canonical-redirects3.canonical.com

Issued by R3

About this certificate

This digital certificate with serial number 04:06:30:d7:83:a7:1f:65:c6:2b:46:ca:81:d4:81:50:69:00 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canonical-redirects3.canonical.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:06:30:d7:83:a7:1f:65:c6:2b:46:ca:81:d4:81:50:69:00
Serial Number (int): 350555759886425356608005449775851284490496
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:fa:a5:44:a0:dc:99:36:ac:97:3f:c4:ed:d5:35:4c:bc:db:da:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 98:44:09:6e:69:f0:3f:9c:92:37:31:5f:43:6a:96:f4:bd:e6:2d:e2
Fingerprint (sha256): 01:3e:00:ca:9c:9f:3d:ab:83:38:0a:82:45:3e:f7:73:7b:6e:c1:cb:61:08:c3:b0:11:85:4c:60:fb:bc:18:d1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate canonical-redirects3.canonical.com

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canonical-redirects3.canonical.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canonical-redirects3.canonical.com
kanonikal.net
kanonikal.org
lacinonac.com
leanstack.it
nyima.biz
nyima.cc
nyima.info
nyima.tv
nyimabikini.co.uk
nyimabikini.com
nyimabikini.net
shnake.org
www.besquare.biz
www.besquare.cc
www.besquare.co.uk
www.besquare.info
www.besquare.org
www.besquare.org.uk
www.besquare.tv
www.bugster.info
www.bugster.net
www.bugster.org
www.bugsymalone.info
www.bugsymalone.net
www.bugsymalone.org
www.cannonical.com
www.cannonical.net
www.canonica.org
www.canonical-software.com
www.canonical-software.net
www.canonical-software.org
www.canonical-sucks.com
www.canonical-sucks.org
www.canonical.asia
www.canonical.at
www.canonical.be
www.canonical.bg
www.canonical.bz
www.canonical.ca
www.canonical.ch
www.canonical.co.il
www.canonical.co.in
www.canonical.com.au
www.canonical.com.br
www.canonical.com.es
www.canonical.com.hk
www.canonical.com.mx
www.canonical.com.my
www.canonical.com.pl
www.canonical.com.tw
www.canonical.cz
www.canonical.es

Other certificates including the domain name canonical.com

(limited to 100 certificates)
cloud.kpi.canonical.com
sentry.ols.canonical.com
website.ci.canonical.com
people.canonical.com
admin.isd.canonical.com
graphite.ubunet.canonical.com
devices-nagios.admin.canonical.com
www.canonical.com
canonical-redirects3.canonical.com
cdo.okr.canonical.com
lpstats.canonical.com
expenses.canonical.com
erinyes.canonical.com
design.canonical.com
status.melodydns.com
hydrogen.canonical.com
code-review.premium-git.canonical.com
contracts.staging.canonical.com
oil-jenkins.canonical.com
files.support.canonical.com
jenkins.canonical.com
archive.landscape.canonical.com
test-blog.launchpad.net
objectstorage.prodstack4-5.canonical.com
serial-vault-partners.canonical.com
www.canonical.com
design.canonical.com
pages.canonical.com
files.support.canonical.com
oem-ibs.canonical.com
bazaar.canonical.com
private-desktop.kpi.canonical.com
lists.ubuntu.com
bandwidth.admin.canonical.com
trust.ricardo.ch
bandwidth.admin.canonical.com
status.reservecloud.com
pages.canonical.com
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
oem-share.canonical.com
partner-images.canonical.com
bazaar.canonical.com
prodstack-nagios.admin.canonical.com
partner-images.canonical.com
blog.canonical.com
livepatch.staging.canonical.com
landscape.is.canonical.com
monitoring.sicktech.online
barometz.admin.canonical.com
rocks.canonical.com
portal.admin.canonical.com
test-blog.launchpad.net
irpstatus.streamlineit.ca
bazaar.canonical.com
objectstorage.prodstack4-5.canonical.com
hyperscale-images.canonical.com
canonical-redirects2.canonical.com
jenkins.ols.canonical.com
mon02.nocoperations.com
bandwidth.admin.canonical.com
status.uk.deptagency.com
staging.forms.canonical.com
blog.bazaar.canonical.com
design.canonical.com
newsletter.canonical.com
test-blog.launchpad.net
shop.canonical.com
private-fileshare.canonical.com
pages.canonical.com
hwe.canonical.com
pages.canonical.com
cesg.canonical.com
voices.canonical.com
people.canonical.com
autocert.canonical.com
cloud.kpi.canonical.com
storm.canonical.com
landscape.is.canonical.com
expenses.canonical.com
oem-dev.canonical.com
pages.canonical.com
logging.ols.staging.canonical.com
directory.canonical.com
people.canonical.com
canonical-redirects2.canonical.com
blog.bazaar.canonical.com
files.support.canonical.com
status.savantx.io
blog.canonical.com
expenses.canonical.com
allhands.canonical.com
landscape.is.canonical.com
status.reservecloud.com
status.reservecloud.com
forms.canonical.com
certification.staging.canonical.com
auto-deploy-logs.admin.canonical.com
www.staging.canonical.com
sentry.is.canonical.com

Certificate

The complete raw certificate details for canonical-redirects3.canonical.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIII8TCCB9mgAwIBAgISBAYw14OnH2XGK0bKgdSBUGkAMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MDExNTQ2MzZaFw0yMzEwMzAxNTQ2MzVaMC0xKzApBgNVBAMT
ImNhbm9uaWNhbC1yZWRpcmVjdHMzLmNhbm9uaWNhbC5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDlR0NAJJCiXQvCX+J/qLcngP3eE1qS9SvbCOHR
BQskg1Zuz3T6GY/Oo3EU6o4ecS60cPNTzvBcL2HY/d/ucqL3JKEnG2eMUP5rXU3E
i5UB9bNJ0sabFwh+jzTSQbMiv+++bhV7YslMpgkpCtsWI0YZs5Rw+IUAJJFBAZe4
MdUJPuXSWMiDm+9N1PZqtuxYjIa5Dq+SHCO1kT8VeCqJ+EKalk32NADoQqrfNH76
i37VT+l59inKunC7B0iIV8iuGo3/RuRH64Q6bSsW9+g/KB+yWlXB+ogjERrpoLys
1k4BkzKKRB3nyLyRLYQJbEpGXDn72eDQ6L/wqEspLDr6R+vZAgMBAAGjggYEMIIG
ADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKb6pUSg3Jk2rJc/xO3VNUy829qRMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIEDAYDVR0RBIIEAzCCA/+CImNhbm9uaWNh
bC1yZWRpcmVjdHMzLmNhbm9uaWNhbC5jb22CDWthbm9uaWthbC5uZXSCDWthbm9u
aWthbC5vcmeCDWxhY2lub25hYy5jb22CDGxlYW5zdGFjay5pdIIJbnlpbWEuYml6
gghueWltYS5jY4IKbnlpbWEuaW5mb4IIbnlpbWEudHaCEW55aW1hYmlraW5pLmNv
LnVrgg9ueWltYWJpa2luaS5jb22CD255aW1hYmlraW5pLm5ldIIKc2huYWtlLm9y
Z4IQd3d3LmJlc3F1YXJlLmJpeoIPd3d3LmJlc3F1YXJlLmNjghJ3d3cuYmVzcXVh
cmUuY28udWuCEXd3dy5iZXNxdWFyZS5pbmZvghB3d3cuYmVzcXVhcmUub3JnghN3
d3cuYmVzcXVhcmUub3JnLnVrgg93d3cuYmVzcXVhcmUudHaCEHd3dy5idWdzdGVy
LmluZm+CD3d3dy5idWdzdGVyLm5ldIIPd3d3LmJ1Z3N0ZXIub3JnghR3d3cuYnVn
c3ltYWxvbmUuaW5mb4ITd3d3LmJ1Z3N5bWFsb25lLm5ldIITd3d3LmJ1Z3N5bWFs
b25lLm9yZ4ISd3d3LmNhbm5vbmljYWwuY29tghJ3d3cuY2Fubm9uaWNhbC5uZXSC
EHd3dy5jYW5vbmljYS5vcmeCGnd3dy5jYW5vbmljYWwtc29mdHdhcmUuY29tghp3
d3cuY2Fub25pY2FsLXNvZnR3YXJlLm5ldIIad3d3LmNhbm9uaWNhbC1zb2Z0d2Fy
ZS5vcmeCF3d3dy5jYW5vbmljYWwtc3Vja3MuY29tghd3d3cuY2Fub25pY2FsLXN1
Y2tzLm9yZ4ISd3d3LmNhbm9uaWNhbC5hc2lhghB3d3cuY2Fub25pY2FsLmF0ghB3
d3cuY2Fub25pY2FsLmJlghB3d3cuY2Fub25pY2FsLmJnghB3d3cuY2Fub25pY2Fs
LmJ6ghB3d3cuY2Fub25pY2FsLmNhghB3d3cuY2Fub25pY2FsLmNoghN3d3cuY2Fu
b25pY2FsLmNvLmlsghN3d3cuY2Fub25pY2FsLmNvLmlughR3d3cuY2Fub25pY2Fs
LmNvbS5hdYIUd3d3LmNhbm9uaWNhbC5jb20uYnKCFHd3dy5jYW5vbmljYWwuY29t
LmVzghR3d3cuY2Fub25pY2FsLmNvbS5oa4IUd3d3LmNhbm9uaWNhbC5jb20ubXiC
FHd3dy5jYW5vbmljYWwuY29tLm15ghR3d3cuY2Fub25pY2FsLmNvbS5wbIIUd3d3
LmNhbm9uaWNhbC5jb20udHeCEHd3dy5jYW5vbmljYWwuY3qCEHd3dy5jYW5vbmlj
YWwuZXMwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYmx/ostAAAE
AwBHMEUCIQCW80kOunvbloVV+cpA7ZHnYwueFNvlQWHKFRtgu5oUfwIgXx58CHQ/
5ob0C2XEYhaD9TtTULpSJaOCfr3O7D/EJQwAdQCt9776fP8QyIudPZwePhhqtGcp
Xc+xDCTKhYY069yCigAAAYmx/otXAAAEAwBGMEQCIDyHBaVhqMk+Mf+bwASHfu+t
O9i1wE9XAglwjZX+ev9hAiAmCPWO2kkfqFbh7zfTEJ3WKi5ZJScmBwoik+5FjtSr
dTANBgkqhkiG9w0BAQsFAAOCAQEAr8l/Lw6arEHGMWQuswZdhuUR7DEBPQ9g0l7R
czk1GQECpHylrsCpPquVCuqtuAM4UnqTyH+mPY9+I8LqhpmMxHZsajPZxercnbAg
3DFUMa/GrgBhLrHUzYtzmLw+IWcaMaSxhWA/F9ulM+PsL8zd+hUdvc2kwl808Hvi
v5VxGfVEyso88NQBeL6CRXlXyl1JSI4neefHjLvDVAJbCwuSVDVxAKsy4PCCCHBo
fZRFJ3/S7g9HtTPZ/zeJkojeA34SCHqf71QxVkpObHunSmAF6G4XfrBZt5UyaJx1
mtfO8+znNV1Xr6K9Mdfu4w8SxcwXUJ4MB9nGjTvX3BbnUGtiOQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UdDQCSQol0Lwl/if6i3
J4D93hNakvUr2wjh0QULJINWbs90+hmPzqNxFOqOHnEutHDzU87wXC9h2P3f7nKi
9yShJxtnjFD+a11NxIuVAfWzSdLGmxcIfo800kGzIr/vvm4Ve2LJTKYJKQrbFiNG
GbOUcPiFACSRQQGXuDHVCT7l0ljIg5vvTdT2arbsWIyGuQ6vkhwjtZE/FXgqifhC
mpZN9jQA6EKq3zR++ot+1U/pefYpyrpwuwdIiFfIrhqN/0bkR+uEOm0rFvfoPygf
slpVwfqIIxEa6aC8rNZOAZMyikQd58i8kS2ECWxKRlw5+9ng0Oi/8KhLKSw6+kfr
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350555759886425356608005449775851284490496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 15:46:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 15:46:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canonical-redirects3.canonical.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28943712783081689411103790342685909025778999647092181470698959314711513248985575595298076997999129346971940480720323064363688020861423277858250293715527518887913458867678821365326659211248159406952533784293412174345553902304589632533172700369935838326387828559294153772362486755953656912585974052633736208029042364025348345315197270403329339636606895736587923593117338420741213804204539219986692047737612976084384519703189766157528006745702836553578379809720357987452329089714178345235579860650390936510918522823993791625910438323214861698024049167112284359328933138981424715834170070716416225800274090789147333094361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6faa544a0dc9936ac973fc4edd5354cbcdbda91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1027 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canonical-redirects3.canonical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanonikal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanonikal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacinonac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leanstack.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyima.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyima.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyima.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyima.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyimabikini.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyimabikini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyimabikini.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shnake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugster.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugsymalone.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugsymalone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugsymalone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannonical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannonical.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-software.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-software.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-software.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-sucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-sucks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189b1fe8b2d000004030047304502210096f3490eba7bdb968555f9ca40ed91e7630b9e14dbe54161ca151b60bb9a147f02205f1e7c08743fe686f40b65c4621683f53b5350ba5225a3827ebdceec3fc4250c007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189b1fe8b57000004030046304402203c8705a561a8c93e31ff9bc004877eefad3bd8b5c04f570209708d95fe7aff6102202608f58eda491fa856e1ef37d3109dd62a2e59252726070a2293ee458ed4ab75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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