new-status.ucsd.edu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ee:40:d3:65:87:cd:da:39:24:09:ea:af:e3:9d:36:99:7c was issued on by Let's Encrypt.
With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=new-status.ucsd.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ee:40:d3:65:87:cd:da:39:24:09:ea:af:e3:9d:36:99:7cSerial Number (int): 342410229348114359859576455672098050185596
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b6:c7:31:1c:f6:8a:69:ca:7d:6f:2d:a0:5d:c7:5d:ca:9f:5f:05:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ca:fd:98:03:dc:6c:1f:c7:8c:8e:88:1b:62:1f:60:70:82:ed:a6:65
Fingerprint (sha256): 15:11:95:a8:ac:2e:3f:3c:a1:19:b9:f1:a0:f2:8c:27:5b:6b:ba:ad:25:c5:64:d5:71:e9:99:9e:ae:8c:47:aa
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate new-status.ucsd.edu
40
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for new-status.ucsd.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
new-status.ucsd.edu
status-api.knewton.com
status.aclgrc.com
status.activeprospect.com
status.amplitude.com
status.ansarada.com
status.apache.org
status.apigee.com
status.bandwidth.com
status.blueconic.com
status.brightpearl.com
status.calltrackingmetrics.com
status.coins.ph
status.deputy.com
status.eximchain.com
status.exosite.com
status.glesys.com
status.globalrelay.com
status.gospotcheck.com
status.hostedgraphite.com
status.kraken.io
status.linode.com
status.mobileiron.com
status.nextiva.com
status.notonthehighstreet.com
status.plivo.com
status.precisionlender.com
status.rainforestqa.com
status.rjmetrics.com
status.rosette.com
status.smartthings.com
status.teamwork.com
status.tradegecko.com
status.ucsd.edu
status.unbounce.com
status.urbanairship.com
statuspage.gothenburgbitfactory.org
trust.jitterbit.com
trust.mobileiron.com
uptime.activeprospect.com
status-api.knewton.com
status.aclgrc.com
status.activeprospect.com
status.amplitude.com
status.ansarada.com
status.apache.org
status.apigee.com
status.bandwidth.com
status.blueconic.com
status.brightpearl.com
status.calltrackingmetrics.com
status.coins.ph
status.deputy.com
status.eximchain.com
status.exosite.com
status.glesys.com
status.globalrelay.com
status.gospotcheck.com
status.hostedgraphite.com
status.kraken.io
status.linode.com
status.mobileiron.com
status.nextiva.com
status.notonthehighstreet.com
status.plivo.com
status.precisionlender.com
status.rainforestqa.com
status.rjmetrics.com
status.rosette.com
status.smartthings.com
status.teamwork.com
status.tradegecko.com
status.ucsd.edu
status.unbounce.com
status.urbanairship.com
statuspage.gothenburgbitfactory.org
trust.jitterbit.com
trust.mobileiron.com
uptime.activeprospect.com
Other certificates including the domain name ucsd.edu
(limited to 100 certificates)
argo.ucsd.edu
cse125.ucsd.edu
physci.ucsd.edu
chiapet.givengine.org
hsrecharges.ucsd.edu
sdscnapr1.ucsd.edu
statuspage.io
sfunder11cert.net
core-vendor-shows.ucsd.edu
statuspage.io
number.ucsd.edu
us.prod.campusgroups.com
assets.ucsd.edu
mccammon.ucsd.edu
moodle.ucsd.edu
users.physics.ucsd.edu
statuspage.io
ushydro.ucsd.edu
csescheduler.ucsd.edu
unexwebdev.ucsd.edu
telerad.ucsd.edu
securessl-pst1.tessituranetworkhost.com
mesl-exp.ucsd.edu
cluster3.technolutions.net
tstbizapps.ucsd.edu
jazzcamp.ucsd.edu
aguado.eng.ucsd.edu
us.prod.campusgroups.com
reserve.ad.ucsd.edu
pelg.ucsd.edu
cass.ucsd.edu
fapp.ucsd.edu
autogrow.ucsd.edu
kam.ucsd.edu
clinicaltrials.ucsd.edu
bearhug.ucsd.edu
artpower.ucsd.edu
csh-mobile2.ucsd.edu
diego.ucsd.edu
myhealth.ucsd.edu
unexminer.ucsd.edu
grant.hivresearch.ucsd.edu
reinagel-nas.ucsd.edu
metabolomics-usi.ucsd.edu
autogrow.ucsd.edu
gph.ucsd.edu
pointcloud.ucsd.edu
velostrain.ucsd.edu
qbiohangout.ucsd.edu
shipsweb.ucsd.edu
studentevents.ucsd.edu
statuspage.io
hrweb5.ucsd.edu
abcdcontact.ucsd.edu
slscan.ucsd.edu
microcirculation.eng.ucsd.edu
statuspage.io
eu.status.grow.clio.com
iport-acv2.ucsd.edu
keck2.ucsd.edu
users.physics.ucsd.edu
statuspage.io
statuspage.io
jupyter.coleman.ucsd.edu
steinmetzlab.eng.ucsd.edu
igppdb.ucsd.edu
navigator.ucsd.edu
chrondev-ingest.ucsd.edu
statuspage.io
darkstar.ucsd.edu
ksdt.ucsd.edu
restprod2.ucsd.edu
expedition.ucsd.edu
hiseasnet.ucsd.edu
fraley.eng.ucsd.edu
password.ucsd.edu
sa-web.ucsd.edu
eu.status.grow.clio.com
epyqview.ucsd.edu
ucigcc.org
sio.ucsd.edu
statuspage.io
oec-vmweb03.ucsd.edu
eu.status.grow.clio.com
securedns.planmygift.org
middlewaretesting.ucsd.edu
shsfaxsrv-16314.ucsd.edu
d4sd2017.ucsd.edu
xcore-cub2.ad.ucsd.edu
cluster3.technolutions.net
wiki.barreiro.ucsd.edu
*.sysnet.ucsd.edu
zak.ucsd.edu
letusknow.ucsd.edu
tmarc.hivresearch.ucsd.edu
sinhagroup.ucsd.edu
finance.ucsd.edu
statuspage.io
statuspage.io
to.ucsd.edu
cse125.ucsd.edu
physci.ucsd.edu
chiapet.givengine.org
hsrecharges.ucsd.edu
sdscnapr1.ucsd.edu
statuspage.io
sfunder11cert.net
core-vendor-shows.ucsd.edu
statuspage.io
number.ucsd.edu
us.prod.campusgroups.com
assets.ucsd.edu
mccammon.ucsd.edu
moodle.ucsd.edu
users.physics.ucsd.edu
statuspage.io
ushydro.ucsd.edu
csescheduler.ucsd.edu
unexwebdev.ucsd.edu
telerad.ucsd.edu
securessl-pst1.tessituranetworkhost.com
mesl-exp.ucsd.edu
cluster3.technolutions.net
tstbizapps.ucsd.edu
jazzcamp.ucsd.edu
aguado.eng.ucsd.edu
us.prod.campusgroups.com
reserve.ad.ucsd.edu
pelg.ucsd.edu
cass.ucsd.edu
fapp.ucsd.edu
autogrow.ucsd.edu
kam.ucsd.edu
clinicaltrials.ucsd.edu
bearhug.ucsd.edu
artpower.ucsd.edu
csh-mobile2.ucsd.edu
diego.ucsd.edu
myhealth.ucsd.edu
unexminer.ucsd.edu
grant.hivresearch.ucsd.edu
reinagel-nas.ucsd.edu
metabolomics-usi.ucsd.edu
autogrow.ucsd.edu
gph.ucsd.edu
pointcloud.ucsd.edu
velostrain.ucsd.edu
qbiohangout.ucsd.edu
shipsweb.ucsd.edu
studentevents.ucsd.edu
statuspage.io
hrweb5.ucsd.edu
abcdcontact.ucsd.edu
slscan.ucsd.edu
microcirculation.eng.ucsd.edu
statuspage.io
eu.status.grow.clio.com
iport-acv2.ucsd.edu
keck2.ucsd.edu
users.physics.ucsd.edu
statuspage.io
statuspage.io
jupyter.coleman.ucsd.edu
steinmetzlab.eng.ucsd.edu
igppdb.ucsd.edu
navigator.ucsd.edu
chrondev-ingest.ucsd.edu
statuspage.io
darkstar.ucsd.edu
ksdt.ucsd.edu
restprod2.ucsd.edu
expedition.ucsd.edu
hiseasnet.ucsd.edu
fraley.eng.ucsd.edu
password.ucsd.edu
sa-web.ucsd.edu
eu.status.grow.clio.com
epyqview.ucsd.edu
ucigcc.org
sio.ucsd.edu
statuspage.io
oec-vmweb03.ucsd.edu
eu.status.grow.clio.com
securedns.planmygift.org
middlewaretesting.ucsd.edu
shsfaxsrv-16314.ucsd.edu
d4sd2017.ucsd.edu
xcore-cub2.ad.ucsd.edu
cluster3.technolutions.net
wiki.barreiro.ucsd.edu
*.sysnet.ucsd.edu
zak.ucsd.edu
letusknow.ucsd.edu
tmarc.hivresearch.ucsd.edu
sinhagroup.ucsd.edu
finance.ucsd.edu
statuspage.io
statuspage.io
to.ucsd.edu
Certificate
The complete raw certificate details for new-status.ucsd.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH5jCCBs6gAwIBAgISA+5A02WHzdo5JAnqr+OdNpl8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTExODUyMzJaFw0x OTA1MTIxODUyMzJaMB4xHDAaBgNVBAMTE25ldy1zdGF0dXMudWNzZC5lZHUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwp//BqYdQZl1mUZSOgwFL7BU kTCmF2LdAv6xoZDyyV4kOZacyUUaNwRaIs16cOjkk0XWtjVA/t6PF06FnrKztDBg ONDe0+z/HSGFxKwT9wf8U2352DfqEigvAemDDFpXp/z7gpHz6/c+WLwBQZk52hRu CO3PS0YRLu9WpMDLXOoMdGvj3GZ5Vqy4NQo4sO90mm0CVB6IDDo4tDbp9f9dDq5S QieBx3ZT+tHmIP7Ij9ZjsIthA1/tgVr3EphXIXs3hszM3EA3GEmi5FFJRBMVUjVF XxT1OyWKnf3nvP2why58cmCFasTK2p2SCJ03l1UNGIDkfKIM1faB+3cHNzKRAgMB AAGjggTwMIIE7DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLbHMRz2imnKfW8toF3H XcqfXwXsMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggOXBgNVHREEggOOMIIDioITbmV3LXN0YXR1cy51Y3NkLmVkdYIW c3RhdHVzLWFwaS5rbmV3dG9uLmNvbYIRc3RhdHVzLmFjbGdyYy5jb22CGXN0YXR1 cy5hY3RpdmVwcm9zcGVjdC5jb22CFHN0YXR1cy5hbXBsaXR1ZGUuY29tghNzdGF0 dXMuYW5zYXJhZGEuY29tghFzdGF0dXMuYXBhY2hlLm9yZ4IRc3RhdHVzLmFwaWdl ZS5jb22CFHN0YXR1cy5iYW5kd2lkdGguY29tghRzdGF0dXMuYmx1ZWNvbmljLmNv bYIWc3RhdHVzLmJyaWdodHBlYXJsLmNvbYIec3RhdHVzLmNhbGx0cmFja2luZ21l dHJpY3MuY29tgg9zdGF0dXMuY29pbnMucGiCEXN0YXR1cy5kZXB1dHkuY29tghRz dGF0dXMuZXhpbWNoYWluLmNvbYISc3RhdHVzLmV4b3NpdGUuY29tghFzdGF0dXMu Z2xlc3lzLmNvbYIWc3RhdHVzLmdsb2JhbHJlbGF5LmNvbYIWc3RhdHVzLmdvc3Bv dGNoZWNrLmNvbYIZc3RhdHVzLmhvc3RlZGdyYXBoaXRlLmNvbYIQc3RhdHVzLmty YWtlbi5pb4IRc3RhdHVzLmxpbm9kZS5jb22CFXN0YXR1cy5tb2JpbGVpcm9uLmNv bYISc3RhdHVzLm5leHRpdmEuY29tgh1zdGF0dXMubm90b250aGVoaWdoc3RyZWV0 LmNvbYIQc3RhdHVzLnBsaXZvLmNvbYIac3RhdHVzLnByZWNpc2lvbmxlbmRlci5j b22CF3N0YXR1cy5yYWluZm9yZXN0cWEuY29tghRzdGF0dXMucmptZXRyaWNzLmNv bYISc3RhdHVzLnJvc2V0dGUuY29tghZzdGF0dXMuc21hcnR0aGluZ3MuY29tghNz dGF0dXMudGVhbXdvcmsuY29tghVzdGF0dXMudHJhZGVnZWNrby5jb22CD3N0YXR1 cy51Y3NkLmVkdYITc3RhdHVzLnVuYm91bmNlLmNvbYIXc3RhdHVzLnVyYmFuYWly c2hpcC5jb22CI3N0YXR1c3BhZ2UuZ290aGVuYnVyZ2JpdGZhY3Rvcnkub3JnghN0 cnVzdC5qaXR0ZXJiaXQuY29tghR0cnVzdC5tb2JpbGVpcm9uLmNvbYIZdXB0aW1l LmFjdGl2ZXByb3NwZWN0LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRXWzl0b lOniRLaD68VI0EGbRinUoEXvptJBW4lezgjwt2+AEw7KYsNZJa6XtBmD33Kam7My jJN36V2h87FZgBahE8cQD/7L6skoz8Gmu5Qnc4JeGfDoy8KpBYokj6johY6XzVYL 9XgsNJDcs9LZKv8LWqxRgV5m1fxAM83IhNJfsDJInoYNgsiaT64hQ4gP6HPCkvW+ wQdXMBBy1oj70afgV0R1FuagN8zFI+CS7voTLEyg5B2pQ8iYF1SLrNdyRqMgY1y4 8E73XIKsnxHRbPqBOS23kulKFggGDtTmrySl1+xIP/mSSzpb+1kQPoY89imdWrf5 8C8620jfN9zBSg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMKf/wamHUGZdZlGUjoM BS+wVJEwphdi3QL+saGQ8sleJDmWnMlFGjcEWiLNenDo5JNF1rY1QP7ejxdOhZ6y s7QwYDjQ3tPs/x0hhcSsE/cH/FNt+dg36hIoLwHpgwxaV6f8+4KR8+v3Pli8AUGZ OdoUbgjtz0tGES7vVqTAy1zqDHRr49xmeVasuDUKOLDvdJptAlQeiAw6OLQ26fX/ XQ6uUkIngcd2U/rR5iD+yI/WY7CLYQNf7YFa9xKYVyF7N4bMzNxANxhJouRRSUQT FVI1RV8U9Tslip3957z9sIcufHJghWrEytqdkgidN5dVDRiA5HyiDNX2gft3Bzcy kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 342410229348114359859576455672098050185596 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 18:52:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 18:52:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'new-status.ucsd.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25848587370215819424881810345142566063181379695684694624891978831967085991255874933461871994934339854720808033026960558152246824694982229742227324098662783785699499239637324193001525310988673924057089297553362212873229081397147977394500574775010477521002977712728160112001527843118658761768316383691174350544622304629063325411485954911980885470320642159548403451115191705552317244634253686461453963880622924670549839868926029413677146850702103272227132485562280556703952691166063959388690497188346749323433117090470667036755894887845740301373093468498087367971099711879321764423743672006656627317381458851838532465297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b6c7311cf68a69ca7d6f2da05dc75dca9f5f05ec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (910 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-status.ucsd.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-api.knewton.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.aclgrc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.activeprospect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.amplitude.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ansarada.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.apache.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.apigee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bandwidth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.blueconic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.brightpearl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.calltrackingmetrics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coins.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.deputy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.eximchain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.exosite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.glesys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.globalrelay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gospotcheck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hostedgraphite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.kraken.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.linode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mobileiron.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nextiva.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.notonthehighstreet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.plivo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.precisionlender.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rainforestqa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rjmetrics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rosette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.smartthings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.teamwork.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tradegecko.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ucsd.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.unbounce.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.urbanairship.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage.gothenburgbitfactory.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.jitterbit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.mobileiron.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptime.activeprospect.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009915d6ce5d1b94e9e244b683ebc548d0419b4629d4a045efa6d2415b895ece08f0b76f80130eca62c35925ae97b41983df729a9bb3328c9377e95da1f3b1598016a113c7100ffecbeac928cfc1a6bb942773825e19f0e8cbc2a9058a248fa8e8858e97cd560bf5782c3490dcb3d2d92aff0b5aac51815e66d5fc4033cdc884d25fb032489e860d82c89a4fae2143880fe873c292f5bec10757301072d688fbd1a7e057447516e6a037ccc523e092eefa132c4ca0e41da943c89817548bacd77246a320635cb8f04ef75c82ac9f11d16cfa81392db792e94a1608060ed4e6af24a5d7ec483ff9924b3a5bfb59103e863cf6299d5ab7f9f02f3adb48df37dcc14a