "*.makersuite.google",
         "*.dataproc.cloud.google",
         "googleblog.com",
         "*.nel.goog",
         "brocaproject.com",
         "makersuite.google",
         "*.aiplatform-notebook.cloud.google.com",
         "www.registry-sandbox.google",
         "gapi.waze.com",
         "*.workinxr.dev",
         "picasaweb.com",
         "tiltbrush.com",
         "*.fr.advertisercommunity.com",
         "discover.google.com",
         "console.au.cloud.google",
         "lanternal.com",
         "*.staging-global.identityplatform.google",
         "hey.gle",
         "*.pt.advertisercommunity.com",
         "*.aiplatform-training.cloud.google.com",
         "*.dataplex.cloud.google.com",
         "*.tensorboard-test.cloud.google.com",
         "*.go-lang.org",
         "bugs.webrtc.org",
         "*.au.cloud.google",
         "*.chroniclesec.com",
         "alphanucleo.google",
         "*.xplr.co",
         "*.recaptcha.ampproject.net",
         "googlestore.com",
         "*.golang.org",
         "*.floonet.goog",
         "fastlane.ci",
         "rbm.goog",
         "xn--ngstr-lra8j.com",
         "domains.google",
         "th.advertisercommunity.com",
         "*.earthengine.google.co.in",
         "ampproject.org",
         "*.grow.google",
         "console.in.cloud.google",
         "ru.advertisercommunity.com",
         "console.us.cloud.google",
         "*.lanternal.com",
         "*.mapmaker.google.com",
         "looker.chronicle.security",
         "app.goo.gl",
         "*.picasaweb.org",
         "*.ordering.page",
         "*.th.advertisercommunity.com",
         "pt.advertisercommunity.com",
         "ja.advertisercommunity.com",
         "*.dataplex-staging.cloud.google.com",
         "*.tiltbrush.com",
         "*.notebooks.cloud.google.com",
         "*.datafusion-api-dev.cloud.google",
         "*.g.page",
         "*.google-syndication.com",
         "*.in.cloud.google",
         "*.en.advertisercommunity.com",
         "es.advertisercommunity.com",
         "registry-sandbox.google",
         "picnik.com",
         "abc.xyz",
         "code.webrtc.org",
         "*.es.advertisercommunity.com",
         "*.play.space",
         "*.il.cloud.google",
         "songwriters.youtube",
         "g.dev",
         "*.discover.google.com",
         "*.backstory.chronicle.security",
         "issues.webmproject.org",
         "earlydays.google",
         "*.notebooks.cloud.google",
         "*.go-lang.net",
         "*.global.identityplatform.google",
         "*.androidify.com",
         "go-lang.net",
         "*.datafusion-api.cloud.google",
         "*.datafusion-api-dev.cloud.google.com",
         "advertisercommunity.com",
         "*.ok.gle",
         "*.backupdr-staging.cloud.google",
         "*.ru.advertisercommunity.com",
         "androidify.com",
         "*.de.advertisercommunity.com",
         "travel.google",
         "pki.goog",
         "*.eageroryx.dev",
         "iamremarkable.org",
         "*.ew.gateway.dev",
         "*.payment.goog",
         "*.datafusion-api-staging.cloud.google",
         "*.app-ads-services.com",
         "webpkgcache.com",
         "console.il.cloud.google",
         "ampproject.net",
         "*.composer-staging.cloud.google.com",
         "adsenseformobileapps.com",
         "*.alphanucleo.google",
         "*.backupdr-sandbox.cloud.google.com",
         "*.hey.gle",
         "go-lang.com",
         "*.autopush-global.identityplatform.google",
         "hats.goog",
         "app-ads-services.com",
         "amie.google",
         "*.cloud.google",
         "dataliberation.org",
         "*.golang.com",
         "*.composer-staging.cloud.google",
         "*.zynamics.com",
         "www.sprayscape.com",
         "identityplatform.google",
         "*.dataproc-staging.cloud.google",
         "zynamics.com",
         "*.advertisercommunity.com",
         "*.fiber.google.com",
         "*.datafusion-dev.cloud.google",
         "*.ampcache.com",
         "notebooklm.google",
         "*.podcasts.goog",
         "macservice.goog",
         "pixate.com",
         "ehr-search.health.google.com",
         "*.dataproc-image-staging.cloud.google",
         "googlecert.net",
         "*.it.advertisercommunity.com",
         "source.bazel.build",
         "*.golang.google.cn",
         "*.tfhub.dev",
         "*.rbm.goog",
         "*.composer-dev.cloud.google.com",
         "*.backupdr-autopush.cloud.google",
         "nel.goog",
         "looker-staging.chronicle.security",
         "*.ampproject.com",
         "*.healthcare.cloud.google.com",
         "*.gvt5.com",
         "chroniclesec.com",
         "workinxr.dev",
         "*.dataproc.cloud.google.com",
         "ampproject.com",
         "*.brocaproject.com",
         "registry-qa.google",
         "*.dataproc-staging.cloud.google.com",
         "*.backupdr-autopush.cloud.google.com",
         "*.id.advertisercommunity.com",
         "go-lang.org",
         "payment.goog",
         "*.dev.google-syndication.com",
         "research.youtube",
         "ok.gle",
         "*.uc.gateway.dev",
         "*.cdn.ampproject.org",
         "grow.google",
         "*.savethedate.foo",
         "www.pixate.com",
         "*.composer.cloud.google.com",
         "*.domains.google",
         "*.digitalassetlinks.org",
         "sprayscape.com",
         "www.registry-qa.google",
         "*.issues.webrtc.org",
         "picasaweb.org",
         "*.earthengine.google.com",
         "tfhub.dev",
         "*.gateway.dev",
         "floonet.goog",
         "www.thegooglestore.com",
         "*.vi.advertisercommunity.com",
         "*.searchingforsyria.org",
         "*.nomulus.foo",
         "play.space",
         "*.golang.net",
         "*.backupdr-sandbox.cloud.google",
         "xplr.co",
         "it.advertisercommunity.com",
         "crowdcalling.google",
         "*.zh.advertisercommunity.com",
         "*.composer-qa.cloud.google.com",
         "issues.webrtc.org",
         "eageroryx.dev",
         "*.webmproject.org",
         "golang.net",
         "console.eu.cloud.google.com",
         "*.us.cloud.google",
         "*.picasaweb.com",
         "*.picnik.com",
         "ordering.page",
         "*.travel.google",
         "*.googleblog.com",
         "*.go-lang.com",
         "*.looker.chronicle.security",
         "*.hats.goog",
         "*.webpkgcache.com",
         "*.songwriters.youtube"
      ],
      "commonname" : "misc-sni.google.com"
   },
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "build",
      "ci",
      "cn",
      "co",
      "co.in",
      "com",
      "dev",
      "foo",
      "gl",
      "gle",
      "goog",
      "google",
      "net",
      "org",
      "page",
      "security",
      "space",
      "xyz",
      "youtube"
   ],
   "validity" : {
      "notafter" : "2025-08-18T08:40:49.000Z",
      "notbefore" : "2025-05-26T08:40:50.000Z"
   },
   "version" : "v3",
   "wildcard" : "true"
}

{
   "@category" : "ctl",
   "@timestamp" : "2025-05-26T09:42:17.000Z",
   "basicconstraints" : [
      "critical"
   ],
   "ca" : "false",
   "domain" : [
      "abc.xyz",
      "adsense.com",
      "adsensecustomsearchads.com",
      "adsenseformobileapps.com",
      "advertisercommunity.com",
      "alphanucleo.google",
      "amie.google",
      "ampcache.com",
      "ampproject.com",
      "ampproject.net",
      "ampproject.org",
      "androidify.com",
      "app-ads-services.com",
      "bazel.build",
      "brocaproject.com",
      "channel-app.google",
      "chronicle.security",
      "chronicleforgood.com",
      "chroniclesec.com",
      "cloud.google",
      "cloudyoryx.dev",
      "crossmediapanel.com",
      "crowdcalling.google",
      "dataliberation.org",
      "digitalassetlinks.org",
      "domains.google",
      "duetai.google",
      "eageroryx.dev",
      "earlydays.google",
      "engineering.google",
      "fastlane.ci",
      "floonet.goog",
      "g.dev",
      "g.page",
      "gateway.dev",
      "gmbads.gle",
      "go-lang.com",
      "go-lang.net",
      "go-lang.org",
      "golang.com",
      "golang.net",
      "golang.org",
      "goo.gl",
      "google-syndication.com",
      "google.cn",
      "google.co.in",
      "google.com",
      "googleacquisitionmigration.com",
      "googleblog.com",
      "googlecert.net",
      "googlestore.com",
      "grow.google",
      "gvt5.com",
      "hats.goog",
      "hey.gle",
      "iamremarkable.org",
      "identityplatform.google",
      "lanternal.com",
      "lers.google",
      "macservice.goog",
      "makersuite.google",
      "nel.goog",
      "nomulus.foo",
      "notebooklm.google",
      "ok.gle",
      "ordering.page",
      "payment.goog",
      "picasaweb.com",
      "picasaweb.net",
      "picasaweb.org",
      "picnik.com",
      "pixate.com",
      "pki.goog",
      "play.space",
      "podcasts.goog",
      "projectgomie.google",
      "rbm.goog",
      "registry-qa.google",
      "registry-sandbox.google",
      "registry.google",
      "research.youtube",
      "savethedate.foo",
      "searchingforsyria.org",
      "share.google",
      "songwriters.youtube",
      "sprayscape.com",
      "tfhub.dev",
      "thegooglestore.com",
      "tiltbrush.com",
      "travel.google",
      "waze.com",
      "web.dev",
      "webmproject.org",
      "webpkgcache.com",
      "webrtc.org",
      "workinxr.dev",
      "xn--ngstr-lra8j.com",
      "xplr.co",
      "zynamics.com"
   ],
   "extkeyusage" : [
      "serverAuth"
   ],
   "fingerprint" : {
      "md5" : "a8120e21a5410ec375f5b46dea7ee601",
      "sha1" : "57b4c9d71e8a2065f2a9a8ac66eec8b5916495b6",
      "sha256" : "101cd1a3c3bb633b00e7d9747a3d76c15097e6599ba1a3563127fc8959d39970"
   },
   "host" : [
      "aiplatform-notebook",
      "aiplatform-training",
      "app",
      "au",
      "autopush-global",
      "backstory",
      "backstory-staging",
      "backupdr",
      "backupdr-autopush",
      "backupdr-dev",
      "backupdr-sandbox",
      "backupdr-staging",
      "bugs",
      "ca",
      "cdn",
      "code",
      "colab",
      "composer",
      "composer-dev",
      "composer-qa",
      "composer-staging",
      "console",
      "datafusion",
      "datafusion-api",
      "datafusion-api-dev",
      "datafusion-api-staging",
      "datafusion-dev",
      "datafusion-staging",
      "datalab",
      "dataplex",
      "dataplex-dev",
      "dataplex-staging",
      "dataproc",
      "dataproc-image-staging",
      "dataproc-staging",
      "dataproc-test",
      "datasetsearch",
      "de",
      "dev",
      "dg-meta",
      "discover",
      "earthengine",
      "ehr-search",
      "en",
      "es",
      "eu",
      "ew",
      "fiber",
      "fr",
      "gapi",
      "global",
      "golang",
      "healthcare",
      "id",
      "il",
      "in",
      "issues",
      "it",
      "ja",
      "jp",
      "looker",
      "looker-staging",
      "mapmaker",
      "microhost",
      "misc-sni",
      "notebooks",
      "pagespeed",
      "pipelines",
      "pl",
      "privacysandbox",
      "pt",
      "recaptcha",
      "ru",
      "sa",
      "source",
      "stage",
      "staging",
      "staging-global",
      "support",
      "tensorboard",
      "tensorboard-autopush",
      "tensorboard-dev",
      "tensorboard-staging",
      "tensorboard-test",
      "th",
      "uc",
      "uk",
      "us",
      "vi",
      "www",
      "zh"
   ],
   "hostname" : [
      "abc.xyz",
      "adsense.com",
      "adsensecustomsearchads.com",
      "adsenseformobileapps.com",
      "advertisercommunity.com",
      "aiplatform-notebook.cloud.google.com",
      "aiplatform-training.cloud.google.com",
      "alphanucleo.google",
      "amie.google",
      "ampproject.com",
      "ampproject.net",
      "ampproject.org",
      "androidify.com",
      "app-ads-services.com",
      "app.goo.gl",
      "au.cloud.google",
      "autopush-global.identityplatform.google",
      "backstory-staging.chronicle.security",
      "backstory.chronicle.security",
      "backstory.chroniclesec.com",
      "backupdr-autopush.cloud.google",
      "backupdr-autopush.cloud.google.com",
      "backupdr-dev.cloud.google",
      "backupdr-dev.cloud.google.com",
      "backupdr-sandbox.cloud.google",
      "backupdr-sandbox.cloud.google.com",
      "backupdr-staging.cloud.google",
      "backupdr-staging.cloud.google.com",
      "backupdr.cloud.google",
      "backupdr.cloud.google.com",
      "brocaproject.com",
      "bugs.webrtc.org",
      "ca.cloud.google",
      "cdn.ampproject.org",
      "channel-app.google",
      "chronicle.security",
      "chronicleforgood.com",
      "chroniclesec.com",
      "cloudyoryx.dev",
      "code.webrtc.org",
      "colab.research.google.com",
      "composer-dev.cloud.google",
      "composer-dev.cloud.google.com",
      "composer-qa.cloud.google",
      "composer-qa.cloud.google.com",
      "composer-staging.cloud.google",
      "composer-staging.cloud.google.com",
      "composer.cloud.google",
      "composer.cloud.google.com",
      "console.au.cloud.google",
      "console.ca.cloud.google",
      "console.eu.cloud.google",
      "console.eu.cloud.google.com",
      "console.il.cloud.google",
      "console.in.cloud.google",
      "console.it.cloud.google",
      "console.jp.cloud.google",
      "console.sa.cloud.google",
      "console.uk.cloud.google",
      "console.us.cloud.google",
      "crossmediapanel.com",
      "crowdcalling.google",
      "datafusion-api-dev.cloud.google",
      "datafusion-api-dev.cloud.google.com",
      "datafusion-api-staging.cloud.google",
      "datafusion-api-staging.cloud.google.com",
      "datafusion-api.cloud.google",
      "datafusion-api.cloud.google.com",
      "datafusion-dev.cloud.google",
      "datafusion-dev.cloud.google.com",
      "datafusion-staging.cloud.google",
      "datafusion-staging.cloud.google.com",
      "datafusion.cloud.google",
      "datafusion.cloud.google.com",
      "datalab.cloud.google.com",
      "dataliberation.org",
      "dataplex-dev.cloud.google.com",
      "dataplex-staging.cloud.google.com",
      "dataplex.cloud.google.com",
      "dataproc-image-staging.cloud.google",
      "dataproc-image-staging.cloud.google.com",
      "dataproc-staging.cloud.google",
      "dataproc-staging.cloud.google.com",
      "dataproc-test.cloud.google",
      "dataproc-test.cloud.google.com",
      "dataproc.cloud.google",
      "dataproc.cloud.google.com",
      "datasetsearch.research.google.com",
      "de.advertisercommunity.com",
      "de.gateway.dev",
      "dev.google-syndication.com",
      "dg-meta.video.google.com",
      "digitalassetlinks.org",
      "discover.google.com",
      "domains.google",
      "eageroryx.dev",
      "earlydays.google",
      "earthengine.google.co.in",
      "earthengine.google.com",
      "ehr-search.health.google.com",
      "en.advertisercommunity.com",
      "engineering.google",
      "es.advertisercommunity.com",
      "eu.cloud.google",
      "ew.gateway.dev",
      "fastlane.ci",
      "fiber.google.com",
      "fr.advertisercommunity.com",
      "g.dev",
      "g.page",
      "gapi.waze.com",
      "global.accountverification.cloud.google",
      "global.identityplatform.google",
      "gmbads.gle",
      "go-lang.com",
      "go-lang.net",
      "go-lang.org",
      "golang.com",
      "golang.google.cn",
      "golang.net",
      "golang.org",
      "googleblog.com",
      "googlecert.net",
      "googlestore.com",
      "grow.google",
      "hats.goog",
      "healthcare.cloud.google.com",
      "hey.gle",
      "iamremarkable.org",
      "id.advertisercommunity.com",
      "il.cloud.google",
      "in.cloud.google",
      "issues.webmproject.org",
      "issues.webrtc.org",
      "it.advertisercommunity.com",
      "it.cloud.google",
      "ja.advertisercommunity.com",
      "jp.cloud.google",
      "lanternal.com",
      "lers.google",
      "looker-staging.chronicle.security",
      "looker.chronicle.security",
      "makersuite.google",
      "mapmaker.google.com",
      "microhost.google.com",
      "misc-sni.google.com",
      "nomulus.foo",
      "notebooklm.google",
      "notebooks.cloud.google",
      "notebooks.cloud.google.com",
      "ok.gle",
      "ordering.page",
      "pagespeed.web.dev",
      "payment.goog",
      "picasaweb.com",
      "picasaweb.net",
      "picasaweb.org",
      "picnik.com",
      "pipelines.cloud.google.com",
      "pixate.com",
      "pki.goog",
      "pl.advertisercommunity.com",
      "play.space",
      "podcasts.goog",
      "privacysandbox.google.com",
      "projectgomie.google",
      "pt.advertisercommunity.com",
      "rbm.goog",
      "recaptcha.ampproject.net",
      "registry-qa.google",
      "registry-sandbox.google",
      "registry.google",
      "research.youtube",
      "ru.advertisercommunity.com",
      "sa.cloud.google",
      "savethedate.foo",
      "searchingforsyria.org",
      "share.google",
      "songwriters.youtube",
      "source.bazel.build",
      "sprayscape.com",
      "stage.advertisercommunity.com",
      "staging-global.identityplatform.google",
      "staging.google-syndication.com",
      "support.registry-qa.google",
      "support.registry-sandbox.google",
      "support.registry.google",
      "tensorboard-autopush.cloud.google.com",
      "tensorboard-dev.cloud.google.com",
      "tensorboard-staging.cloud.google.com",
      "tensorboard-test.cloud.google.com",
      "tensorboard.cloud.google.com",
      "tfhub.dev",
      "th.advertisercommunity.com",
      "thegooglestore.com",
      "tiltbrush.com",
      "travel.google",
      "uc.gateway.dev",
      "uk.cloud.google",
      "us.cloud.google",
      "vi.advertisercommunity.com",
      "webmproject.org",
      "webpkgcache.com",
      "workinxr.dev",
      "www.adsense.com",
      "www.googlestore.com",
      "www.iamremarkable.org",
      "www.pixate.com",
      "www.registry-qa.google",
      "www.registry-sandbox.google",
      "www.registry.google",
      "www.sprayscape.com",
      "www.thegooglestore.com",
      "xplr.co",
      "zh.advertisercommunity.com",
      "zynamics.com"
   ],
   "ip" : [
      "142.250.200.238",
      "2001:4860:4802:32:0:0:0:15",
      "216.58.214.163",
      "216.58.214.174",
      "142.250.75.238",
      "2a00:1450:400e:811:0:0:0:200e",
      "2a00:1450:400e:80c:0:0:0:2003",
      "2a00:1450:400e:810:0:0:0:2011",
      "2a00:1450:400e:805:0:0:0:200e",
      "142.250.102.138",
      "142.250.178.142",
      "142.251.221.14",
      "2001:4860:4802:36:0:0:0:15",
      "2a00:1450:4007:80c:0:0:0:2004",
      "2a00:1450:400c:c04:0:0:0:66",
      "2a00:1450:4001:80b:0:0:0:200e",
      "142.251.36.4",
      "216.58.214.14",
      "2a00:1450:400e:80c:0:0:0:200e",
      "2a00:1450:400e:80f:0:0:0:200e",
      "142.251.36.14",
      "2001:4860:4802:32:0:0:0:1d",
      "2a00:1450:400e:811:0:0:0:2003",
      "142.251.39.110",
      "142.250.179.142",
      "2a00:1450:400c:c0c:0:0:0:5e",
      "142.250.179.177",
      "216.58.214.65",
      "2001:4860:4802:34:0:0:0:15",
      "2a00:1450:4007:80e:0:0:0:2011",
      "2001:4860:4802:32:0:0:0:180",
      "172.217.20.174",
      "172.217.168.238",
      "2001:4860:4802:38:0:0:0:15",
      "2606:4700:7:0:0:0:a29f:820b",
      "2a00:1450:4001:80f:0:0:0:200e",
      "2001:4860:4802:34:0:0:0:180",
      "35.244.233.98",
      "2a00:1450:4006:801:0:0:0:200e",
      "2a00:1450:4001:81c:0:0:0:2004",
      "216.239.32.21",
      "142.250.179.163",
      "2a00:1450:4006:80c:0:0:0:2001",
      "2a00:1450:400c:c04:0:0:0:64",
      "2a00:1450:4007:80e:0:0:0:2004",
      "2a00:1450:4007:80c:0:0:0:2011",
      "2001:4860:4802:36:0:0:0:180",
      "172.217.18.206",
      "142.250.179.110",
      "2a00:1450:4007:805:0:0:0:200e",
      "142.250.179.206",
      "2a00:1450:4007:810:0:0:0:200e",
      "142.251.37.206",
      "142.250.179.113",
      "162.159.130.11",
      "216.58.213.78",
      "2a00:1450:400e:803:0:0:0:200e",
      "142.250.102.100",
      "142.250.201.161",
      "2a00:1450:400c:c04:0:0:0:8b",
      "2a00:1450:4006:80c:0:0:0:200e",
      "142.250.179.68",
      "142.250.200.193",
      "142.251.36.49",
      "142.250.201.174",
      "216.239.32.27",
      "172.217.16.206",
      "142.250.201.46",
      "142.250.201.164",
      "2a00:1450:4007:813:0:0:0:2001",
      "142.251.36.46",
      "2a00:1450:4001:812:0:0:0:200e",
      "2a00:1450:4006:80a:0:0:0:200e",
      "2a00:1450:4007:818:0:0:0:200e",
      "2a00:1450:4001:82f:0:0:0:200e",
      "2a00:1450:400e:80e:0:0:0:200e",
      "2a00:1450:400e:800:0:0:0:200e",
      "2606:4700:7:0:0:0:a29f:810b",
      "142.250.201.14",
      "216.239.38.129",
      "2a00:1450:4007:813:0:0:0:200e",
      "216.239.36.56",
      "2001:4860:4802:32:0:0:0:1b",
      "2001:4860:4802:36:0:0:0:38",
      "216.239.36.152",
      "2a00:1450:4007:818:0:0:0:2011",
      "2a00:1450:400e:811:0:0:0:2011",
      "2a00:1450:4007:80e:0:0:0:200e",
      "216.58.208.110",
      "108.177.15.94",
      "2a00:1450:4007:80d:0:0:0:200e",
      "2a00:1450:4007:80c:0:0:0:200e",
      "142.250.102.101",
      "2a00:1450:4006:812:0:0:0:200e",
      "2a00:1450:400e:810:0:0:0:2004",
      "216.58.214.78",
      "2a00:1450:4001:82b:0:0:0:200e",
      "142.250.179.174",
      "2a00:1450:4007:81a:0:0:0:200e",
      "2a00:1450:4007:806:0:0:0:200e",
      "142.250.102.139",
      "216.58.206.46",
      "142.250.184.206",
      "2a00:1450:4007:819:0:0:0:2011",
      "216.58.198.78",
      "216.58.214.81",
      "142.250.179.132",
      "172.217.23.206",
      "142.250.185.78",
      "142.250.179.209",
      "172.217.20.206",
      "142.251.37.46",
      "2a00:1450:400e:801:0:0:0:200e",
      "172.217.20.164",
      "2001:4860:4802:38:0:0:0:180",
      "216.58.212.174",
      "2a00:1450:4006:805:0:0:0:200e",
      "216.239.38.21",
      "2a00:1450:400e:802:0:0:0:200e",
      "2001:4860:4802:38:0:0:0:81",
      "172.217.19.46",
      "2a00:1450:4006:810:0:0:0:200e",
      "216.58.208.100",
      "162.159.129.11",
      "172.217.20.177",
      "172.217.23.211",
      "142.250.74.238",
      "142.250.102.113",
      "2a00:1450:4001:829:0:0:0:2004",
      "2a00:1450:4007:819:0:0:0:200e",
      "2a00:1450:4006:807:0:0:0:200e",
      "2a00:1450:400c:c04:0:0:0:71",
      "2a00:1450:400e:811:0:0:0:2004",
      "142.251.220.206",
      "216.58.212.110",
      "142.250.102.102",
      "2a00:1450:400e:80d:0:0:0:200e",
      "2a00:1450:4007:81a:0:0:0:2011",
      "142.250.179.78",
      "2404:6800:4017:804:0:0:0:2013",
      "2a00:1450:4001:806:0:0:0:200e",
      "2a00:1450:4006:811:0:0:0:200e",
      "2001:4860:4802:36:0:0:0:98",
      "142.250.181.238",
      "142.251.39.113",
      "216.239.32.29",
      "2a00:1450:400e:810:0:0:0:200e",
      "216.239.34.21",
      "172.217.21.14",
      "216.239.36.21",
      "2a00:1450:4001:831:0:0:0:200e",
      "216.58.214.177",
      "2a00:1450:4007:807:0:0:0:2001"
   ],
   "issuer" : {
      "commonname" : "WR2",
      "country" : "US",
      "organization" : "Google Trust Services"
   },
   "keyusage" : [
      "critical",
      "digitalSignature"
   ],
   "publickey" : {
      "algorithm" : "id-ecPublicKey"
   },
   "seen_date" : "2025-05-26",
   "serial" : "46:b7:22:88:30:18:17:d1:09:9f:62:66:2f:5f:d3:cb",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "googlexenon2025h2log",
   "subdomains" : [
      "accountverification.cloud.google",
      "au.cloud.google",
      "ca.cloud.google",
      "cloud.google.com",
      "eu.cloud.google",
      "eu.cloud.google.com",
      "health.google.com",
      "il.cloud.google",
      "in.cloud.google",
      "it.cloud.google",
      "jp.cloud.google",
      "research.google.com",
      "sa.cloud.google",
      "uk.cloud.google",
      "us.cloud.google",
      "video.google.com"
   ],
   "subject" : {
      "altname" : [
         "zynamics.com",
         "*.dataproc-staging.cloud.google",
         "identityplatform.google",
         "www.sprayscape.com",
         "*.fiber.google.com",
         "*.advertisercommunity.com",
         "*.datafusion-dev.cloud.google",
         "*.ampcache.com",
         "notebooklm.google",
         "macservice.goog",
         "*.podcasts.goog",
         "ehr-search.health.google.com",
         "pixate.com",
         "googlecert.net",
         "*.dataproc-image-staging.cloud.google",
         "source.bazel.build",
         "*.it.advertisercommunity.com",
         "*.golang.google.cn",
         "*.tfhub.dev",
         "*.rbm.goog",
         "*.composer-dev.cloud.google.com",
         "looker-staging.chronicle.security",
         "*.backupdr-autopush.cloud.google",
         "nel.goog",
         "*.gvt5.com",
         "*.healthcare.cloud.google.com",
         "*.ampproject.com",
         "*.dataproc.cloud.google.com",
         "workinxr.dev",
         "chroniclesec.com",
         "ampproject.com",
         "*.brocaproject.com",
         "registry-qa.google",
         "*.id.advertisercommunity.com",
         "*.dataproc-staging.cloud.google.com",
         "*.backupdr-autopush.cloud.google.com",
         "payment.goog",
         "go-lang.org",
         "ok.gle",
         "research.youtube",
         "*.uc.gateway.dev",
         "*.dev.google-syndication.com",
         "*.savethedate.foo",
         "*.cdn.ampproject.org",
         "grow.google",
         "www.pixate.com",
         "*.digitalassetlinks.org",
         "*.composer.cloud.google.com",
         "*.domains.google",
         "sprayscape.com",
         "*.issues.webrtc.org",
         "www.registry-qa.google",
         "*.earthengine.google.com",
         "tfhub.dev",
         "picasaweb.org",
         "*.gateway.dev",
         "www.thegooglestore.com",
         "floonet.goog",
         "*.nomulus.foo",
         "*.vi.advertisercommunity.com",
         "*.searchingforsyria.org",
         "*.golang.net",
         "play.space",
         "*.backupdr-sandbox.cloud.google",
         "it.advertisercommunity.com",
         "xplr.co",
         "*.zh.advertisercommunity.com",
         "crowdcalling.google",
         "*.composer-qa.cloud.google.com",
         "*.webmproject.org",
         "eageroryx.dev",
         "issues.webrtc.org",
         "golang.net",
         "console.eu.cloud.google.com",
         "*.us.cloud.google",
         "*.picasaweb.com",
         "ordering.page",
         "*.picnik.com",
         "*.travel.google",
         "*.go-lang.com",
         "*.googleblog.com",
         "*.looker.chronicle.security",
         "*.hats.goog",
         "*.webpkgcache.com",
         "*.songwriters.youtube",
         "domains.google",
         "*.grow.google",
         "ampproject.org",
         "th.advertisercommunity.com",
         "*.earthengine.google.co.in",
         "ru.advertisercommunity.com",
         "console.in.cloud.google",
         "*.mapmaker.google.com",
         "*.lanternal.com",
         "console.us.cloud.google",
         "looker.chronicle.security",
         "app.goo.gl",
         "*.picasaweb.org",
         "*.ordering.page",
         "*.th.advertisercommunity.com",
         "pt.advertisercommunity.com",
         "ja.advertisercommunity.com",
         "*.dataplex-staging.cloud.google.com",
         "*.tiltbrush.com",
         "*.notebooks.cloud.google.com",
         "*.g.page",
         "*.datafusion-api-dev.cloud.google",
         "*.in.cloud.google",
         "*.google-syndication.com",
         "es.advertisercommunity.com",
         "*.en.advertisercommunity.com",
         "registry-sandbox.google",
         "picnik.com",
         "code.webrtc.org",
         "abc.xyz",
         "*.es.advertisercommunity.com",
         "*.play.space",
         "*.il.cloud.google",
         "songwriters.youtube",
         "g.dev",
         "*.discover.google.com",
         "*.backstory.chronicle.security",
         "issues.webmproject.org",
         "*.go-lang.net",
         "*.notebooks.cloud.google",
         "earlydays.google",
         "*.global.identityplatform.google",
         "*.androidify.com",
         "*.datafusion-api-dev.cloud.google.com",
         "*.datafusion-api.cloud.google",
         "go-lang.net",
         "*.ok.gle",
         "advertisercommunity.com",
         "*.backupdr-staging.cloud.google",
         "*.ru.advertisercommunity.com",
         "androidify.com",
         "*.eageroryx.dev",
         "travel.google",
         "*.de.advertisercommunity.com",
         "pki.goog",
         "*.ew.gateway.dev",
         "iamremarkable.org",
         "*.datafusion-api-staging.cloud.google",
         "*.payment.goog",
         "*.app-ads-services.com",
         "ampproject.net",
         "webpkgcache.com",
         "console.il.cloud.google",
         "adsenseformobileapps.com",
         "*.composer-staging.cloud.google.com",
         "*.backupdr-sandbox.cloud.google.com",
         "*.alphanucleo.google",
         "*.hey.gle",
         "*.autopush-global.identityplatform.google",
         "hats.goog",
         "go-lang.com",
         "app-ads-services.com",
         "amie.google",
         "*.composer-staging.cloud.google",
         "*.golang.com",
         "dataliberation.org",
         "*.cloud.google",
         "*.zynamics.com",
         "*.stage.advertisercommunity.com",
         "*.dataproc-test.cloud.google",
         "*.gmbads.gle",
         "pagespeed.web.dev",
         "*.amie.google",
         "www.googlestore.com",
         "*.tensorboard.cloud.google.com",
         "*.privacysandbox.google.com",
         "*.staging.google-syndication.com",
         "*.abc.xyz",
         "*.tensorboard-autopush.cloud.google.com",
         "adsense.com",
         "savethedate.foo",
         "datasetsearch.research.google.com",
         "de.advertisercommunity.com",
         "*.adsensecustomsearchads.com",
         "*.research.youtube",
         "engineering.google",
         "zh.advertisercommunity.com",
         "*.datafusion-staging.cloud.google.com",
         "lers.google",
         "*.uk.cloud.google",
         "en.advertisercommunity.com",
         "cloudyoryx.dev",
         "pl.advertisercommunity.com",
         "*.sa.cloud.google",
         "console.eu.cloud.google",
         "*.pipelines.cloud.google.com",
         "*.global.accountverification.cloud.google",
         "*.projectgomie.google",
         "share.google",
         "ampcache.com",
         "console.it.cloud.google",
         "*.dataproc-image-staging.cloud.google.com",
         "golang.google.cn",
         "colab.research.google.com",
         "*.ja.advertisercommunity.com",
         "*.crossmediapanel.com",
         "golang.org",
         "console.sa.cloud.google",
         "*.ampproject.org",
         "*.it.cloud.google",
         "*.dataproc.cloud.google",
         "*.makersuite.google",
         "googleblog.com",
         "*.nel.goog",
         "brocaproject.com",
         "*.aiplatform-notebook.cloud.google.com",
         "makersuite.google",
         "www.registry-sandbox.google",
         "*.workinxr.dev",
         "gapi.waze.com",
         "picasaweb.com",
         "tiltbrush.com",
         "*.fr.advertisercommunity.com",
         "discover.google.com",
         "console.au.cloud.google",
         "*.staging-global.identityplatform.google",
         "lanternal.com",
         "*.pt.advertisercommunity.com",
         "hey.gle",
         "*.aiplatform-training.cloud.google.com",
         "*.dataplex.cloud.google.com",
         "*.tensorboard-test.cloud.google.com",
         "*.go-lang.org",
         "*.au.cloud.google",
         "*.chroniclesec.com",
         "bugs.webrtc.org",
         "*.xplr.co",
         "alphanucleo.google",
         "*.recaptcha.ampproject.net",
         "googlestore.com",
         "*.golang.org",
         "*.floonet.goog",
         "fastlane.ci",
         "rbm.goog",
         "xn--ngstr-lra8j.com",
         "*.backupdr-dev.cloud.google.com",
         "console.ca.cloud.google",
         "*.backstory.chroniclesec.com",
         "*.pl.advertisercommunity.com",
         "vi.advertisercommunity.com",
         "*.ampproject.net",
         "*.tensorboard-dev.cloud.google.com",
         "misc-sni.google.com",
         "*.datafusion-staging.cloud.google",
         "chronicle.security",
         "*.dataliberation.org",
         "support.registry-qa.google",
         "registry.google",
         "*.picasaweb.net",
         "*.g.dev",
         "stage.advertisercommunity.com",
         "*.identityplatform.google",
         "*.composer-qa.cloud.google",
         "*.xn--ngstr-lra8j.com",
         "*.looker-staging.chronicle.security",
         "*.tensorboard-staging.cloud.google.com",
         "*.backupdr-staging.cloud.google.com",
         "golang.com",
         "*.datafusion-api-staging.cloud.google.com",
         "*.macservice.goog",
         "support.registry-sandbox.google",
         "projectgomie.google",
         "*.issues.webmproject.org",
         "webmproject.org",
         "www.adsense.com",
         "privacysandbox.google.com",
         "*.composer-dev.cloud.google",
         "www.iamremarkable.org",
         "*.googleacquisitionmigration.com",
         "digitalassetlinks.org",
         "console.uk.cloud.google",
         "*.datafusion.cloud.google",
         "*.duetai.google",
         "*.ca.cloud.google",
         "*.datafusion-dev.cloud.google.com",
         "gmbads.gle",
         "nomulus.foo",
         "thegooglestore.com",
         "*.eu.cloud.google",
         "support.registry.google",
         "crossmediapanel.com",
         "*.pki.goog",
         "*.composer.cloud.google",
         "*.backupdr-dev.cloud.google",
         "*.dataproc-test.cloud.google.com",
         "*.datafusion.cloud.google.com",
         "channel-app.google",
         "searchingforsyria.org",
         "*.backstory-staging.chronicle.security",
         "*.earlydays.google",
         "*.share.google",
         "*.source.bazel.build",
         "*.microhost.google.com",
         "*.backupdr.cloud.google",
         "*.cloudyoryx.dev",
         "*.datalab.cloud.google.com",
         "*.datafusion-api.cloud.google.com",
         "*.chronicleforgood.com",
         "*.backupdr.cloud.google.com",
         "console.jp.cloud.google",
         "cloud.google",
         "adsensecustomsearchads.com",
         "*.dataplex-dev.cloud.google.com",
         "picasaweb.net",
         "duetai.google",
         "*.de.gateway.dev",
         "id.advertisercommunity.com",
         "*.app.goo.gl",
         "www.registry.google",
         "*.engineering.google",
         "fr.advertisercommunity.com",
         "g.page",
         "dg-meta.video.google.com",
         "*.chronicle.security",
         "*.googlecert.net",
         "chronicleforgood.com",
         "*.jp.cloud.google"
      ],
      "commonname" : "misc-sni.google.com"
   },
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "build",
      "ci",
      "cn",
      "co",
      "co.in",
      "com",
      "dev",
      "foo",
      "gl",
      "gle",
      "goog",
      "google",
      "net",
      "org",
      "page",
      "security",
      "space",
      "xyz",
      "youtube"
   ],
   "validity" : {
      "notafter" : "2025-08-18T08:40:36.000Z",
      "notbefore" : "2025-05-26T08:40:37.000Z"
   },
   "version" : "v3",
   "wildcard" : "true"
}