apm-agent-versions.elastic.co

Issued by WR3

About this certificate

This digital certificate with serial number 32:7d:85:79:db:75:35:b3:0a:74:e3:09:24:7a:de:e8 was issued on by Google Trust Services.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apm-agent-versions.elastic.co

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 32:7d:85:79:db:75:35:b3:0a:74:e3:09:24:7a:de:e8
Serial Number (int): 67113144111566512056821638473866469096
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: a8:73:ac:73:63:9b:28:fd:8f:d0:ee:bf:61:ba:99:3d:f4:b5:63:7e
AuthorityKeyId: c7:81:f5:fd:8e:88:d9:00:3c:4d:63:a2:50:31:24:a0:ce:23:fe:23

Fingerprint (sha1): 64:b4:e9:21:69:84:2a:b8:d7:61:de:9b:70:15:b5:3b:ec:74:7f:37
Fingerprint (sha256): 14:0d:dc:b7:4b:cb:de:03:9d:37:96:55:84:00:84:3f:42:3c:78:ee:4c:a7:e0:ed:89:e8:ce:bf:dc:f6:db:5c

Issuing Certificate URL: http://i.pki.goog/wr3.crt

Revocation information

OCSP Server: http://o.pki.goog/s/wr3/Mn0
CRL Distribution Point: http://c.pki.goog/wr3/IbKPqAbrcUs.crl

Check the revocation status for certificate apm-agent-versions.elastic.co

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apm-agent-versions.elastic.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apm-agent-versions.elastic.co
catalogue.maps.elastic.co
clients-benchmarks.elastic.co
eui.elastic.co
feeds.elastic.co
go.elastic.co
kibana-coverage.elastic.dev
layers.geo.elastic.co
maps.elastic.co
ml-models.elastic.co
package-storage.elastic.co
partner-charts.elastic.co
vector.maps.elastic.co

Other certificates including the domain name elastic.co

(limited to 100 certificates)
license.elastic.co
email.staging-alerts.elastic.co
flower.ea-registry-production.elastic.co
govcloud-status.elastic.co
apm-ci.elastic.co
oss-dependencies-dev.elastic.co
search-ba-demo.elastic.co
bistatus.mplatform.ch
ems-logs.elastic.co
us-east-1-staging-cloud-monitor.elastic.co
test-cert.spf.elastic.co
*.elastic.co
broadcaster-service.elastic.co
canvas.elastic.co
link.elastic.co
apm-agent-versions-staging.elastic.co
elastic.co
r2.shared.global.fastly.net
beats-ci.elastic.co
s.ssl.fastly.net
stag-static-www.elastic.co
godaddy-status.elastic.co
secrets.elastic.co
aws-eu-central-1-monitor-staging-cloud.elastic.co
govcloud-status.elastic.co
download-stats-staging.elastic.co
infra-ci.elastic.co
clients-ci.elastic.co
r2.shared.global.fastly.net
artifacts-staging.elastic.co
*.elastic.co
govcloud-status.elastic.co
au.credential.getsmarter.com
abemcertified.abem.org
ibm-dal-p00-metrics-staging-cloud.elastic.co
jobs.elastic.co
jenkins.elastic.co
eu-west-1b.secrets-test.elastic.co
r2.shared.global.fastly.net
aws-eu-central-1-metrics-staging-cloud.elastic.co
demo-staging.elastic.co
green.demo.elastic.co
cloud-test-stats.elastic.co
cloud-status.dimensiondata.com
tiles.maps.elastic.co
swiftype-ci.elastic.co
tiles.maps.elastic.co
business-systems-ci.elastic.co
dns-vetting1g.map.fastly.net
cloudstatus.protel.net
business-systems-ci.elastic.co
abemcertified.abem.org
infra-stats.elastic.co
docker-auth.ea-registry-production.elastic.co
artifacts-no-kpi.elastic.co
flower.ea-registry-production.elastic.co
r2.shared.global.fastly.net
email.elastic.co
tiles.maps.elastic.co
j.ssl.fastly.net
artifacts-staging.elastic.co
swiftype-ci.elastic.co
internal-ci.elastic.co
flower.ea-registry-production.elastic.co
cds3.cvent.com
build-stats-test.elastic.co
jvm-catalog.elastic.co
customer-test.ssl.fastly.net
registry.ea-registry-staging.elastic.dev
email.staging-ess.cloud.elastic.co
a3.shared.global.fastly.net
kibana-ci.elastic.co
r2.shared.global.fastly.net
support.elastic.co
license.elastic.co
beats-ci.elastic.co
support-hub.elastic.dev
sa-demo-kibana.prod.sa.elastic.co
cloudstatus.protel.net
r2.shared.global.fastly.net
groove.elastic.co
kibana.telemetry-staging.elastic.co
artifacts-staging.elastic.co
dns-vetting1g.map.fastly.net
s.ssl.fastly.net
aonhrlearningcenter.credentials.aon.com
govcloud-status.elastic.co
auth.elastic.co
flower.ea-registry-production.elastic.co
maps.elastic.co
aws-eu-central-1-logging-staging-cloud.elastic.co
artifacts-no-kpi.elastic.co
telemetry.elastic.co
aonhrlearningcenter.credentials.aon.com
r2.shared.global.fastly.net
artifacts-no-kpi.elastic.co
staging-deepthought.elastic.co
clachecker.elastic.co
oss-dependencies-dev.elastic.co
flower.ea-registry-production.elastic.co

Certificate

The complete raw certificate details for apm-agent-versions.elastic.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIQMn2Fedt1NbMKdOMJJHre6DANBgkqhkiG9w0BAQsFADA7
MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQww
CgYDVQQDEwNXUjMwHhcNMjQwNTE2MDc0MzM1WhcNMjQwODE0MDgzNjQ4WjAoMSYw
JAYDVQQDEx1hcG0tYWdlbnQtdmVyc2lvbnMuZWxhc3RpYy5jbzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAOzk3wUwRjtC3rJcaqpkBq3ruas+YJjQdvQa
crUygPJNdDHtT6mo9/2f1tf+8cioRMrQpk92Ss24qOM1Wi8lPPZ/hPdz5GoszBcg
xJcXPJroyM0hEcZZTBC+eODKrwyfhSbbFs75i9xJs9yhJvMhFTWn6NXiLu8pyAgZ
/HzVwNQXmalujR/U2Cnv1Yn2NkiidQEM1ZUI2qIfxR9oBebXJAb9U7bHEcWhrLnn
Q4c4WqosO3NNqpZsV3iSm7qzwOmiaFPkMnV4daYmhkzkDkIXr0zV6HwEhPP2P+j2
jnIzw1+gi4xPhrHm1MyHYp8If5t+cRkzaA7Qf7VAX1JtcELMonsCAwEAAaOCA3Iw
ggNuMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBSoc6xzY5so/Y/Q7r9hupk99LVjfjAfBgNVHSMEGDAW
gBTHgfX9jojZADxNY6JQMSSgziP+IzBeBggrBgEFBQcBAQRSMFAwJwYIKwYBBQUH
MAGGG2h0dHA6Ly9vLnBraS5nb29nL3Mvd3IzL01uMDAlBggrBgEFBQcwAoYZaHR0
cDovL2kucGtpLmdvb2cvd3IzLmNydDCCAUEGA1UdEQSCATgwggE0gh1hcG0tYWdl
bnQtdmVyc2lvbnMuZWxhc3RpYy5jb4IZY2F0YWxvZ3VlLm1hcHMuZWxhc3RpYy5j
b4IdY2xpZW50cy1iZW5jaG1hcmtzLmVsYXN0aWMuY2+CDmV1aS5lbGFzdGljLmNv
ghBmZWVkcy5lbGFzdGljLmNvgg1nby5lbGFzdGljLmNvghtraWJhbmEtY292ZXJh
Z2UuZWxhc3RpYy5kZXaCFWxheWVycy5nZW8uZWxhc3RpYy5jb4IPbWFwcy5lbGFz
dGljLmNvghRtbC1tb2RlbHMuZWxhc3RpYy5jb4IacGFja2FnZS1zdG9yYWdlLmVs
YXN0aWMuY2+CGXBhcnRuZXItY2hhcnRzLmVsYXN0aWMuY2+CFnZlY3Rvci5tYXBz
LmVsYXN0aWMuY28wEwYDVR0gBAwwCjAIBgZngQwBAgEwNgYDVR0fBC8wLTAroCmg
J4YlaHR0cDovL2MucGtpLmdvb2cvd3IzL0liS1BxQWJyY1VzLmNybDCCAQUGCisG
AQQB1nkCBAIEgfYEgfMA8QB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZx
H7WbAAABj4CSNMcAAAQDAEgwRgIhAMbWcpOAKz+heS0zzQ5O7YkQkJcaImnYlYJj
B6NteCCEAiEA5QHvEBE1Cv42HVetJNUrnYSw7KC0Rwh8EIRb/J53EL8AdgA/F0tP
1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY+AkjTZAAAEAwBHMEUCIQCy
rBTOfBYFlSXEvMorVqlaLN7XemzCM4dp9jlu67uBiwIgD+CPb1C+J6yLGXyi+BlV
ML+4b5FijnVSrlq26a17dpowDQYJKoZIhvcNAQELBQADggEBAGue5u9ukr4Dh+/u
MkQMIRl6+8BXQ5fCW3vLiV4RkZAxJaw+bCnRDHPh5sn7SDmkizpSRfIpyTSA6OWP
yMQAzETpwWB7q9xmjVkepxdzVU2PuPLf+IQnfmEl3qzToIof0vH7F8v6r2Lb6ypn
Mrhq61zs23w+6SeRZWY1K6R+ojXsvWIvtZiFm/yject4Y44oPsX3H8tf1Adv0BJx
l+xtVIUfAT9mfM4Zy6Ya7TLAIj7KFyDSKoTCz5H1KFPNK6V8/MRqoe6TH9PnBGUg
gVe93tYmTqg/mZEArDUAtGMs6037EBqU8NfJ2FGwrqJXLb5ZZoGQLGhSO9FRI2jD
MGaCMTI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OTfBTBGO0LeslxqqmQG
reu5qz5gmNB29BpytTKA8k10Me1Pqaj3/Z/W1/7xyKhEytCmT3ZKzbio4zVaLyU8
9n+E93PkaizMFyDElxc8mujIzSERxllMEL544MqvDJ+FJtsWzvmL3Emz3KEm8yEV
Nafo1eIu7ynICBn8fNXA1BeZqW6NH9TYKe/VifY2SKJ1AQzVlQjaoh/FH2gF5tck
Bv1TtscRxaGsuedDhzhaqiw7c02qlmxXeJKburPA6aJoU+QydXh1piaGTOQOQhev
TNXofASE8/Y/6PaOcjPDX6CLjE+GsebUzIdinwh/m35xGTNoDtB/tUBfUm1wQsyi
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 67113144111566512056821638473866469096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 07:43:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 08:36:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apm-agent-versions.elastic.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29905100553728823803292448263487113987155646886154894400824636092297498597938677182978223312096254321087515931270821652436666938767648090342631764146879059038395972274289484686191760776136412981229537784567095818742594164848506929326493275924002862181403391869610202869789960759670394423146827317835016954815596159503829198702468985865978684924781248393379710302218830688501197872383905863444387172991685827177227744563224874397405759252392631887331570594840080642261642841318282012145857271557146157516899790767398604870704348211136533471540648092340239832123679582813360210929056730686025728268763140967180190655099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a873ac73639b28fd8fd0eebf61ba993df4b5637e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c781f5fd8e88d9003c4d63a2503124a0ce23fe23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr3/Mn0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (312 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apm-agent-versions.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.maps.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-benchmarks.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eui.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana-coverage.elastic.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layers.geo.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ml-models.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'package-storage.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-charts.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vector.maps.elastic.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr3/IbKPqAbrcUs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f809234c70000040300483046022100c6d67293802b3fa1792d33cd0e4eed891090971a2269d895826307a36d782084022100e501ef1011350afe361d57ad24d52b9d84b0eca0b447087c10845bfc9e7710bf0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f809234d90000040300473045022100b2ac14ce7c16059525c4bcca2b56a95a2cded77a6cc2338769f6396eebbb818b02200fe08f6f50be27ac8b197ca2f8195530bfb86f91628e7552ae5ab6e9ad7b769a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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