api-platform-status.production.tax.service.gov.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:1f:85:32:1a:09:c2:b1:c3:cf:3e:2e:e3:db:96:e4:44:9e was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-platform-status.production.tax.service.gov.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1f:85:32:1a:09:c2:b1:c3:cf:3e:2e:e3:db:96:e4:44:9e
Serial Number (int): 359174944567988357660369487450066412389534
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 71:17:32:11:3c:f4:1e:a5:25:15:bf:09:af:b5:aa:f7:20:d6:ee:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:3e:ab:bb:08:3b:6d:db:0c:c5:4e:cd:db:e9:bb:6c:9a:b9:c4:a2
Fingerprint (sha256): 11:8b:69:4a:7a:39:be:a8:33:53:3e:83:f3:d8:d3:3e:9a:85:4c:9a:96:fd:8d:d1:01:45:99:27:55:83:7b:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api-platform-status.production.tax.service.gov.uk

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-platform-status.production.tax.service.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-platform-status.production.tax.service.gov.uk
dnb-status.inrupt.com
ey-nextwave.status.subvrsive.com
status-goto-developer.logmeininc.com
status.1-stop.biz
status.accufundonline.com
status.cirrusinsight.com
status.coinmarketcap.com
status.csplan.co
status.extole.com
status.globaldataconsortium.com
status.gotomeeting.com
status.gototraining.com
status.gotowebinar.com
status.grammarly.com
status.grasshopper.com
status.hive.hr
status.idrift.no
status.inwebo.com
status.jive.com
status.join.me
status.layerstack.com
status.logmeinaccess.com
status.logmeinremotesupport.com
status.meetviva.com
status.naga.com
status.newsim.de
status.nexonia.com
status.nomical.com
status.nscom.com
status.rebelmouse.com
status.rectanglehealth.com
status.redcanary.com
status.sealights.io
status.sparkhire.com
status.storefeeder.com
status.vtex.com
status.vtex.com.br
status.workast.com
statuspage.keeper.io

Other certificates including the domain name tax.service.gov.uk

(limited to 100 certificates)
landscape.production.tools.tax.service.gov.uk
developer.service.hmrc.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
admin.staging.tax.service.gov.uk
api.externaltest.tax.service.gov.uk
api.development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
open.artefacts.tax.service.gov.uk
cip-canary-service-10-42.development.cip-paas.tax.service.gov.uk
dis.tax.service.gov.uk
childcare.tax.service.gov.uk
childcare.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
*.development.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
lab02.build.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
platapps-live.tax.service.gov.uk
www.prototypes.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
kibana.internal-lab04.telemetry.tax.service.gov.uk
maps-11-987.development.cip-paas.tax.service.gov.uk
*.live.platops.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-8-55.development.cip-paas.tax.service.gov.uk
online.hmrc.gov.uk
www.staging.tax.service.gov.uk
cname-acs-fast-stream.development.tax.service.gov.uk
development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
mdtp-system.platapps-labs.tax.service.gov.uk
confluence.staging.tools.tax.service.gov.uk
grafana-alerting.internal-lab01.telemetry.tax.service.gov.uk
elasticsearch.internal-staging.telemetry.tax.service.gov.uk
selfservice.staging.tools.tax.service.gov.uk
*.tax.service.gov.uk
online.hmrc.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
*.internal-lab03.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
jira.staging.tools.tax.service.gov.uk
dis.qa.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
bank-account-insights.staging.cip-app.tax.service.gov.uk
platapps-labs.tax.service.gov.uk
test-transaction-engine.tax.service.gov.uk
cname-jons-ccn2.integration.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
cip-canary-service-2-38.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
dis.qa.tax.service.gov.uk
*.integration.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
qa.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
lab02.artefacts.tax.service.gov.uk
cname-jons-transaction-engine.integration.tax.service.gov.uk
api.integration.tax.service.gov.uk
paas-sample-2732-150.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
design.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
paas-sample-2-38.development.cip-paas.tax.service.gov.uk
platapps-platops-sandbox.tax.service.gov.uk
kibana.mdtp-staging.telemetry.tax.service.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
kibana.internal-lab03.telemetry.tax.service.gov.uk
*.tax.service.gov.uk
paas-sample-2703-144.development.cip-paas.tax.service.gov.uk
lab03.externaltest.testing.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
cip-canary-service-5-23.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
api.staging.tax.service.gov.uk
trigger.lab03.prototypes.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
status-tool.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-11-73.development.cip-paas.tax.service.gov.uk
elasticsearch.internal-lab02.telemetry.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
mediastorage-alb.staging.tools.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
api.development.tax.service.gov.uk
cname-transaction-engine.staging.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
*.labs.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
user-management-dod-1397.poc.sandbox.tools.tax.service.gov.uk
transaction-engine.development.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
*.integration.tax.service.gov.uk

Certificate

The complete raw certificate details for api-platform-status.production.tax.service.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYq3sIJCo1ELBE1lmAs8
OOZQkysncjb42KpDR7PaEIqgx2WFfjyMxIkg/mx8uXmkoXQPxq+hPz2bBW+fskyQ
fMqV5jxHyBYNujketwWcN4LUXZd7W50gf1cAlvXEw8WthQlvhRZeiVGQotoPUfzk
ClUmrwhBO+utgzfkS2d01wVqga0X1+bLQKR/HzUv1WdMoJoeTl8IdxndoA3iaw5m
c/K5I5m1QUY/3+/cRWhyBhUXhU+jkAxYBZgR6RQ6IEBVTQmrPA6bcprlto976vo3
h8+57Z/dkC2ufn9G0DXCSdz9JS4UL6uWBFutCTRsOzDpRkfZqnfVaCFmCUSS9BjB
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359174944567988357660369487450066412389534
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 18:43:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 18:43:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-platform-status.production.tax.service.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23927443805568073055716747033959257097285128035492119957989334268586666197299486557008337855206444783969525405282843017901183739262248673037044901981788632067699819081063483007933350235140161494470777963060496672597838578635469770395803782964888475047419291637818443666944002423660879550094462274306945397407122991830934491704870592028995432217519962129863836204227229031401514742926249599366036922917189054213939142535125386384144597495976774206279899682524555003077853716680922189887678100421467023506766940740716626083824729260873470177755171799919860389479536773991149105344117184080619506771048769319820095701503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							711732113cf41ea52515bf09afb5aaf720d6eedf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (938 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-platform-status.production.tax.service.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnb-status.inrupt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey-nextwave.status.subvrsive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-goto-developer.logmeininc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.1-stop.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accufundonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cirrusinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coinmarketcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.csplan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.extole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.globaldataconsortium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gotomeeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gototraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gotowebinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grammarly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grasshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hive.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.idrift.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inwebo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.jive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.join.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.layerstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.logmeinaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.logmeinremotesupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.meetviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.naga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.newsim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nexonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nomical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nscom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rebelmouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rectanglehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.redcanary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sealights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sparkhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.storefeeder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vtex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vtex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.workast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage.keeper.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187a031ee310000040300463044022018b7ff1d5f82959e30a6e1bf77118cfce62df021085506aded6e264e23bd35bc022039043a263f9469f4585d67f64729c26a7ee5bb8a96c4711447ead67511fbfb150076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187a031ee4c0000040300473045022100c3179b0dc43c0a1019b761ec28dbc5d0f5549de5ab36e6af83aa21ca56ad89c5022038f64cc7bc31f6d57872c706cc2b82d15c66dd9164ed4ca0589c0899f245c6ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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