networkstatus.pitneybowes.com
Issued by R3
About this certificate
This digital certificate with serial number 03:e2:21:af:ef:fa:2e:99:02:f9:f7:1d:a1:53:78:28:31:57 was issued on by Let's Encrypt.
With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=networkstatus.pitneybowes.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e2:21:af:ef:fa:2e:99:02:f9:f7:1d:a1:53:78:28:31:57Serial Number (int): 338285450762541335692708455696203113836887
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 63:42:00:13:e2:eb:75:9b:d0:d8:ca:73:13:ec:05:8f:8d:ab:e8:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): da:53:cc:bf:ad:ca:71:4a:62:f9:f1:20:37:3e:e6:2d:a5:bc:94:d8
Fingerprint (sha256): 10:c2:ca:f1:2d:5a:9b:43:47:bb:1c:18:22:08:d0:08:c3:31:59:8b:d2:2a:7c:35:18:27:f8:b2:4a:6b:a9:ac
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate networkstatus.pitneybowes.com
37
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for networkstatus.pitneybowes.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
networkstatus.pitneybowes.com
skbstatus.mambu.com
space-sync-for-confluence.status.ricksoft-inc.com
status-driveswebapps.abb.com
status.altia.com
status.atlas-iac.com
status.brainstorminc.com
status.buildingminds.com
status.cognitag.com
status.cvdenarrenkap.nl
status.digitaloptometrics.com
status.fdbcloudconnector.com
status.firehub.ch
status.kubiya.ai
status.leadsonline.com
status.lemonsoft.eu
status.medshift.com
status.metrofilecloud.com
status.new-innov.com
status.nofraud.com
status.otto.vet
status.papierkram.de
status.poweredbyibex.io
status.punchhpizzahut.com
status.qacomplete.smartbear.com
status.rcsworks.com
status.redcross.ch
status.rxnt.com
status.secondstax.com
status.symmetry.com
status.televet.com
status.tracktechllc.com
status.walcu.com
status.wondering.com
t1.bettererrorpages.com
www.safetykitstatus.com
zestmoneystatus.mambu.com
skbstatus.mambu.com
space-sync-for-confluence.status.ricksoft-inc.com
status-driveswebapps.abb.com
status.altia.com
status.atlas-iac.com
status.brainstorminc.com
status.buildingminds.com
status.cognitag.com
status.cvdenarrenkap.nl
status.digitaloptometrics.com
status.fdbcloudconnector.com
status.firehub.ch
status.kubiya.ai
status.leadsonline.com
status.lemonsoft.eu
status.medshift.com
status.metrofilecloud.com
status.new-innov.com
status.nofraud.com
status.otto.vet
status.papierkram.de
status.poweredbyibex.io
status.punchhpizzahut.com
status.qacomplete.smartbear.com
status.rcsworks.com
status.redcross.ch
status.rxnt.com
status.secondstax.com
status.symmetry.com
status.televet.com
status.tracktechllc.com
status.walcu.com
status.wondering.com
t1.bettererrorpages.com
www.safetykitstatus.com
zestmoneystatus.mambu.com
Other certificates including the domain name pitneybowes.com
(limited to 100 certificates)
leapfrog-ssl-5.gcs-web.com
statuspage.io
apistatus.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
api-sandbox.pitneybowes.com
www.pb.com
*.tracking.pitneybowes.com
*.sendsuite.pitneybowes.com
*.gcs.pitneybowes.com
statuspage.io
statuspage.io
statuspage.io
*.sendsuitetracking.pitneybowes.com
api-sandbox.pitneybowes.com
statuspage.io
*.sending.us.pitneybowes.com
confirm.pitneybowes.com
pbs-access.pitneybowes.com
*.guam.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-5.gcs-web.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
5729564890234880-fe4.pantheonsite.io
*.omnipath.pitneybowes.com
statuspage.io
relayhub.eu.pitneybowes.com
cg-status.isr.co.jp
statuspage.io
incapsula.com
statuspage.io
incapsula.com
statuspage.io
*.shippingapi.pitneybowes.com
statuspage.io
*.client.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
www.pb.com
*.designer-uk.converse.pitneybowes.com
statuspage.io
client.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
apistatus.pitneybowes.com
statuspage.io
statuspage.io
support.pitneybowes.com
*.gcs.pitneybowes.com
incapsula.com
spectrum.pitneybowes.com
careers.pitneybowes.com
*.pitneybowes.com
welcome.pitneybowes.com
*.vitalsignsbi.pitneybowes.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
statuspage.io
dr.pb.com
qa-developer2.pitneybowes.com
statuspage.io
statuspage.io
leapfrog-ssl-5.gcs-web.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
*.sendproanywhere.pitneybowes.com
statuspage.io
5729564890234880-fe4.pantheonsite.io
statuspage.io
*.sendproanywhere.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
*.mp.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
*.sendsuitetracking.pitneybowes.com
*.gtm.gcs.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
akamai-san13.exacttarget.com
sendtech-api.pitneybowes.com
apistatus.pitneybowes.com
*.shippingapi.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
*.kyc.pitneybowes.com
statuspage.io
5729564890234880-fe4.pantheonsite.io
*.shippingapi.pitneybowes.com
www.pb.com
careers.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
statuspage.io
statuspage.io
cg-status.isr.co.jp
statuspage.io
apistatus.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
api-sandbox.pitneybowes.com
www.pb.com
*.tracking.pitneybowes.com
*.sendsuite.pitneybowes.com
*.gcs.pitneybowes.com
statuspage.io
statuspage.io
statuspage.io
*.sendsuitetracking.pitneybowes.com
api-sandbox.pitneybowes.com
statuspage.io
*.sending.us.pitneybowes.com
confirm.pitneybowes.com
pbs-access.pitneybowes.com
*.guam.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-5.gcs-web.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
5729564890234880-fe4.pantheonsite.io
*.omnipath.pitneybowes.com
statuspage.io
relayhub.eu.pitneybowes.com
cg-status.isr.co.jp
statuspage.io
incapsula.com
statuspage.io
incapsula.com
statuspage.io
*.shippingapi.pitneybowes.com
statuspage.io
*.client.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
www.pb.com
*.designer-uk.converse.pitneybowes.com
statuspage.io
client.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
apistatus.pitneybowes.com
statuspage.io
statuspage.io
support.pitneybowes.com
*.gcs.pitneybowes.com
incapsula.com
spectrum.pitneybowes.com
careers.pitneybowes.com
*.pitneybowes.com
welcome.pitneybowes.com
*.vitalsignsbi.pitneybowes.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
statuspage.io
dr.pb.com
qa-developer2.pitneybowes.com
statuspage.io
statuspage.io
leapfrog-ssl-5.gcs-web.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
*.sendproanywhere.pitneybowes.com
statuspage.io
5729564890234880-fe4.pantheonsite.io
statuspage.io
*.sendproanywhere.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
*.mp.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
*.sendsuitetracking.pitneybowes.com
*.gtm.gcs.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
akamai-san13.exacttarget.com
sendtech-api.pitneybowes.com
apistatus.pitneybowes.com
*.shippingapi.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
*.kyc.pitneybowes.com
statuspage.io
5729564890234880-fe4.pantheonsite.io
*.shippingapi.pitneybowes.com
www.pb.com
careers.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
statuspage.io
statuspage.io
cg-status.isr.co.jp
Certificate
The complete raw certificate details for networkstatus.pitneybowes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIbDCCB1SgAwIBAgISA+Ihr+/6LpkC+fcdoVN4KDFXMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMDUxNjE3MDZaFw0yNDAxMDMxNjE3MDVaMCgxJjAkBgNVBAMT HW5ldHdvcmtzdGF0dXMucGl0bmV5Ym93ZXMuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAq1X9Y97AUVzlCTk/xqvUH8InNGfT12V9hs4K/72zhQFz qUlrtK2rOOWhUsiMjNKdOfKiwY+1rQVkqTYw5xqBQ3JzD9Ep5SPEhns7QV91Dy8B SzKtVlVCzFZtB8uQkWu172lId+bru1msiZ0fuuQWou0CXQpkaT4A5tijheEGtKEO /oFF62XKHC9pOuxUuzRfVudPMzwH4X6+FkO6D554jLns+oEcsp+kOkZ/zPhaeDHZ H5L29PX+dJFkJ7dEDFMR3/N7TckS42Z4BA9RqyXSZrU27Oz7KADqJANOqb52z21z fNILSqSTWKKvyIW2lkVfx1Y7E5742tfV5HETtJvg1wIDAQABo4IFhDCCBYAwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBRjQgAT4ut1m9DYynMT7AWPjavovDAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzCCA4kGA1UdEQSCA4AwggN8gh1uZXR3b3Jrc3RhdHVz LnBpdG5leWJvd2VzLmNvbYITc2tic3RhdHVzLm1hbWJ1LmNvbYIxc3BhY2Utc3lu Yy1mb3ItY29uZmx1ZW5jZS5zdGF0dXMucmlja3NvZnQtaW5jLmNvbYIcc3RhdHVz LWRyaXZlc3dlYmFwcHMuYWJiLmNvbYIQc3RhdHVzLmFsdGlhLmNvbYIUc3RhdHVz LmF0bGFzLWlhYy5jb22CGHN0YXR1cy5icmFpbnN0b3JtaW5jLmNvbYIYc3RhdHVz LmJ1aWxkaW5nbWluZHMuY29tghNzdGF0dXMuY29nbml0YWcuY29tghdzdGF0dXMu Y3ZkZW5hcnJlbmthcC5ubIIdc3RhdHVzLmRpZ2l0YWxvcHRvbWV0cmljcy5jb22C HHN0YXR1cy5mZGJjbG91ZGNvbm5lY3Rvci5jb22CEXN0YXR1cy5maXJlaHViLmNo ghBzdGF0dXMua3ViaXlhLmFpghZzdGF0dXMubGVhZHNvbmxpbmUuY29tghNzdGF0 dXMubGVtb25zb2Z0LmV1ghNzdGF0dXMubWVkc2hpZnQuY29tghlzdGF0dXMubWV0 cm9maWxlY2xvdWQuY29tghRzdGF0dXMubmV3LWlubm92LmNvbYISc3RhdHVzLm5v ZnJhdWQuY29tgg9zdGF0dXMub3R0by52ZXSCFHN0YXR1cy5wYXBpZXJrcmFtLmRl ghdzdGF0dXMucG93ZXJlZGJ5aWJleC5pb4IZc3RhdHVzLnB1bmNoaHBpenphaHV0 LmNvbYIfc3RhdHVzLnFhY29tcGxldGUuc21hcnRiZWFyLmNvbYITc3RhdHVzLnJj c3dvcmtzLmNvbYISc3RhdHVzLnJlZGNyb3NzLmNogg9zdGF0dXMucnhudC5jb22C FXN0YXR1cy5zZWNvbmRzdGF4LmNvbYITc3RhdHVzLnN5bW1ldHJ5LmNvbYISc3Rh dHVzLnRlbGV2ZXQuY29tghdzdGF0dXMudHJhY2t0ZWNobGxjLmNvbYIQc3RhdHVz LndhbGN1LmNvbYIUc3RhdHVzLndvbmRlcmluZy5jb22CF3QxLmJldHRlcmVycm9y cGFnZXMuY29tghd3d3cuc2FmZXR5a2l0c3RhdHVzLmNvbYIZemVzdG1vbmV5c3Rh dHVzLm1hbWJ1LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkC BAIEgfcEgfQA8gB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAAB iwDX1DMAAAQDAEgwRgIhAJ79BSFrZ99y157gNhwhB97I19RHVuHgVBP9WvxQA3v8 AiEA7ViocUWM6Jim3Pzm/sXU92/xwQJxE4g+Vi5SupSHB+kAdwB2/4g/Crb7lVHC Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYsA19R7AAAEAwBIMEYCIQChrQ+Sxp/p xiYNmBOvUNbCMLaUDcgTf83pxJBH9BmtqQIhALGrAxhJyS2DLKaYnqqcxhl0pkp8 eWiTHhx9UB2sQ11CMA0GCSqGSIb3DQEBCwUAA4IBAQBBLdQC+0018ng2A3MhV722 lQBUs1pfKBOKpgtzCR7ENkdbE/mtJh4QaFKxJf95CeSssPhDcI3W3QLHDvC9EYYb EMh7mCt1mOjiGsSQpwdTL7Gn1EqrW3tz9Eq5779MyfmXzVVNg3fWngXe7049QgBK HFGk1LHKoea/pRu3Z2O9Nl6QH81AAoQsAgzCyZ/NuxaJRHgTgkb3FjcMXK0zoLR4 80YVvcA9Fo/ownul0Kzvb4CvY0QfSX+bmSrLysSG3lxQ3iZe7tX8M+o5XHVtm7xO XCptTReqX7fa/GevmE7DT0E38j2CVVeEItLFjZh0LnPHqsXXM/f5Gi+ipQ15L+EE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1X9Y97AUVzlCTk/xqvU H8InNGfT12V9hs4K/72zhQFzqUlrtK2rOOWhUsiMjNKdOfKiwY+1rQVkqTYw5xqB Q3JzD9Ep5SPEhns7QV91Dy8BSzKtVlVCzFZtB8uQkWu172lId+bru1msiZ0fuuQW ou0CXQpkaT4A5tijheEGtKEO/oFF62XKHC9pOuxUuzRfVudPMzwH4X6+FkO6D554 jLns+oEcsp+kOkZ/zPhaeDHZH5L29PX+dJFkJ7dEDFMR3/N7TckS42Z4BA9RqyXS ZrU27Oz7KADqJANOqb52z21zfNILSqSTWKKvyIW2lkVfx1Y7E5742tfV5HETtJvg 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 338285450762541335692708455696203113836887 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 16:17:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 16:17:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'networkstatus.pitneybowes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21629153302501238569847205953368967498444377465511149180677580650433766616679741763480802147154762066302316449884306665247369412919698933026477750394402232135613991005688632372847694579857633739015745113298428761842881636847735527379363967297693613580247244255392941788033865590482060129524773912217952366592392011494444977569237129772806903624622781952538526584166410143571664250791345341572871029890231778473607711029761904039785238310122860321147839963533059967924066599280147364095037913642551745576438399474327332310906086524322386121281870036923663345375703417107483248460072877037716350278632385245606219342039 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 63420013e2eb759bd0d8ca7313ec058f8dabe8bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (896 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkstatus.pitneybowes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skbstatus.mambu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'space-sync-for-confluence.status.ricksoft-inc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-driveswebapps.abb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.altia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.atlas-iac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.brainstorminc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.buildingminds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cognitag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cvdenarrenkap.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.digitaloptometrics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.fdbcloudconnector.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.firehub.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.kubiya.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.leadsonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.lemonsoft.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.medshift.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.metrofilecloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.new-innov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nofraud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.otto.vet' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.papierkram.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.poweredbyibex.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.punchhpizzahut.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.qacomplete.smartbear.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rcsworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.redcross.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rxnt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.secondstax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.symmetry.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.televet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tracktechllc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.walcu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wondering.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.bettererrorpages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safetykitstatus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zestmoneystatus.mambu.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b00d7d43300000403004830460221009efd05216b67df72d79ee0361c2107dec8d7d44756e1e05413fd5afc50037bfc022100ed58a871458ce898a6dcfce6fec5d4f76ff1c1027113883e562e52ba948707e900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b00d7d47b0000040300483046022100a1ad0f92c69fe9c6260d9813af50d6c230b6940dc8137fcde9c49047f419ada9022100b1ab031849c92d832ca6989eaa9cc61974a64a7c7968931e1c7d501dac435d42 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00412dd402fb4d35f2783603732157bdb6950054b35a5f28138aa60b73091ec436475b13f9ad261e106852b125ff7909e4acb0f843708dd6dd02c70ef0bd11861b10c87b982b7598e8e21ac490a707532fb1a7d44aab5b7b73f44ab9efbf4cc9f997cd554d8377d69e05deef4e3d42004a1c51a4d4b1caa1e6bfa51bb76763bd365e901fcd4002842c020cc2c99fcdbb16894478138246f716370c5cad33a0b478f34615bdc03d168fe8c27ba5d0acef6f80af63441f497f9b992acbcac486de5c50de265eeed5fc33ea395c756d9bbc4e5c2a6d4d17aa5fb7dafc67af984ec34f4137f23d8255578422d2c58d98742e73c7aac5d733f7f91a2fa2a50d792fe104