artifacts-no-kpi.elastic.co

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number f1:d1:da:1d:68:d4:cd:f7:09:00:00:00:00:e3:5e:2c was issued on by Google Trust Services LLC.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=artifacts-no-kpi.elastic.co

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f1:d1:da:1d:68:d4:cd:f7:09:00:00:00:00:e3:5e:2c
Serial Number (int): 321433560922952519259300067336224202284
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e1:43:f4:3a:5c:99:fb:38:0d:d8:b0:54:18:27:c8:52:81:07:45:a4
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 68:b2:0c:db:0b:8e:57:3e:ef:ba:91:96:c1:ee:0a:90:74:87:e5:34
Fingerprint (sha256): 04:16:87:56:17:26:bb:da:48:28:a0:8b:4c:df:83:11:66:41:4c:1b:42:5a:12:6e:50:40:0b:64:ec:a7:70:ac

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d4
CRL Distribution Point: http://crls.pki.goog/gts1d4/kJdFfOPXKN8.crl

Check the revocation status for certificate artifacts-no-kpi.elastic.co

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for artifacts-no-kpi.elastic.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artifacts-no-kpi.elastic.co
benchmarks-old.elastic.co
blog.elastic.co
build.elastic.co
canvas.elastic.co
charge.elastic.co
docs-staging.elastic.co
docs.elastic.co
elastic.co
elastic.wtf
elasticacademy.com
elasticbeats.wtf
elasticcloud.wtf
elasticloud.wtf
elasticon.co
elasticon.elastic.co
elasticsearch-benchmark-analytics.elastic.co
elasticsearch-benchmarks.elastic.co
elasticsearch.jp
elasticsearch.org
elasticsearch.wtf
ember.elastic.co
info.prelert.com
infra-cdn-director.elastic.co
infra.elstc.co
insight.io
kibana.wtf
logstash.net
logstash.wtf
pages.endgame.com
pages.endgames.com
prelert-info.elastic.co
shop.elastic.co
snapshots-no-kpi.elastic.co
stats.elastic.co
support.elasticsearch.com
training.elastic.co
training.elasticsearch.com
www.elastic.wtf
www.elasticbeats.wtf
www.elasticcloud.wtf
www.elasticloud.wtf
www.elasticon.co
www.elasticsearch.jp
www.elasticsearch.org
www.elasticsearch.wtf
www.endgame.com
www.endgames.com
www.kibana.wtf
www.logstash.net
www.logstash.wtf

Other certificates including the domain name elastic.co

(limited to 100 certificates)
license.elastic.co
email.staging-alerts.elastic.co
flower.ea-registry-production.elastic.co
govcloud-status.elastic.co
apm-ci.elastic.co
oss-dependencies-dev.elastic.co
search-ba-demo.elastic.co
bistatus.mplatform.ch
ems-logs.elastic.co
us-east-1-staging-cloud-monitor.elastic.co
test-cert.spf.elastic.co
*.elastic.co
broadcaster-service.elastic.co
canvas.elastic.co
link.elastic.co
apm-agent-versions-staging.elastic.co
elastic.co
r2.shared.global.fastly.net
beats-ci.elastic.co
s.ssl.fastly.net
stag-static-www.elastic.co
godaddy-status.elastic.co
secrets.elastic.co
aws-eu-central-1-monitor-staging-cloud.elastic.co
govcloud-status.elastic.co
download-stats-staging.elastic.co
infra-ci.elastic.co
clients-ci.elastic.co
r2.shared.global.fastly.net
artifacts-staging.elastic.co
*.elastic.co
govcloud-status.elastic.co
au.credential.getsmarter.com
abemcertified.abem.org
ibm-dal-p00-metrics-staging-cloud.elastic.co
jobs.elastic.co
jenkins.elastic.co
eu-west-1b.secrets-test.elastic.co
r2.shared.global.fastly.net
aws-eu-central-1-metrics-staging-cloud.elastic.co
demo-staging.elastic.co
green.demo.elastic.co
cloud-test-stats.elastic.co
cloud-status.dimensiondata.com
tiles.maps.elastic.co
swiftype-ci.elastic.co
tiles.maps.elastic.co
business-systems-ci.elastic.co
dns-vetting1g.map.fastly.net
cloudstatus.protel.net
business-systems-ci.elastic.co
abemcertified.abem.org
infra-stats.elastic.co
docker-auth.ea-registry-production.elastic.co
artifacts-no-kpi.elastic.co
flower.ea-registry-production.elastic.co
r2.shared.global.fastly.net
email.elastic.co
tiles.maps.elastic.co
j.ssl.fastly.net
artifacts-staging.elastic.co
swiftype-ci.elastic.co
internal-ci.elastic.co
flower.ea-registry-production.elastic.co
cds3.cvent.com
build-stats-test.elastic.co
jvm-catalog.elastic.co
customer-test.ssl.fastly.net
registry.ea-registry-staging.elastic.dev
email.staging-ess.cloud.elastic.co
a3.shared.global.fastly.net
kibana-ci.elastic.co
r2.shared.global.fastly.net
support.elastic.co
license.elastic.co
beats-ci.elastic.co
support-hub.elastic.dev
sa-demo-kibana.prod.sa.elastic.co
cloudstatus.protel.net
r2.shared.global.fastly.net
groove.elastic.co
kibana.telemetry-staging.elastic.co
artifacts-staging.elastic.co
dns-vetting1g.map.fastly.net
s.ssl.fastly.net
aonhrlearningcenter.credentials.aon.com
govcloud-status.elastic.co
auth.elastic.co
flower.ea-registry-production.elastic.co
maps.elastic.co
aws-eu-central-1-logging-staging-cloud.elastic.co
artifacts-no-kpi.elastic.co
telemetry.elastic.co
aonhrlearningcenter.credentials.aon.com
r2.shared.global.fastly.net
artifacts-no-kpi.elastic.co
staging-deepthought.elastic.co
clachecker.elastic.co
oss-dependencies-dev.elastic.co
flower.ea-registry-production.elastic.co

Certificate

The complete raw certificate details for artifacts-no-kpi.elastic.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdE04w9V8u0rXSClDsxm
Adc5XcGjyJTo2vA1UbhdBRHTyLJdHZ++65r26aOC/TAeUPlHXe9qZdYKp35QUGhF
sLbv4lVkYTDj9DjHCJAesrXNM9DVWouBcXybPsna/sX7YRI8Tzw+P00SWwt1qoKh
vdVFo3iIycVt0fuCWv+/sJUragwcc2W8GYfA5KgJUW4uSI3e8Stn65b85opsB5L8
QSzL8N3p4oeS4JHr9ihiIZaDXCObkHTPG2edpmmbq5qhFidYTR1bffn/TikIZ5PE
4zzv4C6jF2WrsTEJEvmQre1b9OfJ6NELf9Wnuc7DzHsIa/y9v26x07OAfTOgZoC0
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321433560922952519259300067336224202284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-12 20:40:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-12 20:40:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'artifacts-no-kpi.elastic.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22447343593313887759930100097053500428321053611213105913829394686681670632389940200745989998980914039237110328937173761210667527921239954701666980884487725865528316390212264323790038923482734909162439180933239259662584524901363374531867346362904608792323279729063818012397560544021230296053622032168023071119691599459092021426887731546358365112332330465714583677758769288797323132436344392871225429656250534657001349741778372736427373291880506698615275115602170878111956162293749625744593348075363589554001989353383884790978967422245979202409939374525428203252012126866748506116825216004454562547517250832329728898109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e143f43a5c99fb380dd8b0541827c852810745a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1042 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifacts-no-kpi.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchmarks-old.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvas.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charge.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs-staging.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elastic.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticbeats.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticcloud.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticloud.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticon.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticsearch-benchmark-analytics.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticsearch-benchmarks.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticsearch.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticsearch.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ember.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.prelert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infra-cdn-director.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infra.elstc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logstash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logstash.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.endgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.endgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prelert-info.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshots-no-kpi.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.elasticsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.elasticsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elastic.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elasticbeats.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elasticcloud.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elasticloud.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elasticon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elasticsearch.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elasticsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elasticsearch.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.endgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.endgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kibana.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logstash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logstash.wtf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/kJdFfOPXKN8.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017db0ade8730000040300463044022016821b6d0e4f42da745ae1fb0ba558a8c470895af94a288219590f72d177374e0220227d65e196355c60ea389578020a1d499b21c9a95556ea487721ca2fcb76f89200760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017db0adea620000040300473045022100f2910e63abf0eba5c4dd17e10c7e8ca2b51c089c3f0889410152474b892387dd0220286eec22bcc1dd693f1da2f53acb3e20ad1ffeec294b6d35ae80fb19cba61c78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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