its-status.colby.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:51:f0:56:7a:89:08:bd:69:d3:fa:c0:47:a6:86:3b:dd:60 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=its-status.colby.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:f0:56:7a:89:08:bd:69:d3:fa:c0:47:a6:86:3b:dd:60
Serial Number (int): 289219193257705904061853305145417818430816
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:43:9d:da:5f:08:6b:0a:8f:79:f4:57:70:a7:75:51:f6:da:ac:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:fa:6f:c0:a2:64:1b:37:e7:c1:f4:ef:ee:14:93:38:73:d3:0d:81
Fingerprint (sha256): 13:e5:59:71:ce:00:9d:e4:50:78:ec:6d:04:c5:cb:21:b4:20:77:49:9b:00:b5:69:20:ac:7e:35:5c:ea:be:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate its-status.colby.edu

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for its-status.colby.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

its-status.colby.edu
jira-align.status.atlassian.com
status.adoptanimals.io
status.adtraction.com
status.airkit.com
status.ccvshop.nl
status.cloud.cms.gov
status.cloudera.com
status.codefresh.io
status.codio.com
status.convertkit.com
status.encoded.co.uk
status.grip.events
status.hoalife.com
status.iloan.nl
status.intuo.io
status.ipro.net
status.istpulse.com
status.kontent.ai
status.lokalise.com
status.macstadium.com
status.metamap.com
status.mevo.co.nz
status.newbanking.com
status.opennode.com
status.paperspace.com
status.pliability.com
status.quantumworkplace.com
status.reconnectmanager.com
status.recruitingbypaycor.com
status.safemoon.com
status.securityscorecard.com
status.simplewan.com
status.thethings.network
status.thinkproject.com
status.tokenex.com
status.validis.com
status.virta.global
status.visitu.com
status.voyado.com

Other certificates including the domain name colby.edu

(limited to 100 certificates)
sni.cloudflaressl.com
alumni-secure.colby.edu
davisconnects.colby.edu
admissions.colby.edu
its-status.colby.edu
oktapreview.colby.edu
cluster2.technolutions.net
*.colby.edu
bookplates.colby.edu
vrppdt0.colby.edu
librarysearch.colby.edu
idp.colby.edu
dns.sterda.com
web.colby.edu
ems.colby.edu
vrppdt0.colby.edu
sni.cloudflaressl.com
xenapp.colby.edu
moodle.colby.edu
cluster2.technolutions.net
sni.cloudflaressl.com
cluster2.technolutions.net
sni.cloudflaressl.com
schupfarts.colby.edu
its-status.colby.edu
admissions.colby.edu
its-status.colby.edu
vwpsfs0.colby.edu
dns.sterda.com
its-status.colby.edu
its-status.colby.edu
sni.cloudflaressl.com
news.colby.edu
digitalcommons.colby.edu
dns.sterda.com
xen.colby.edu
vwpdevcon1.colby.edu
its-status.colby.edu
pgpserver1.colby.edu
sni.cloudflaressl.com
clearpass.colby.edu
alumni-secure.colby.edu
sni.cloudflaressl.com
view.colby.edu
its-status.colby.edu
cluster2.technolutions.net
sni.cloudflaressl.com
cluster2.technolutions.net
terradotta.colby.edu
moodle.colby.edu
its-status.colby.edu
vwpjira1.colby.edu
its-status.colby.edu
cluster2.technolutions.net
sni.cloudflaressl.com
video.colby.edu
cps.colby.edu
admissions.colby.edu
cluster2.technolutions.net
sni.cloudflaressl.com
okta.colby.edu
personal.colby.edu
cluster2.technolutions.net
digitalcommons.colby.edu
sni.cloudflaressl.com
cluster2.technolutions.net
sni.cloudflaressl.com
idpdev.colby.edu
its-status.colby.edu
moodle.colby.edu
sni.cloudflaressl.com
cxweb.colby.edu
archivesspace.colby.edu
citrix.colby.edu
cluster2.technolutions.net
cluster2.technolutions.net
colby.edu
idp.colby.edu
cxweb.colby.edu
its-status.colby.edu
its-status.colby.edu
its-status.colby.edu
web.colby.edu
personal.colby.edu
cluster2.technolutions.net
its-status.colby.edu
my.colby.edu
its-status.colby.edu
mcmi.colby.edu
ems.colby.edu
its-status.colby.edu
vpn-old.colby.edu
*.pfsnr.colby.edu
sni.cloudflaressl.com
admissions.colby.edu
its-status.colby.edu
dns.sterda.com
its-status.colby.edu
lunderinstitute.colby.edu
web.colby.edu

Certificate

The complete raw certificate details for its-status.colby.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIkTCCB3mgAwIBAgISA1HwVnqJCL1p0/rAR6aGO91gMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMDkxNzEzMzlaFw0yMzA0MDkxNzEzMzhaMB8xHTAbBgNVBAMT
FGl0cy1zdGF0dXMuY29sYnkuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmNy8fsq3Nh3/zXO0JqvTE2YkkbtF3vzdVggMOxjvabZqv6R3F1nZPg4G
J5UzoYa+Jto65nIwakni7X4pGQtzYve97avPPWvyQVhYD8APwGnWNxeUUWwoHBV7
BHauj6np/5JTDwAMhzCIuiUX52szE6eUsH6Aq+CU6iUqsYBOv8m8olargftoF5vd
8IyHW5nYdrBG50uwAg5CtPHyXsMZ1V/DU2pLPdJXBxoEciyfECurfUCt0UsgZz13
LFiRR2Xm5B/9Usrbamb8e27OP0RXFWufnFykK4qk3J6xHPr3x2Vd13Gd0WHW8Itl
zO1bS5lUaLJrtXLFl7aJHBBLB6XmQQIDAQABo4IFsjCCBa4wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBSKQ53aXwhrCo959Fdwp3VR9tqsFDAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCA4AGA1UdEQSCA3cwggNzghRpdHMtc3RhdHVzLmNvbGJ5LmVkdYIf
amlyYS1hbGlnbi5zdGF0dXMuYXRsYXNzaWFuLmNvbYIWc3RhdHVzLmFkb3B0YW5p
bWFscy5pb4IVc3RhdHVzLmFkdHJhY3Rpb24uY29tghFzdGF0dXMuYWlya2l0LmNv
bYIRc3RhdHVzLmNjdnNob3AubmyCFHN0YXR1cy5jbG91ZC5jbXMuZ292ghNzdGF0
dXMuY2xvdWRlcmEuY29tghNzdGF0dXMuY29kZWZyZXNoLmlvghBzdGF0dXMuY29k
aW8uY29tghVzdGF0dXMuY29udmVydGtpdC5jb22CFHN0YXR1cy5lbmNvZGVkLmNv
LnVrghJzdGF0dXMuZ3JpcC5ldmVudHOCEnN0YXR1cy5ob2FsaWZlLmNvbYIPc3Rh
dHVzLmlsb2FuLm5sgg9zdGF0dXMuaW50dW8uaW+CD3N0YXR1cy5pcHJvLm5ldIIT
c3RhdHVzLmlzdHB1bHNlLmNvbYIRc3RhdHVzLmtvbnRlbnQuYWmCE3N0YXR1cy5s
b2thbGlzZS5jb22CFXN0YXR1cy5tYWNzdGFkaXVtLmNvbYISc3RhdHVzLm1ldGFt
YXAuY29tghFzdGF0dXMubWV2by5jby5ueoIVc3RhdHVzLm5ld2JhbmtpbmcuY29t
ghNzdGF0dXMub3Blbm5vZGUuY29tghVzdGF0dXMucGFwZXJzcGFjZS5jb22CFXN0
YXR1cy5wbGlhYmlsaXR5LmNvbYIbc3RhdHVzLnF1YW50dW13b3JrcGxhY2UuY29t
ghtzdGF0dXMucmVjb25uZWN0bWFuYWdlci5jb22CHXN0YXR1cy5yZWNydWl0aW5n
YnlwYXljb3IuY29tghNzdGF0dXMuc2FmZW1vb24uY29tghxzdGF0dXMuc2VjdXJp
dHlzY29yZWNhcmQuY29tghRzdGF0dXMuc2ltcGxld2FuLmNvbYIYc3RhdHVzLnRo
ZXRoaW5ncy5uZXR3b3JrghdzdGF0dXMudGhpbmtwcm9qZWN0LmNvbYISc3RhdHVz
LnRva2VuZXguY29tghJzdGF0dXMudmFsaWRpcy5jb22CE3N0YXR1cy52aXJ0YS5n
bG9iYWyCEXN0YXR1cy52aXNpdHUuY29tghFzdGF0dXMudm95YWRvLmNvbTBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhZe8748AAAQD
AEcwRQIhAM4R78CdYelZZ/XIIq0pYc6daHDH1aOoC/4H2AXXe1JVAiBji1a2+RDb
x+NNLnnAzZqeud5RmG7U9YBnjKg3wGbXZwB2ALc++yTfnE26dfI5xbpY9Gxd/ELP
ep81xJ4dCYEl7bSZAAABhZe88W0AAAQDAEcwRQIgcQ4xsYaVqdbIkK9TX3a/mk7c
yDVNp79yY6l1tG/TyfICIQCG9EYxvlfmCiLz4OsYMq/UlldvRXhDxUxQwboKkBmd
UjANBgkqhkiG9w0BAQsFAAOCAQEAukTmmlyNpRl2bKSAYvRXyhm0zoZyYYAk74+j
7kQlFgSeMlBaYBKWBdSZfO8IT7wU5Xx3D26WrVoSmQHjrVjMi6yR4VdhWrbKAoiz
coarthcuzJ+Dzd10ppxzpkUXpA4C1w/aIuEC3iYJ+piyNkVt20YXNeTc6lcFjxWH
fH5dHCtbyx00Yce008yvd28Pcx11JAqdmmPUTry+g2RVdHWZW6IA3AKH14mhib3z
6xy/CalwHTuubM57k1BH2WVSC5I7Tlyr8SbxGwx7RHketKLnQei6x0b7ckvhGQfU
JspPzf/49MpuUQ6mtyGPrW5JXFyOljBTmAURcwrQjAQ9S5FiMA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNy8fsq3Nh3/zXO0JqvT
E2YkkbtF3vzdVggMOxjvabZqv6R3F1nZPg4GJ5UzoYa+Jto65nIwakni7X4pGQtz
Yve97avPPWvyQVhYD8APwGnWNxeUUWwoHBV7BHauj6np/5JTDwAMhzCIuiUX52sz
E6eUsH6Aq+CU6iUqsYBOv8m8olargftoF5vd8IyHW5nYdrBG50uwAg5CtPHyXsMZ
1V/DU2pLPdJXBxoEciyfECurfUCt0UsgZz13LFiRR2Xm5B/9Usrbamb8e27OP0RX
FWufnFykK4qk3J6xHPr3x2Vd13Gd0WHW8ItlzO1bS5lUaLJrtXLFl7aJHBBLB6Xm
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289219193257705904061853305145417818430816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 17:13:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-09 17:13:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'its-status.colby.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19297071486011832531924508536040594514815614720184474023675587869585991723483755223184732473486609092706729225696590007274167134564035786766205793904733779473465845034033878661334206075717846947956871389334842742191614547936926233186025851143661714509465004240479768709164781351962295641376835357078292456068066669486668979193255236444471623184611321563917146083717233343826796900885506171154120963859351594654603166823048594084830104033932804695423373855091978351851284464522319877973520919255175192789735237235022339588712310418364094448126681829216623877897267032950688324426862833367948274331274111523523792332353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a439dda5f086b0a8f79f45770a77551f6daac14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (887 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-status.colby.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira-align.status.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.adoptanimals.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.adtraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.airkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ccvshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cloud.cms.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cloudera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.codefresh.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.codio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.convertkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.encoded.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grip.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hoalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.iloan.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.intuo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ipro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.istpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.kontent.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.lokalise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.macstadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.metamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mevo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.newbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.opennode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.paperspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pliability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.quantumworkplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.reconnectmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.recruitingbypaycor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.safemoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.securityscorecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.simplewan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.thethings.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.thinkproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tokenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.validis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.virta.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.visitu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.voyado.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018597bcef8f0000040300473045022100ce11efc09d61e95967f5c822ad2961ce9d6870c7d5a3a80bfe07d805d77b52550220638b56b6f910dbc7e34d2e79c0cd9a9eb9de51986ed4f580678ca837c066d767007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018597bcf16d00000403004730450220710e31b18695a9d6c890af535f76bf9a4edcc8354da7bf7263a975b46fd3c9f202210086f44631be57e60a22f3e0eb1832afd496576f457843c54c50c1ba0a90199d52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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