new-status.ucsd.edu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d2:c7:c0:4a:c3:7d:c2:5d:65:8e:f3:73:ec:43:6a:81:ae was issued on by Let's Encrypt.
With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=new-status.ucsd.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d2:c7:c0:4a:c3:7d:c2:5d:65:8e:f3:73:ec:43:6a:81:aeSerial Number (int): 333061669657222577172188236865601442316718
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 73:ae:5f:00:03:b1:84:bf:1b:28:ac:1f:78:34:75:fb:d5:c1:74:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a7:a9:2f:f3:ae:c7:92:1a:1f:03:7f:68:da:a5:b8:2e:9b:bf:f6:22
Fingerprint (sha256): 05:ae:5c:d8:e8:13:a0:67:d5:b5:2e:00:13:0b:3b:ca:be:93:42:1f:e1:8e:13:3b:7e:4f:ae:d8:a3:a8:d5:82
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate new-status.ucsd.edu
40
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for new-status.ucsd.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
new-status.ucsd.edu
status-api.knewton.com
status.1life.openpracticesolutions.com
status.aclgrc.com
status.activeprospect.com
status.amplitude.com
status.ansarada.com
status.apache.org
status.apigee.com
status.bandwidth.com
status.blueconic.com
status.brightpearl.com
status.calltrackingmetrics.com
status.coins.ph
status.deputy.com
status.eximchain.com
status.exosite.com
status.glesys.com
status.globalrelay.com
status.gospotcheck.com
status.hostedgraphite.com
status.kraken.io
status.linode.com
status.mobileiron.com
status.nextiva.com
status.notonthehighstreet.com
status.plivo.com
status.precisionlender.com
status.rainforestqa.com
status.rjmetrics.com
status.rosette.com
status.smartthings.com
status.teamwork.com
status.tradegecko.com
status.ucsd.edu
status.unbounce.com
status.urbanairship.com
trust.jitterbit.com
trust.mobileiron.com
uptime.activeprospect.com
status-api.knewton.com
status.1life.openpracticesolutions.com
status.aclgrc.com
status.activeprospect.com
status.amplitude.com
status.ansarada.com
status.apache.org
status.apigee.com
status.bandwidth.com
status.blueconic.com
status.brightpearl.com
status.calltrackingmetrics.com
status.coins.ph
status.deputy.com
status.eximchain.com
status.exosite.com
status.glesys.com
status.globalrelay.com
status.gospotcheck.com
status.hostedgraphite.com
status.kraken.io
status.linode.com
status.mobileiron.com
status.nextiva.com
status.notonthehighstreet.com
status.plivo.com
status.precisionlender.com
status.rainforestqa.com
status.rjmetrics.com
status.rosette.com
status.smartthings.com
status.teamwork.com
status.tradegecko.com
status.ucsd.edu
status.unbounce.com
status.urbanairship.com
trust.jitterbit.com
trust.mobileiron.com
uptime.activeprospect.com
Other certificates including the domain name ucsd.edu
(limited to 100 certificates)
argo.ucsd.edu
cse125.ucsd.edu
physci.ucsd.edu
chiapet.givengine.org
hsrecharges.ucsd.edu
sdscnapr1.ucsd.edu
statuspage.io
sfunder11cert.net
core-vendor-shows.ucsd.edu
statuspage.io
number.ucsd.edu
us.prod.campusgroups.com
assets.ucsd.edu
mccammon.ucsd.edu
moodle.ucsd.edu
users.physics.ucsd.edu
statuspage.io
ushydro.ucsd.edu
csescheduler.ucsd.edu
unexwebdev.ucsd.edu
telerad.ucsd.edu
securessl-pst1.tessituranetworkhost.com
mesl-exp.ucsd.edu
cluster3.technolutions.net
tstbizapps.ucsd.edu
jazzcamp.ucsd.edu
aguado.eng.ucsd.edu
us.prod.campusgroups.com
reserve.ad.ucsd.edu
pelg.ucsd.edu
cass.ucsd.edu
fapp.ucsd.edu
autogrow.ucsd.edu
kam.ucsd.edu
clinicaltrials.ucsd.edu
bearhug.ucsd.edu
artpower.ucsd.edu
csh-mobile2.ucsd.edu
diego.ucsd.edu
myhealth.ucsd.edu
unexminer.ucsd.edu
grant.hivresearch.ucsd.edu
reinagel-nas.ucsd.edu
metabolomics-usi.ucsd.edu
autogrow.ucsd.edu
gph.ucsd.edu
pointcloud.ucsd.edu
velostrain.ucsd.edu
qbiohangout.ucsd.edu
shipsweb.ucsd.edu
studentevents.ucsd.edu
statuspage.io
hrweb5.ucsd.edu
abcdcontact.ucsd.edu
slscan.ucsd.edu
microcirculation.eng.ucsd.edu
statuspage.io
eu.status.grow.clio.com
iport-acv2.ucsd.edu
keck2.ucsd.edu
users.physics.ucsd.edu
statuspage.io
statuspage.io
jupyter.coleman.ucsd.edu
steinmetzlab.eng.ucsd.edu
igppdb.ucsd.edu
navigator.ucsd.edu
chrondev-ingest.ucsd.edu
statuspage.io
darkstar.ucsd.edu
ksdt.ucsd.edu
restprod2.ucsd.edu
expedition.ucsd.edu
hiseasnet.ucsd.edu
fraley.eng.ucsd.edu
password.ucsd.edu
sa-web.ucsd.edu
eu.status.grow.clio.com
epyqview.ucsd.edu
ucigcc.org
sio.ucsd.edu
statuspage.io
oec-vmweb03.ucsd.edu
eu.status.grow.clio.com
securedns.planmygift.org
middlewaretesting.ucsd.edu
shsfaxsrv-16314.ucsd.edu
d4sd2017.ucsd.edu
xcore-cub2.ad.ucsd.edu
cluster3.technolutions.net
wiki.barreiro.ucsd.edu
*.sysnet.ucsd.edu
zak.ucsd.edu
letusknow.ucsd.edu
tmarc.hivresearch.ucsd.edu
sinhagroup.ucsd.edu
finance.ucsd.edu
statuspage.io
statuspage.io
to.ucsd.edu
cse125.ucsd.edu
physci.ucsd.edu
chiapet.givengine.org
hsrecharges.ucsd.edu
sdscnapr1.ucsd.edu
statuspage.io
sfunder11cert.net
core-vendor-shows.ucsd.edu
statuspage.io
number.ucsd.edu
us.prod.campusgroups.com
assets.ucsd.edu
mccammon.ucsd.edu
moodle.ucsd.edu
users.physics.ucsd.edu
statuspage.io
ushydro.ucsd.edu
csescheduler.ucsd.edu
unexwebdev.ucsd.edu
telerad.ucsd.edu
securessl-pst1.tessituranetworkhost.com
mesl-exp.ucsd.edu
cluster3.technolutions.net
tstbizapps.ucsd.edu
jazzcamp.ucsd.edu
aguado.eng.ucsd.edu
us.prod.campusgroups.com
reserve.ad.ucsd.edu
pelg.ucsd.edu
cass.ucsd.edu
fapp.ucsd.edu
autogrow.ucsd.edu
kam.ucsd.edu
clinicaltrials.ucsd.edu
bearhug.ucsd.edu
artpower.ucsd.edu
csh-mobile2.ucsd.edu
diego.ucsd.edu
myhealth.ucsd.edu
unexminer.ucsd.edu
grant.hivresearch.ucsd.edu
reinagel-nas.ucsd.edu
metabolomics-usi.ucsd.edu
autogrow.ucsd.edu
gph.ucsd.edu
pointcloud.ucsd.edu
velostrain.ucsd.edu
qbiohangout.ucsd.edu
shipsweb.ucsd.edu
studentevents.ucsd.edu
statuspage.io
hrweb5.ucsd.edu
abcdcontact.ucsd.edu
slscan.ucsd.edu
microcirculation.eng.ucsd.edu
statuspage.io
eu.status.grow.clio.com
iport-acv2.ucsd.edu
keck2.ucsd.edu
users.physics.ucsd.edu
statuspage.io
statuspage.io
jupyter.coleman.ucsd.edu
steinmetzlab.eng.ucsd.edu
igppdb.ucsd.edu
navigator.ucsd.edu
chrondev-ingest.ucsd.edu
statuspage.io
darkstar.ucsd.edu
ksdt.ucsd.edu
restprod2.ucsd.edu
expedition.ucsd.edu
hiseasnet.ucsd.edu
fraley.eng.ucsd.edu
password.ucsd.edu
sa-web.ucsd.edu
eu.status.grow.clio.com
epyqview.ucsd.edu
ucigcc.org
sio.ucsd.edu
statuspage.io
oec-vmweb03.ucsd.edu
eu.status.grow.clio.com
securedns.planmygift.org
middlewaretesting.ucsd.edu
shsfaxsrv-16314.ucsd.edu
d4sd2017.ucsd.edu
xcore-cub2.ad.ucsd.edu
cluster3.technolutions.net
wiki.barreiro.ucsd.edu
*.sysnet.ucsd.edu
zak.ucsd.edu
letusknow.ucsd.edu
tmarc.hivresearch.ucsd.edu
sinhagroup.ucsd.edu
finance.ucsd.edu
statuspage.io
statuspage.io
to.ucsd.edu
Certificate
The complete raw certificate details for new-status.ucsd.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH6TCCBtGgAwIBAgISA9LHwErDfcJdZY7zc+xDaoGuMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA4MjgxODI1MDdaFw0y MDExMjYxODI1MDdaMB4xHDAaBgNVBAMTE25ldy1zdGF0dXMudWNzZC5lZHUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUhyqGXWYIfobFfKr7rpqg6Wj XMAOdZDBDtlLRELuorOZGK/viHxJAtfaD2zb9O7wwIQSTdGMdXNM9sAAJfV3JKHK ZTfc6+6dRcqsVv8LAQxv4We1MMfwntTo77F87hhNlZbvVDorcaoPAdcI8Hqu+pAT Ad1rJJvCWVZ1TZp7FNaNPgxdEdaClKB6wREcqofr5cVKjhc6opoaPOPxtpVJ19Jm zgvCn3Hy84nSPoWogMxIqAKi1/CW0Q221bzZ8pDWTw7v4UK0k+Ty3bF56TvixXNG XZ23YVFXIMC8M7ZH2lRwdZp/IKcaKJZWIKlpYhzpljMVCnjZwp5grDGkOgXDAgMB AAGjggTzMIIE7zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHOuXwADsYS/GyisH3g0 dfvVwXQuMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggOaBgNVHREEggORMIIDjYITbmV3LXN0YXR1cy51Y3NkLmVkdYIW c3RhdHVzLWFwaS5rbmV3dG9uLmNvbYImc3RhdHVzLjFsaWZlLm9wZW5wcmFjdGlj ZXNvbHV0aW9ucy5jb22CEXN0YXR1cy5hY2xncmMuY29tghlzdGF0dXMuYWN0aXZl cHJvc3BlY3QuY29tghRzdGF0dXMuYW1wbGl0dWRlLmNvbYITc3RhdHVzLmFuc2Fy YWRhLmNvbYIRc3RhdHVzLmFwYWNoZS5vcmeCEXN0YXR1cy5hcGlnZWUuY29tghRz dGF0dXMuYmFuZHdpZHRoLmNvbYIUc3RhdHVzLmJsdWVjb25pYy5jb22CFnN0YXR1 cy5icmlnaHRwZWFybC5jb22CHnN0YXR1cy5jYWxsdHJhY2tpbmdtZXRyaWNzLmNv bYIPc3RhdHVzLmNvaW5zLnBoghFzdGF0dXMuZGVwdXR5LmNvbYIUc3RhdHVzLmV4 aW1jaGFpbi5jb22CEnN0YXR1cy5leG9zaXRlLmNvbYIRc3RhdHVzLmdsZXN5cy5j b22CFnN0YXR1cy5nbG9iYWxyZWxheS5jb22CFnN0YXR1cy5nb3Nwb3RjaGVjay5j b22CGXN0YXR1cy5ob3N0ZWRncmFwaGl0ZS5jb22CEHN0YXR1cy5rcmFrZW4uaW+C EXN0YXR1cy5saW5vZGUuY29tghVzdGF0dXMubW9iaWxlaXJvbi5jb22CEnN0YXR1 cy5uZXh0aXZhLmNvbYIdc3RhdHVzLm5vdG9udGhlaGlnaHN0cmVldC5jb22CEHN0 YXR1cy5wbGl2by5jb22CGnN0YXR1cy5wcmVjaXNpb25sZW5kZXIuY29tghdzdGF0 dXMucmFpbmZvcmVzdHFhLmNvbYIUc3RhdHVzLnJqbWV0cmljcy5jb22CEnN0YXR1 cy5yb3NldHRlLmNvbYIWc3RhdHVzLnNtYXJ0dGhpbmdzLmNvbYITc3RhdHVzLnRl YW13b3JrLmNvbYIVc3RhdHVzLnRyYWRlZ2Vja28uY29tgg9zdGF0dXMudWNzZC5l ZHWCE3N0YXR1cy51bmJvdW5jZS5jb22CF3N0YXR1cy51cmJhbmFpcnNoaXAuY29t ghN0cnVzdC5qaXR0ZXJiaXQuY29tghR0cnVzdC5tb2JpbGVpcm9uLmNvbYIZdXB0 aW1lLmFjdGl2ZXByb3NwZWN0LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpW8 xLqus55UExWEPLAIk2KVTnRFAF35XVIbcdkLRZa1bkI7acSZl/AK++0YtsDRyPjT zbTc42YsYBLsk2yPafuXpOZowK3q82WxZxePB2pBqf0ZeMa4fxVFC7u/qd1qRLZ5 scFVkvok7s8lew858QZIx6CXirVtxocEaZbom80LNnBah7Fzpnv09wGZLFi2UJeY P5iFfb3YfSmpcT7ZFkxpEIF4M9W1vlTZm0dPe3lnRHEIlERL1/jjG15K3G9Qjdjn ZncHzurXrhUtmRwKMV6x8PSz7zacRkoavkqM/04bYaHmZ/L9Prj6dSS85VDwD5b1 syoJm6VwgPn4XG9KEw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1Icqhl1mCH6GxXyq+66 aoOlo1zADnWQwQ7ZS0RC7qKzmRiv74h8SQLX2g9s2/Tu8MCEEk3RjHVzTPbAACX1 dyShymU33OvunUXKrFb/CwEMb+FntTDH8J7U6O+xfO4YTZWW71Q6K3GqDwHXCPB6 rvqQEwHdaySbwllWdU2aexTWjT4MXRHWgpSgesERHKqH6+XFSo4XOqKaGjzj8baV SdfSZs4Lwp9x8vOJ0j6FqIDMSKgCotfwltENttW82fKQ1k8O7+FCtJPk8t2xeek7 4sVzRl2dt2FRVyDAvDO2R9pUcHWafyCnGiiWViCpaWIc6ZYzFQp42cKeYKwxpDoF wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333061669657222577172188236865601442316718 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-28 18:25:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-26 18:25:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'new-status.ucsd.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24656960390158040541844529853336233401582767691816543593187865407580724791181569403841188375864191049484428597472661072557022443461921692400545408206119925912022295915863050460959985214354392970117814294743477432509737895122975071627124939895435861054160181271365685905945322437089292826091737928953197682398616486201173711775777594804081184010050683230690880265951083634974089072208893634120823091495550512522673254809152819013393725801921052247250430658829878753386265903264938691524339188212874309656318756235288547161925588757350193898433822413665304603020166591730461121355955498934483580908561903076291477374403 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 73ae5f0003b184bf1b28ac1f783475fbd5c1742e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (913 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-status.ucsd.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-api.knewton.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.1life.openpracticesolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.aclgrc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.activeprospect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.amplitude.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ansarada.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.apache.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.apigee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bandwidth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.blueconic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.brightpearl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.calltrackingmetrics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coins.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.deputy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.eximchain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.exosite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.glesys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.globalrelay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gospotcheck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hostedgraphite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.kraken.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.linode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mobileiron.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nextiva.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.notonthehighstreet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.plivo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.precisionlender.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rainforestqa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rjmetrics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rosette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.smartthings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.teamwork.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tradegecko.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ucsd.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.unbounce.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.urbanairship.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.jitterbit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.mobileiron.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptime.activeprospect.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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