redirect.sterda.com
Issued by R3
About this certificate
This digital certificate with serial number 03:c6:c8:c1:37:40:83:60:f0:82:19:3e:be:c7:f4:9e:00:9a was issued on by Let's Encrypt.
With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=redirect.sterda.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:c6:c8:c1:37:40:83:60:f0:82:19:3e:be:c7:f4:9e:00:9aSerial Number (int): 328979615278721026432620860427787661344922
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 55:c5:d5:90:5f:ac:af:b3:20:81:9f:73:e5:f4:9c:43:9b:d7:0d:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b6:55:b3:1e:79:4d:f4:e3:e8:35:c7:f0:46:6a:67:36:5e:84:dc:5c
Fingerprint (sha256): 0c:13:b8:9f:08:16:aa:5c:87:80:a5:6b:5b:b3:5d:08:20:17:a3:1e:69:db:b8:52:04:6d:e7:dc:5d:3a:4c:ac
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate redirect.sterda.com
37
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for redirect.sterda.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
redirect.sterda.com
status.aimes.uk
status.authzed.com
status.banq.com
status.booknooklearning.com
status.chouseisan.com
status.cookieinformation.com
status.craftgate.io
status.dgraph.io
status.digdir.no
status.esginnova.com
status.evaluagent.com
status.finsit.net
status.flowable.com
status.healthyroster.com
status.infoniqa.com
status.mimi.io
status.minds.com
status.mix.nuance.co.uk
status.nspop.dk
status.nucleus.church
status.onlifehealth.com
status.paytrace.com
status.pinely.net
status.safebase.io
status.savvas.com
status.sendcloud.com
status.shoptrader.com
status.sohosoho.tv
status.subrite.no
status.topopps.com
status.virtualdcs.co.uk
status.webitizevoice.com
status.xsarus.com
status.zyte.com
test.sterda.com
yourservicestatus.personcentredsoftware.com
status.aimes.uk
status.authzed.com
status.banq.com
status.booknooklearning.com
status.chouseisan.com
status.cookieinformation.com
status.craftgate.io
status.dgraph.io
status.digdir.no
status.esginnova.com
status.evaluagent.com
status.finsit.net
status.flowable.com
status.healthyroster.com
status.infoniqa.com
status.mimi.io
status.minds.com
status.mix.nuance.co.uk
status.nspop.dk
status.nucleus.church
status.onlifehealth.com
status.paytrace.com
status.pinely.net
status.safebase.io
status.savvas.com
status.sendcloud.com
status.shoptrader.com
status.sohosoho.tv
status.subrite.no
status.topopps.com
status.virtualdcs.co.uk
status.webitizevoice.com
status.xsarus.com
status.zyte.com
test.sterda.com
yourservicestatus.personcentredsoftware.com
Other certificates including the domain name sterda.com
(limited to 100 certificates)
hytalestatus.io
statuspage.io
allow.sterda.com
statuspage.io
statuspage.io
allowlm.sterda.com
andrei.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
paymentsolutions-status.shijicloud.com
statuspage.io
statuspage.io
hytalestatus.io
statuspage.io
statuspage.io
statuspage.io
allowlm.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
paymentsolutions-status.shijicloud.com
allowlm.sterda.com
dns.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
allowlist.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
allowlist.sterda.com
statuspage.io
statuspage.io
hytalestatus.io
redirect.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
redirect.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
allowlist.sterda.com
allowlist.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
hytalestatus.io
statuspage.io
statuspage.io
allowlist.sterda.com
internal.status.ento.com
dns.sterda.com
allowlm.sterda.com
statuspage.io
allowlist.sterda.com
redirect.sterda.com
andrei.sterda.com
statuspage.io
statuspage.io
statuspage.io
redirect.sterda.com
andrei.sterda.com
redirect.sterda.com
statuspage.io
statuspage.io
andrei.sterda.com
redirect.sterda.com
andrei.sterda.com
1100.sterda.com
connectivity-status.pelion.com
statuspage.io
statuspage.io
statuspage.io
andrei.sterda.com
statuspage.io
allowlm.sterda.com
statuspage.io
allow.sterda.com
statuspage.io
statuspage.io
allowlm.sterda.com
andrei.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
paymentsolutions-status.shijicloud.com
statuspage.io
statuspage.io
hytalestatus.io
statuspage.io
statuspage.io
statuspage.io
allowlm.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
paymentsolutions-status.shijicloud.com
allowlm.sterda.com
dns.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
allowlist.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
allowlist.sterda.com
statuspage.io
statuspage.io
hytalestatus.io
redirect.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
redirect.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
allowlist.sterda.com
allowlist.sterda.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
hytalestatus.io
statuspage.io
statuspage.io
allowlist.sterda.com
internal.status.ento.com
dns.sterda.com
allowlm.sterda.com
statuspage.io
allowlist.sterda.com
redirect.sterda.com
andrei.sterda.com
statuspage.io
statuspage.io
statuspage.io
redirect.sterda.com
andrei.sterda.com
redirect.sterda.com
statuspage.io
statuspage.io
andrei.sterda.com
redirect.sterda.com
andrei.sterda.com
1100.sterda.com
connectivity-status.pelion.com
statuspage.io
statuspage.io
statuspage.io
andrei.sterda.com
statuspage.io
allowlm.sterda.com
Certificate
The complete raw certificate details for redirect.sterda.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIBzCCBu+gAwIBAgISA8bIwTdAg2Dwghk+vsf0ngCaMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjEwNjA0MzRaFw0yNDA3MjAwNjA0MzNaMB4xHDAaBgNVBAMT E3JlZGlyZWN0LnN0ZXJkYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC2QyDfk+NDD5RloIHSGglKjfiIYkGQgfdocPQwBkj81C1zg6WqGkBdR19c db4Hq/e+xalTkZszILfNekjRhPHV0RSx83lEnyJZpzrRnBAnJ+3b2wYbhxgKibEA ana9L3TFLoMUMlPTzrMsGIcqQn5bUt8/DZgGRhuxayaJFOeyBatIvgsjjqIv8qQB LRu1S7q21PaQm9QBHewqfC4XKZ9loioIQ3gYW6Y0MNATQ3ITeY+eNdF0EJMEzIi3 If9zJpZlD4dnqlqkQV+dSpzgjjNvm9mWHk6gtWKcLN0cmZ+GaddptJxZ8iRQFQM4 n3ex3/P49teLZ9EYrLHERFyeX9/bAgMBAAGjggUpMIIFJTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFFXF1ZBfrK+zIIGfc+X0nEOb1w1RMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIIDLwYDVR0RBIIDJjCCAyKCE3JlZGlyZWN0LnN0ZXJkYS5jb22CD3N0 YXR1cy5haW1lcy51a4ISc3RhdHVzLmF1dGh6ZWQuY29tgg9zdGF0dXMuYmFucS5j b22CG3N0YXR1cy5ib29rbm9va2xlYXJuaW5nLmNvbYIVc3RhdHVzLmNob3VzZWlz YW4uY29tghxzdGF0dXMuY29va2llaW5mb3JtYXRpb24uY29tghNzdGF0dXMuY3Jh ZnRnYXRlLmlvghBzdGF0dXMuZGdyYXBoLmlvghBzdGF0dXMuZGlnZGlyLm5vghRz dGF0dXMuZXNnaW5ub3ZhLmNvbYIVc3RhdHVzLmV2YWx1YWdlbnQuY29tghFzdGF0 dXMuZmluc2l0Lm5ldIITc3RhdHVzLmZsb3dhYmxlLmNvbYIYc3RhdHVzLmhlYWx0 aHlyb3N0ZXIuY29tghNzdGF0dXMuaW5mb25pcWEuY29tgg5zdGF0dXMubWltaS5p b4IQc3RhdHVzLm1pbmRzLmNvbYIXc3RhdHVzLm1peC5udWFuY2UuY28udWuCD3N0 YXR1cy5uc3BvcC5ka4IVc3RhdHVzLm51Y2xldXMuY2h1cmNoghdzdGF0dXMub25s aWZlaGVhbHRoLmNvbYITc3RhdHVzLnBheXRyYWNlLmNvbYIRc3RhdHVzLnBpbmVs eS5uZXSCEnN0YXR1cy5zYWZlYmFzZS5pb4IRc3RhdHVzLnNhdnZhcy5jb22CFHN0 YXR1cy5zZW5kY2xvdWQuY29tghVzdGF0dXMuc2hvcHRyYWRlci5jb22CEnN0YXR1 cy5zb2hvc29oby50doIRc3RhdHVzLnN1YnJpdGUubm+CEnN0YXR1cy50b3BvcHBz LmNvbYIXc3RhdHVzLnZpcnR1YWxkY3MuY28udWuCGHN0YXR1cy53ZWJpdGl6ZXZv aWNlLmNvbYIRc3RhdHVzLnhzYXJ1cy5jb22CD3N0YXR1cy56eXRlLmNvbYIPdGVz dC5zdGVyZGEuY29tgit5b3Vyc2VydmljZXN0YXR1cy5wZXJzb25jZW50cmVkc29m dHdhcmUuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGO/3iQ DQAABAMASDBGAiEAvyXfvHqsu8AUTv5yxoc7atqp2g7qxrG5NOwloYLbBXcCIQCK 76WIt3pNhm3fTmfSeAxwX87eiKuzP1ILmbYarh1GXQB2AHb/iD8KtvuVUcJhzPWH ujS0pM27KdxoQgqf5mdMWjp0AAABjv94kFcAAAQDAEcwRQIhAKmXB0fh7OiuMXFM zJJ8lt3pTv3KLr9sMtvbR3FBJHVdAiAKYB6Slce+tgqYITj4rnQtm5M14bzsfTN1 xzyJSeSvnTANBgkqhkiG9w0BAQsFAAOCAQEAB8k/q8A55TgOArh/Yf3A0zFOoDLx /HBo+gpVYeiuPXBXS+HurYloMDHXJb/oxNI1JCVV2+s3tiMvuYm8+dvvTREXZkPw XLauyN2AD+CEqWVab0UvhvPiJNq/4mA0qoz6LvKbcDPgcTKxnT/52Im+a+1zM7Dm HtO8mn+jfYICJRJfDsYZ3DWaNp8F/OgGv0yrM77peQjfjDLkIXNEoUun2eR064hu DkO4zPOiFJGC8zbLf7twjtPlFQbU/1VnCl9GHO6gODIFy8+BjZ67KS3Jl73P4zfR TAup6a6FXJjSDx0hDrBGYxQm9LUT4VE5EwZ95+ycmy4vnIlphxtU9RjVeA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkMg35PjQw+UZaCB0hoJ So34iGJBkIH3aHD0MAZI/NQtc4OlqhpAXUdfXHW+B6v3vsWpU5GbMyC3zXpI0YTx 1dEUsfN5RJ8iWac60ZwQJyft29sGG4cYComxAGp2vS90xS6DFDJT086zLBiHKkJ+ W1LfPw2YBkYbsWsmiRTnsgWrSL4LI46iL/KkAS0btUu6ttT2kJvUAR3sKnwuFymf ZaIqCEN4GFumNDDQE0NyE3mPnjXRdBCTBMyItyH/cyaWZQ+HZ6papEFfnUqc4I4z b5vZlh5OoLVinCzdHJmfhmnXabScWfIkUBUDOJ93sd/z+PbXi2fRGKyxxERcnl/f 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 328979615278721026432620860427787661344922 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 06:04:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 06:04:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redirect.sterda.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23008473757283409065982497357548818605309893700358084126820763673255056158396921759481868577098611315645416621979108099751389586562840176906565255467971094453365181469421210994680180632706163460786646277572572710633004787168796383822518165402857102024509825662648588416721422265301699876192484396802254265772031128786508486344455480811095850478745739189249752443239745989089903180665055613762953622535082517103961001277527508551170443241636930711496091693214480136226378499439736203280287769588599186454519590356672953634791496821542700740820701594821415173163435906929312558963616205472075110900225351417078952746971 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 55c5d5905facafb320819f73e5f49c439bd70d51 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (806 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.sterda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.aimes.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.authzed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.banq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.booknooklearning.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.chouseisan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cookieinformation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.craftgate.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dgraph.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.digdir.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.esginnova.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.evaluagent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.finsit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.flowable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.healthyroster.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.infoniqa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mimi.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.minds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mix.nuance.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nspop.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nucleus.church' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.onlifehealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.paytrace.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pinely.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.safebase.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.savvas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sendcloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.shoptrader.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sohosoho.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.subrite.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.topopps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.virtualdcs.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.webitizevoice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.xsarus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.zyte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sterda.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourservicestatus.personcentredsoftware.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eff78900d0000040300483046022100bf25dfbc7aacbbc0144efe72c6873b6adaa9da0eeac6b1b934ec25a182db05770221008aefa588b77a4d866ddf4e67d2780c705fcede88abb33f520b99b61aae1d465d00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018eff7890570000040300473045022100a9970747e1ece8ae31714ccc927c96dde94efdca2ebf6c32dbdb47714124755d02200a601e9295c7beb60a982138f8ae742d9b9335e1bcec7d3375c73c8949e4af9d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0007c93fabc039e5380e02b87f61fdc0d3314ea032f1fc7068fa0a5561e8ae3d70574be1eead89683031d725bfe8c4d235242555dbeb37b6232fb989bcf9dbef4d11176643f05cb6aec8dd800fe084a9655a6f452f86f3e224dabfe26034aa8cfa2ef29b7033e07132b19d3ff9d889be6bed7333b0e61ed3bc9a7fa37d820225125f0ec619dc359a369f05fce806bf4cab33bee97908df8c32e4217344a14ba7d9e474eb886e0e43b8ccf3a2149182f336cb7fbb708ed3e51506d4ff55670a5f461ceea0383205cbcf818d9ebb292dc997bdcfe337d14c0ba9e9ae855c98d20f1d210eb046631426f4b513e1513913067de7ec9c9b2e2f9c8969871b54f518d578