canonical-redirects3.canonical.com
Issued by R3
About this certificate
This digital certificate with serial number 04:06:30:d7:83:a7:1f:65:c6:2b:46:ca:81:d4:81:50:69:00 was issued on by Let's Encrypt.
With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=canonical-redirects3.canonical.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:06:30:d7:83:a7:1f:65:c6:2b:46:ca:81:d4:81:50:69:00Serial Number (int): 350555759886425356608005449775851284490496
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a6:fa:a5:44:a0:dc:99:36:ac:97:3f:c4:ed:d5:35:4c:bc:db:da:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 98:44:09:6e:69:f0:3f:9c:92:37:31:5f:43:6a:96:f4:bd:e6:2d:e2
Fingerprint (sha256): 01:3e:00:ca:9c:9f:3d:ab:83:38:0a:82:45:3e:f7:73:7b:6e:c1:cb:61:08:c3:b0:11:85:4c:60:fb:bc:18:d1
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate canonical-redirects3.canonical.com
53
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canonical-redirects3.canonical.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canonical-redirects3.canonical.com
kanonikal.net
kanonikal.org
lacinonac.com
leanstack.it
nyima.biz
nyima.cc
nyima.info
nyima.tv
nyimabikini.co.uk
nyimabikini.com
nyimabikini.net
shnake.org
www.besquare.biz
www.besquare.cc
www.besquare.co.uk
www.besquare.info
www.besquare.org
www.besquare.org.uk
www.besquare.tv
www.bugster.info
www.bugster.net
www.bugster.org
www.bugsymalone.info
www.bugsymalone.net
www.bugsymalone.org
www.cannonical.com
www.cannonical.net
www.canonica.org
www.canonical-software.com
www.canonical-software.net
www.canonical-software.org
www.canonical-sucks.com
www.canonical-sucks.org
www.canonical.asia
www.canonical.at
www.canonical.be
www.canonical.bg
www.canonical.bz
www.canonical.ca
www.canonical.ch
www.canonical.co.il
www.canonical.co.in
www.canonical.com.au
www.canonical.com.br
www.canonical.com.es
www.canonical.com.hk
www.canonical.com.mx
www.canonical.com.my
www.canonical.com.pl
www.canonical.com.tw
www.canonical.cz
www.canonical.es
kanonikal.net
kanonikal.org
lacinonac.com
leanstack.it
nyima.biz
nyima.cc
nyima.info
nyima.tv
nyimabikini.co.uk
nyimabikini.com
nyimabikini.net
shnake.org
www.besquare.biz
www.besquare.cc
www.besquare.co.uk
www.besquare.info
www.besquare.org
www.besquare.org.uk
www.besquare.tv
www.bugster.info
www.bugster.net
www.bugster.org
www.bugsymalone.info
www.bugsymalone.net
www.bugsymalone.org
www.cannonical.com
www.cannonical.net
www.canonica.org
www.canonical-software.com
www.canonical-software.net
www.canonical-software.org
www.canonical-sucks.com
www.canonical-sucks.org
www.canonical.asia
www.canonical.at
www.canonical.be
www.canonical.bg
www.canonical.bz
www.canonical.ca
www.canonical.ch
www.canonical.co.il
www.canonical.co.in
www.canonical.com.au
www.canonical.com.br
www.canonical.com.es
www.canonical.com.hk
www.canonical.com.mx
www.canonical.com.my
www.canonical.com.pl
www.canonical.com.tw
www.canonical.cz
www.canonical.es
Other certificates including the domain name canonical.com
(limited to 100 certificates)
cloud.kpi.canonical.com
sentry.ols.canonical.com
website.ci.canonical.com
people.canonical.com
admin.isd.canonical.com
graphite.ubunet.canonical.com
devices-nagios.admin.canonical.com
www.canonical.com
canonical-redirects3.canonical.com
cdo.okr.canonical.com
lpstats.canonical.com
expenses.canonical.com
erinyes.canonical.com
design.canonical.com
status.melodydns.com
hydrogen.canonical.com
code-review.premium-git.canonical.com
contracts.staging.canonical.com
oil-jenkins.canonical.com
files.support.canonical.com
jenkins.canonical.com
archive.landscape.canonical.com
test-blog.launchpad.net
objectstorage.prodstack4-5.canonical.com
serial-vault-partners.canonical.com
www.canonical.com
design.canonical.com
pages.canonical.com
files.support.canonical.com
oem-ibs.canonical.com
bazaar.canonical.com
private-desktop.kpi.canonical.com
lists.ubuntu.com
bandwidth.admin.canonical.com
trust.ricardo.ch
bandwidth.admin.canonical.com
status.reservecloud.com
pages.canonical.com
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
oem-share.canonical.com
partner-images.canonical.com
bazaar.canonical.com
prodstack-nagios.admin.canonical.com
partner-images.canonical.com
blog.canonical.com
livepatch.staging.canonical.com
landscape.is.canonical.com
monitoring.sicktech.online
barometz.admin.canonical.com
rocks.canonical.com
portal.admin.canonical.com
test-blog.launchpad.net
irpstatus.streamlineit.ca
bazaar.canonical.com
objectstorage.prodstack4-5.canonical.com
hyperscale-images.canonical.com
canonical-redirects2.canonical.com
jenkins.ols.canonical.com
mon02.nocoperations.com
bandwidth.admin.canonical.com
status.uk.deptagency.com
staging.forms.canonical.com
blog.bazaar.canonical.com
design.canonical.com
newsletter.canonical.com
test-blog.launchpad.net
shop.canonical.com
private-fileshare.canonical.com
pages.canonical.com
hwe.canonical.com
pages.canonical.com
cesg.canonical.com
voices.canonical.com
people.canonical.com
autocert.canonical.com
cloud.kpi.canonical.com
storm.canonical.com
landscape.is.canonical.com
expenses.canonical.com
oem-dev.canonical.com
pages.canonical.com
logging.ols.staging.canonical.com
directory.canonical.com
people.canonical.com
canonical-redirects2.canonical.com
blog.bazaar.canonical.com
files.support.canonical.com
status.savantx.io
blog.canonical.com
expenses.canonical.com
allhands.canonical.com
landscape.is.canonical.com
status.reservecloud.com
status.reservecloud.com
forms.canonical.com
certification.staging.canonical.com
auto-deploy-logs.admin.canonical.com
www.staging.canonical.com
sentry.is.canonical.com
sentry.ols.canonical.com
website.ci.canonical.com
people.canonical.com
admin.isd.canonical.com
graphite.ubunet.canonical.com
devices-nagios.admin.canonical.com
www.canonical.com
canonical-redirects3.canonical.com
cdo.okr.canonical.com
lpstats.canonical.com
expenses.canonical.com
erinyes.canonical.com
design.canonical.com
status.melodydns.com
hydrogen.canonical.com
code-review.premium-git.canonical.com
contracts.staging.canonical.com
oil-jenkins.canonical.com
files.support.canonical.com
jenkins.canonical.com
archive.landscape.canonical.com
test-blog.launchpad.net
objectstorage.prodstack4-5.canonical.com
serial-vault-partners.canonical.com
www.canonical.com
design.canonical.com
pages.canonical.com
files.support.canonical.com
oem-ibs.canonical.com
bazaar.canonical.com
private-desktop.kpi.canonical.com
lists.ubuntu.com
bandwidth.admin.canonical.com
trust.ricardo.ch
bandwidth.admin.canonical.com
status.reservecloud.com
pages.canonical.com
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
oem-share.canonical.com
partner-images.canonical.com
bazaar.canonical.com
prodstack-nagios.admin.canonical.com
partner-images.canonical.com
blog.canonical.com
livepatch.staging.canonical.com
landscape.is.canonical.com
monitoring.sicktech.online
barometz.admin.canonical.com
rocks.canonical.com
portal.admin.canonical.com
test-blog.launchpad.net
irpstatus.streamlineit.ca
bazaar.canonical.com
objectstorage.prodstack4-5.canonical.com
hyperscale-images.canonical.com
canonical-redirects2.canonical.com
jenkins.ols.canonical.com
mon02.nocoperations.com
bandwidth.admin.canonical.com
status.uk.deptagency.com
staging.forms.canonical.com
blog.bazaar.canonical.com
design.canonical.com
newsletter.canonical.com
test-blog.launchpad.net
shop.canonical.com
private-fileshare.canonical.com
pages.canonical.com
hwe.canonical.com
pages.canonical.com
cesg.canonical.com
voices.canonical.com
people.canonical.com
autocert.canonical.com
cloud.kpi.canonical.com
storm.canonical.com
landscape.is.canonical.com
expenses.canonical.com
oem-dev.canonical.com
pages.canonical.com
logging.ols.staging.canonical.com
directory.canonical.com
people.canonical.com
canonical-redirects2.canonical.com
blog.bazaar.canonical.com
files.support.canonical.com
status.savantx.io
blog.canonical.com
expenses.canonical.com
allhands.canonical.com
landscape.is.canonical.com
status.reservecloud.com
status.reservecloud.com
forms.canonical.com
certification.staging.canonical.com
auto-deploy-logs.admin.canonical.com
www.staging.canonical.com
sentry.is.canonical.com
Certificate
The complete raw certificate details for canonical-redirects3.canonical.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIII8TCCB9mgAwIBAgISBAYw14OnH2XGK0bKgdSBUGkAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MDExNTQ2MzZaFw0yMzEwMzAxNTQ2MzVaMC0xKzApBgNVBAMT ImNhbm9uaWNhbC1yZWRpcmVjdHMzLmNhbm9uaWNhbC5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDlR0NAJJCiXQvCX+J/qLcngP3eE1qS9SvbCOHR BQskg1Zuz3T6GY/Oo3EU6o4ecS60cPNTzvBcL2HY/d/ucqL3JKEnG2eMUP5rXU3E i5UB9bNJ0sabFwh+jzTSQbMiv+++bhV7YslMpgkpCtsWI0YZs5Rw+IUAJJFBAZe4 MdUJPuXSWMiDm+9N1PZqtuxYjIa5Dq+SHCO1kT8VeCqJ+EKalk32NADoQqrfNH76 i37VT+l59inKunC7B0iIV8iuGo3/RuRH64Q6bSsW9+g/KB+yWlXB+ogjERrpoLys 1k4BkzKKRB3nyLyRLYQJbEpGXDn72eDQ6L/wqEspLDr6R+vZAgMBAAGjggYEMIIG ADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKb6pUSg3Jk2rJc/xO3VNUy829qRMB8G A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo dHRwOi8vcjMuaS5sZW5jci5vcmcvMIIEDAYDVR0RBIIEAzCCA/+CImNhbm9uaWNh bC1yZWRpcmVjdHMzLmNhbm9uaWNhbC5jb22CDWthbm9uaWthbC5uZXSCDWthbm9u aWthbC5vcmeCDWxhY2lub25hYy5jb22CDGxlYW5zdGFjay5pdIIJbnlpbWEuYml6 gghueWltYS5jY4IKbnlpbWEuaW5mb4IIbnlpbWEudHaCEW55aW1hYmlraW5pLmNv LnVrgg9ueWltYWJpa2luaS5jb22CD255aW1hYmlraW5pLm5ldIIKc2huYWtlLm9y Z4IQd3d3LmJlc3F1YXJlLmJpeoIPd3d3LmJlc3F1YXJlLmNjghJ3d3cuYmVzcXVh cmUuY28udWuCEXd3dy5iZXNxdWFyZS5pbmZvghB3d3cuYmVzcXVhcmUub3JnghN3 d3cuYmVzcXVhcmUub3JnLnVrgg93d3cuYmVzcXVhcmUudHaCEHd3dy5idWdzdGVy LmluZm+CD3d3dy5idWdzdGVyLm5ldIIPd3d3LmJ1Z3N0ZXIub3JnghR3d3cuYnVn c3ltYWxvbmUuaW5mb4ITd3d3LmJ1Z3N5bWFsb25lLm5ldIITd3d3LmJ1Z3N5bWFs b25lLm9yZ4ISd3d3LmNhbm5vbmljYWwuY29tghJ3d3cuY2Fubm9uaWNhbC5uZXSC EHd3dy5jYW5vbmljYS5vcmeCGnd3dy5jYW5vbmljYWwtc29mdHdhcmUuY29tghp3 d3cuY2Fub25pY2FsLXNvZnR3YXJlLm5ldIIad3d3LmNhbm9uaWNhbC1zb2Z0d2Fy ZS5vcmeCF3d3dy5jYW5vbmljYWwtc3Vja3MuY29tghd3d3cuY2Fub25pY2FsLXN1 Y2tzLm9yZ4ISd3d3LmNhbm9uaWNhbC5hc2lhghB3d3cuY2Fub25pY2FsLmF0ghB3 d3cuY2Fub25pY2FsLmJlghB3d3cuY2Fub25pY2FsLmJnghB3d3cuY2Fub25pY2Fs LmJ6ghB3d3cuY2Fub25pY2FsLmNhghB3d3cuY2Fub25pY2FsLmNoghN3d3cuY2Fu b25pY2FsLmNvLmlsghN3d3cuY2Fub25pY2FsLmNvLmlughR3d3cuY2Fub25pY2Fs LmNvbS5hdYIUd3d3LmNhbm9uaWNhbC5jb20uYnKCFHd3dy5jYW5vbmljYWwuY29t LmVzghR3d3cuY2Fub25pY2FsLmNvbS5oa4IUd3d3LmNhbm9uaWNhbC5jb20ubXiC FHd3dy5jYW5vbmljYWwuY29tLm15ghR3d3cuY2Fub25pY2FsLmNvbS5wbIIUd3d3 LmNhbm9uaWNhbC5jb20udHeCEHd3dy5jYW5vbmljYWwuY3qCEHd3dy5jYW5vbmlj YWwuZXMwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYmx/ostAAAE AwBHMEUCIQCW80kOunvbloVV+cpA7ZHnYwueFNvlQWHKFRtgu5oUfwIgXx58CHQ/ 5ob0C2XEYhaD9TtTULpSJaOCfr3O7D/EJQwAdQCt9776fP8QyIudPZwePhhqtGcp Xc+xDCTKhYY069yCigAAAYmx/otXAAAEAwBGMEQCIDyHBaVhqMk+Mf+bwASHfu+t O9i1wE9XAglwjZX+ev9hAiAmCPWO2kkfqFbh7zfTEJ3WKi5ZJScmBwoik+5FjtSr dTANBgkqhkiG9w0BAQsFAAOCAQEAr8l/Lw6arEHGMWQuswZdhuUR7DEBPQ9g0l7R czk1GQECpHylrsCpPquVCuqtuAM4UnqTyH+mPY9+I8LqhpmMxHZsajPZxercnbAg 3DFUMa/GrgBhLrHUzYtzmLw+IWcaMaSxhWA/F9ulM+PsL8zd+hUdvc2kwl808Hvi v5VxGfVEyso88NQBeL6CRXlXyl1JSI4neefHjLvDVAJbCwuSVDVxAKsy4PCCCHBo fZRFJ3/S7g9HtTPZ/zeJkojeA34SCHqf71QxVkpObHunSmAF6G4XfrBZt5UyaJx1 mtfO8+znNV1Xr6K9Mdfu4w8SxcwXUJ4MB9nGjTvX3BbnUGtiOQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UdDQCSQol0Lwl/if6i3 J4D93hNakvUr2wjh0QULJINWbs90+hmPzqNxFOqOHnEutHDzU87wXC9h2P3f7nKi 9yShJxtnjFD+a11NxIuVAfWzSdLGmxcIfo800kGzIr/vvm4Ve2LJTKYJKQrbFiNG GbOUcPiFACSRQQGXuDHVCT7l0ljIg5vvTdT2arbsWIyGuQ6vkhwjtZE/FXgqifhC mpZN9jQA6EKq3zR++ot+1U/pefYpyrpwuwdIiFfIrhqN/0bkR+uEOm0rFvfoPygf slpVwfqIIxEa6aC8rNZOAZMyikQd58i8kS2ECWxKRlw5+9ng0Oi/8KhLKSw6+kfr 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 350555759886425356608005449775851284490496 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 15:46:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 15:46:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canonical-redirects3.canonical.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28943712783081689411103790342685909025778999647092181470698959314711513248985575595298076997999129346971940480720323064363688020861423277858250293715527518887913458867678821365326659211248159406952533784293412174345553902304589632533172700369935838326387828559294153772362486755953656912585974052633736208029042364025348345315197270403329339636606895736587923593117338420741213804204539219986692047737612976084384519703189766157528006745702836553578379809720357987452329089714178345235579860650390936510918522823993791625910438323214861698024049167112284359328933138981424715834170070716416225800274090789147333094361 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a6faa544a0dc9936ac973fc4edd5354cbcdbda91 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1027 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canonical-redirects3.canonical.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanonikal.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanonikal.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacinonac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leanstack.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyima.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyima.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyima.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyima.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyimabikini.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyimabikini.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyimabikini.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shnake.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besquare.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugster.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugster.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugster.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugsymalone.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugsymalone.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugsymalone.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannonical.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannonical.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonica.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-software.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-software.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-software.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-sucks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical-sucks.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.asia' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.bz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonical.es' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189b1fe8b2d000004030047304502210096f3490eba7bdb968555f9ca40ed91e7630b9e14dbe54161ca151b60bb9a147f02205f1e7c08743fe686f40b65c4621683f53b5350ba5225a3827ebdceec3fc4250c007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189b1fe8b57000004030046304402203c8705a561a8c93e31ff9bc004877eefad3bd8b5c04f570209708d95fe7aff6102202608f58eda491fa856e1ef37d3109dd62a2e59252726070a2293ee458ed4ab75 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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