kibana.telemetry-staging.elastic.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:15:85:a7:f6:24:fd:31:64:cd:10:ca:22:76:dd:ad:12 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kibana.telemetry-staging.elastic.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:15:85:a7:f6:24:fd:31:64:cd:10:ca:22:76:dd:ad:12
Serial Number (int): 283483819415199387770575949866409008147730
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:aa:68:5a:5f:b5:cb:49:3f:40:7e:2c:fa:62:73:87:d7:03:32:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:5f:c5:8b:b0:95:d1:f4:28:7b:9b:0d:32:cd:57:13:65:01:2e:cd
Fingerprint (sha256): 06:61:52:97:dd:a7:e4:ad:c4:a1:c5:36:cf:99:57:41:24:bb:13:51:23:c6:34:4e:c7:aa:22:f7:5f:94:47:c4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kibana.telemetry-staging.elastic.co

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kibana.telemetry-staging.elastic.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.intotheindex.elastic.co
kibana.telemetry-dev.elastic.co
kibana.telemetry-staging.elastic.co
kibana.telemetry.elastic.co
sa-demo-apachelogs.dev.sa.elastic.co
sa-demo-apachelogs.prod.sa.elastic.co
sa-demo-apachelogs.staging.sa.elastic.co
sa-demo-kibana.dev.sa.elastic.co
sa-demo-kibana.prod.sa.elastic.co
sa-demo-kibana.staging.sa.elastic.co

Other certificates including the domain name elastic.co

(limited to 100 certificates)
license.elastic.co
email.staging-alerts.elastic.co
flower.ea-registry-production.elastic.co
govcloud-status.elastic.co
apm-ci.elastic.co
oss-dependencies-dev.elastic.co
search-ba-demo.elastic.co
bistatus.mplatform.ch
ems-logs.elastic.co
us-east-1-staging-cloud-monitor.elastic.co
test-cert.spf.elastic.co
*.elastic.co
broadcaster-service.elastic.co
canvas.elastic.co
link.elastic.co
apm-agent-versions-staging.elastic.co
elastic.co
r2.shared.global.fastly.net
beats-ci.elastic.co
s.ssl.fastly.net
stag-static-www.elastic.co
godaddy-status.elastic.co
secrets.elastic.co
aws-eu-central-1-monitor-staging-cloud.elastic.co
govcloud-status.elastic.co
download-stats-staging.elastic.co
infra-ci.elastic.co
clients-ci.elastic.co
r2.shared.global.fastly.net
artifacts-staging.elastic.co
*.elastic.co
govcloud-status.elastic.co
au.credential.getsmarter.com
abemcertified.abem.org
ibm-dal-p00-metrics-staging-cloud.elastic.co
jobs.elastic.co
jenkins.elastic.co
eu-west-1b.secrets-test.elastic.co
r2.shared.global.fastly.net
aws-eu-central-1-metrics-staging-cloud.elastic.co
demo-staging.elastic.co
green.demo.elastic.co
cloud-test-stats.elastic.co
cloud-status.dimensiondata.com
tiles.maps.elastic.co
swiftype-ci.elastic.co
tiles.maps.elastic.co
business-systems-ci.elastic.co
dns-vetting1g.map.fastly.net
cloudstatus.protel.net
business-systems-ci.elastic.co
abemcertified.abem.org
infra-stats.elastic.co
docker-auth.ea-registry-production.elastic.co
artifacts-no-kpi.elastic.co
flower.ea-registry-production.elastic.co
r2.shared.global.fastly.net
email.elastic.co
tiles.maps.elastic.co
j.ssl.fastly.net
artifacts-staging.elastic.co
swiftype-ci.elastic.co
internal-ci.elastic.co
flower.ea-registry-production.elastic.co
cds3.cvent.com
build-stats-test.elastic.co
jvm-catalog.elastic.co
customer-test.ssl.fastly.net
registry.ea-registry-staging.elastic.dev
email.staging-ess.cloud.elastic.co
a3.shared.global.fastly.net
kibana-ci.elastic.co
r2.shared.global.fastly.net
support.elastic.co
license.elastic.co
beats-ci.elastic.co
support-hub.elastic.dev
sa-demo-kibana.prod.sa.elastic.co
cloudstatus.protel.net
r2.shared.global.fastly.net
groove.elastic.co
kibana.telemetry-staging.elastic.co
artifacts-staging.elastic.co
dns-vetting1g.map.fastly.net
s.ssl.fastly.net
aonhrlearningcenter.credentials.aon.com
govcloud-status.elastic.co
auth.elastic.co
flower.ea-registry-production.elastic.co
maps.elastic.co
aws-eu-central-1-logging-staging-cloud.elastic.co
artifacts-no-kpi.elastic.co
telemetry.elastic.co
aonhrlearningcenter.credentials.aon.com
r2.shared.global.fastly.net
artifacts-no-kpi.elastic.co
staging-deepthought.elastic.co
clachecker.elastic.co
oss-dependencies-dev.elastic.co
flower.ea-registry-production.elastic.co

Certificate

The complete raw certificate details for kibana.telemetry-staging.elastic.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGxDCCBaygAwIBAgISA0EVhaf2JP0xZM0QyiJ23a0SMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMjMwMTM3NDNaFw0y
MDA2MjEwMTM3NDNaMC4xLDAqBgNVBAMTI2tpYmFuYS50ZWxlbWV0cnktc3RhZ2lu
Zy5lbGFzdGljLmNvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpbQ
tuO0uXuACMVkBvLwdcpeYzrOcDsO4bd0lxMKEKIKbD9nZPOJI/gKxYcYqD7F/v9A
tSjqEiWHNFMIBKwwoagl6DLeM892e+lCb4WUb0aTztEqzGdjo3h96+Mpihwqnf9F
oMkDqRmIEo79tWHmKAkvxLB8Q3DQKbgXzulidJP4WHH64FaKd6kEtfxbmed+hsti
5Jr+9qY+t6KTzJk9A3LS5kDFsaWMTRH8HQR6bmJzyvo8j9o7vghqIHshOgx840uk
l8ETHWV6dht99RK6V5OhsrUts19+mroVh5HyDMkb9urGcEXoeiVrlP24Klf2FP89
18PAjfTzRjHr8YLWtQIDAQABo4IDvjCCA7owDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBQHqmhaX7XLST9Afiz6YnOH1wMyjDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIBcQYDVR0RBIIBaDCCAWSCHWFkbWlu
LmludG90aGVpbmRleC5lbGFzdGljLmNvgh9raWJhbmEudGVsZW1ldHJ5LWRldi5l
bGFzdGljLmNvgiNraWJhbmEudGVsZW1ldHJ5LXN0YWdpbmcuZWxhc3RpYy5jb4Ib
a2liYW5hLnRlbGVtZXRyeS5lbGFzdGljLmNvgiRzYS1kZW1vLWFwYWNoZWxvZ3Mu
ZGV2LnNhLmVsYXN0aWMuY2+CJXNhLWRlbW8tYXBhY2hlbG9ncy5wcm9kLnNhLmVs
YXN0aWMuY2+CKHNhLWRlbW8tYXBhY2hlbG9ncy5zdGFnaW5nLnNhLmVsYXN0aWMu
Y2+CIHNhLWRlbW8ta2liYW5hLmRldi5zYS5lbGFzdGljLmNvgiFzYS1kZW1vLWtp
YmFuYS5wcm9kLnNhLmVsYXN0aWMuY2+CJHNhLWRlbW8ta2liYW5hLnN0YWdpbmcu
c2EuZWxhc3RpYy5jbzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB
ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUG
CisGAQQB1nkCBAIEgfYEgfMA8QB3APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSm
sKiqjrJzAAABcQVAxqYAAAQDAEgwRgIhAI0ygIENk1mHgp75xwVV0eCPlTcXhPPP
xNsVmmFtNNVHAiEAiy+GgXM5eO5NirvTha76+647SGndppPJtWdeoatncykAdgAH
t1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXEFQMbcAAAEAwBHMEUC
IQC2XO0KSiaeS1S9Njob8+fMyNdnRGnTV2NH+CGK0KRbOgIgDRm1Wo1nPmqJQ9pH
tJNbbBaEqnepauJw5wVLChZaDncwDQYJKoZIhvcNAQELBQADggEBAE3KSXkZAaa0
5ZGKrn8VuDdkAb+LG0gVJL7a0DiRsmDW0JcW2Us9qC3HW2ecDcQ1gGQCv90Iy2gk
PCAEB/Kb8iApRNQS9UKZFlS/9top4aSffCklnEg8bJC9iV0h1IwAQhGxRB92MQ4/
UHSrm/EOkYR9yysAs4WCPYQ5vatXdD60rGBeOIDO+GZrc76ARn8ufoaW5QKj2Wz3
dMi99VNNQp/4I/zMHOoq2Lcds5sp8xe6gF4leOquGTSuyW4CDotbsIe8y0fNWRdk
tO1f3ge/hA+sN0/Jdn0eJzoIERJmJluwfJoUIIbAvhPKl31Sph818Be+sTts/dl2
/6+YUdqflWU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpbQtuO0uXuACMVkBvLw
dcpeYzrOcDsO4bd0lxMKEKIKbD9nZPOJI/gKxYcYqD7F/v9AtSjqEiWHNFMIBKww
oagl6DLeM892e+lCb4WUb0aTztEqzGdjo3h96+Mpihwqnf9FoMkDqRmIEo79tWHm
KAkvxLB8Q3DQKbgXzulidJP4WHH64FaKd6kEtfxbmed+hsti5Jr+9qY+t6KTzJk9
A3LS5kDFsaWMTRH8HQR6bmJzyvo8j9o7vghqIHshOgx840ukl8ETHWV6dht99RK6
V5OhsrUts19+mroVh5HyDMkb9urGcEXoeiVrlP24Klf2FP8918PAjfTzRjHr8YLW
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283483819415199387770575949866409008147730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 01:37:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 01:37:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kibana.telemetry-staging.elastic.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24059647735181565512628870767618269012963438044100995457350947006434890758570326399329173056592247580752542167562277285782220761271552051933650007936576468916752172343746355955040566815468177192758952207068638436470299202880883238512794197384350906448913481922571102989932314177945680380965788661465516586959948102146182583623127524119210161987592779680010739062725460050653172175064900565747261766364680264166667635742798342683896544677636602917250046263237966893113654921880296094331730058559630876796605962490243571753801512373202428436969698244031318817749168814650650154112363291751928607157541897209666622117557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07aa685a5fb5cb493f407e2cfa627387d703328c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.intotheindex.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana.telemetry-dev.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana.telemetry-staging.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana.telemetry.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-demo-apachelogs.dev.sa.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-demo-apachelogs.prod.sa.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-demo-apachelogs.staging.sa.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-demo-kibana.dev.sa.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-demo-kibana.prod.sa.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-demo-kibana.staging.sa.elastic.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001710540c6a600000403004830460221008d3280810d935987829ef9c70555d1e08f95371784f3cfc4db159a616d34d5470221008b2f8681733978ee4d8abbd385aefafbae3b4869dda693c9b5675ea1ab67732900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001710540c6dc0000040300473045022100b65ced0a4a269e4b54bd363a1bf3e7ccc8d7674469d3576347f8218ad0a45b3a02200d19b55a8d673e6a8943da47b4935b6c1684aa77a96ae270e7054b0a165a0e77
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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