3down.mit.edu
Issued by R3
About this certificate
This digital certificate with serial number 03:da:0a:bf:f1:60:a1:56:62:94:ec:dc:e1:fb:81:31:d4:71 was issued on by Let's Encrypt.
With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=3down.mit.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:da:0a:bf:f1:60:a1:56:62:94:ec:dc:e1:fb:81:31:d4:71Serial Number (int): 335532702688419703886856223526859027108977
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 07:a3:37:a1:d5:c7:8e:e7:c3:60:71:46:9b:2a:75:6d:8c:09:af:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7e:d7:90:15:4c:14:8f:5d:cf:c3:87:43:18:2f:d8:d1:1d:f5:58:78
Fingerprint (sha256): 16:3e:26:95:f5:ca:96:86:46:0b:3d:4d:a6:88:1a:23:96:a7:c3:4a:6b:19:1a:12:1b:fc:b5:03:98:98:55:4d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 3down.mit.edu
40
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 3down.mit.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
3down.mit.edu
checkrstatus.com
ipstatus.ninetyone.com
productstatus.tavant.com
status.accedo.tv
status.aip.f5.com
status.aucerna.com
status.avalara.com
status.booqable.com
status.carear.com
status.cas.taxbit.com
status.chef.io
status.dispatch.me
status.dome9.com
status.elev.io
status.esendex.com
status.goshippo.com
status.hivestreaming.com
status.injixo.com
status.itfreedom.com
status.missioncloud.com
status.mocoapp.com
status.modelbit.com
status.myconnectedsite.com
status.omnigo.one
status.otoy.com
status.pusher.com
status.reevoo.com
status.resdiary.com
status.ringrevenue.com
status.rm.com
status.sa.ucsb.edu
status.skedulo.com
status.smartsheet.com
status.sparkpost.com
status.unbelievable-machine.com
status.woosmap.com
status.zaius.com
status.zero-one.cc
www.cloudflarestatus.com
checkrstatus.com
ipstatus.ninetyone.com
productstatus.tavant.com
status.accedo.tv
status.aip.f5.com
status.aucerna.com
status.avalara.com
status.booqable.com
status.carear.com
status.cas.taxbit.com
status.chef.io
status.dispatch.me
status.dome9.com
status.elev.io
status.esendex.com
status.goshippo.com
status.hivestreaming.com
status.injixo.com
status.itfreedom.com
status.missioncloud.com
status.mocoapp.com
status.modelbit.com
status.myconnectedsite.com
status.omnigo.one
status.otoy.com
status.pusher.com
status.reevoo.com
status.resdiary.com
status.ringrevenue.com
status.rm.com
status.sa.ucsb.edu
status.skedulo.com
status.smartsheet.com
status.sparkpost.com
status.unbelievable-machine.com
status.woosmap.com
status.zaius.com
status.zero-one.cc
www.cloudflarestatus.com
Other certificates including the domain name mit.edu
(limited to 100 certificates)
5692462144159744-fe3.pantheonsite.io
discussions.odl.mit.edu
frankwilczek.mit.edu
5671617594130432-fe3.pantheonsite.io
dreams.media.mit.edu
github-backup.mit.edu
www.wgs.mit.edu
bucket.mit.edu
cf-registration.mit.edu
tstormvideo.ll.mit.edu
clpi.mers.csail.mit.edu
bosefellows.mit.edu
ceepr.mit.edu
somtow-sucharitkul.mit.edu
us.prod.campusgroups.com
cliff-homepage.mcservices1.media.mit.edu
sloanfacultysearches.mit.edu
image.20210408.094303.s11.et.yellsatcloud.com
5724596284162048-fe2.pantheonsite.io
mailto.mit.edu
discussions-ci.odl.mit.edu
covid-stats.wi.mit.edu
bone.mit.edu
nothangout.media.mit.edu
eqaads.ll.mit.edu
listlottery-dev.mit.edu
crowdsensor.org
sciwrite.mit.edu
edu-apps-test.mit.edu
statuspage.io
maz.mit.edu
theta.mit.edu
rmerton.mit.edu
psirudahximenes.com
admissions.emeritus.org
mobilityofthefuture.mit.edu
dome-preview.mit.edu
www.borgeapps.eu
radius.mit.edu
5638203017003008-fe2.pantheonsite.io
aidm.mit.edu
tatacenter.mit.edu
newhouse.mit.edu
sloangroups.mit.edu
mitoc.mit.edu
meche-prod-app-2.mit.edu
olinda.mit.edu
ipespeakerseries.mit.edu
probcomp-2.csail.mit.edu
5750683647082496-fe3.pantheonsite.io
boyerlab.mit.edu
fryonthefly.mit.edu
silvaire.mit.edu
imes-fmp.mit.edu
git.mers.csail.mit.edu
us.prod.campusgroups.com
aldy.csail.mit.edu
beeme.mit.edu
alm.mit.edu
www.gcws.mit.edu
www.create.mit.edu
infiniteseries.mit.edu
mri-rle.mit.edu
5636026810761216-fe1.pantheonsite.io
hsf1.csail.mit.edu
ceepr.mit.edu
ceipostdoc.mit.edu
socialphysics.media.mit.edu
think.mit.edu
hilary.mit.edu
cce.mit.edu
medg.lcs.mit.edu
clubsports.mit.edu
clubareawest.alumclub.mit.edu
ikim.mit.edu
capco-status.polaris.synopsys.com
sdm.mit.edu
msm-dsoos.mit.edu
visor.mit.edu
education.mit.edu
classrooms.mit.edu
terrascope.mit.edu
5638203017003008-fe2.pantheonsite.io
unhangout.media.mit.edu
atlas.mit.edu
www.sloan-hbc.mit.edu
j3.shared.global.fastly.net
cfg2018.csail.mit.edu
ogs.mit.edu
paulbert.media.mit.edu
stat-stage.mit.edu
oc11-jabber-2.mit.edu
j3.shared.global.fastly.net
darts.mit.edu
skullhouse.mit.edu
5636026810761216-fe1.pantheonsite.io
techspace.mit.edu
hkn.mit.edu
create.mit.edu
hecsh1web01.mit.edu
discussions.odl.mit.edu
frankwilczek.mit.edu
5671617594130432-fe3.pantheonsite.io
dreams.media.mit.edu
github-backup.mit.edu
www.wgs.mit.edu
bucket.mit.edu
cf-registration.mit.edu
tstormvideo.ll.mit.edu
clpi.mers.csail.mit.edu
bosefellows.mit.edu
ceepr.mit.edu
somtow-sucharitkul.mit.edu
us.prod.campusgroups.com
cliff-homepage.mcservices1.media.mit.edu
sloanfacultysearches.mit.edu
image.20210408.094303.s11.et.yellsatcloud.com
5724596284162048-fe2.pantheonsite.io
mailto.mit.edu
discussions-ci.odl.mit.edu
covid-stats.wi.mit.edu
bone.mit.edu
nothangout.media.mit.edu
eqaads.ll.mit.edu
listlottery-dev.mit.edu
crowdsensor.org
sciwrite.mit.edu
edu-apps-test.mit.edu
statuspage.io
maz.mit.edu
theta.mit.edu
rmerton.mit.edu
psirudahximenes.com
admissions.emeritus.org
mobilityofthefuture.mit.edu
dome-preview.mit.edu
www.borgeapps.eu
radius.mit.edu
5638203017003008-fe2.pantheonsite.io
aidm.mit.edu
tatacenter.mit.edu
newhouse.mit.edu
sloangroups.mit.edu
mitoc.mit.edu
meche-prod-app-2.mit.edu
olinda.mit.edu
ipespeakerseries.mit.edu
probcomp-2.csail.mit.edu
5750683647082496-fe3.pantheonsite.io
boyerlab.mit.edu
fryonthefly.mit.edu
silvaire.mit.edu
imes-fmp.mit.edu
git.mers.csail.mit.edu
us.prod.campusgroups.com
aldy.csail.mit.edu
beeme.mit.edu
alm.mit.edu
www.gcws.mit.edu
www.create.mit.edu
infiniteseries.mit.edu
mri-rle.mit.edu
5636026810761216-fe1.pantheonsite.io
hsf1.csail.mit.edu
ceepr.mit.edu
ceipostdoc.mit.edu
socialphysics.media.mit.edu
think.mit.edu
hilary.mit.edu
cce.mit.edu
medg.lcs.mit.edu
clubsports.mit.edu
clubareawest.alumclub.mit.edu
ikim.mit.edu
capco-status.polaris.synopsys.com
sdm.mit.edu
msm-dsoos.mit.edu
visor.mit.edu
education.mit.edu
classrooms.mit.edu
terrascope.mit.edu
5638203017003008-fe2.pantheonsite.io
unhangout.media.mit.edu
atlas.mit.edu
www.sloan-hbc.mit.edu
j3.shared.global.fastly.net
cfg2018.csail.mit.edu
ogs.mit.edu
paulbert.media.mit.edu
stat-stage.mit.edu
oc11-jabber-2.mit.edu
j3.shared.global.fastly.net
darts.mit.edu
skullhouse.mit.edu
5636026810761216-fe1.pantheonsite.io
techspace.mit.edu
hkn.mit.edu
create.mit.edu
hecsh1web01.mit.edu
Certificate
The complete raw certificate details for 3down.mit.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIVTCCBz2gAwIBAgISA9oKv/FgoVZilOzc4fuBMdRxMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MTUxNzQ0MDhaFw0yMzA4MTMxNzQ0MDdaMBgxFjAUBgNVBAMT DTNkb3duLm1pdC5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ CTYINTmwm2rDl1Y8rokobgKLb/Siu+wUNcAzdjptII+6Q1gRO/7dkRIdio7GYeUX XRvYa4wrDL+kDfv3HZ+qV+I27T3JrlpjEdO8JykDxRYX8ZqBSeH0QleZqKAhkQ5Z oliqvBKmu848ZSdMaYb+k1oEwtwEtdtmtfW1SJmBcswQwYRSZe0cRMrx3SZ4jwZq BBvEznsudz964q98xkE0iLgqQjBUwIcTrqpCymLPSgsNSIPPr8nBJMn6383mkNP3 w9eU09TQ//N9VhWjakj4IWvE2KTfk7KrF0lgZKPWXAn8YkCnD2O7HI5qsuQwzuu8 Pj2j7CcyWnlOM/ayTFtXAgMBAAGjggV9MIIFeTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFAejN6HVx47nw2BxRpsqdW2MCa9vMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MIIDTAYDVR0RBIIDQzCCAz+CDTNkb3duLm1pdC5lZHWCEGNoZWNrcnN0YXR1cy5j b22CFmlwc3RhdHVzLm5pbmV0eW9uZS5jb22CGHByb2R1Y3RzdGF0dXMudGF2YW50 LmNvbYIQc3RhdHVzLmFjY2Vkby50doIRc3RhdHVzLmFpcC5mNS5jb22CEnN0YXR1 cy5hdWNlcm5hLmNvbYISc3RhdHVzLmF2YWxhcmEuY29tghNzdGF0dXMuYm9vcWFi bGUuY29tghFzdGF0dXMuY2FyZWFyLmNvbYIVc3RhdHVzLmNhcy50YXhiaXQuY29t gg5zdGF0dXMuY2hlZi5pb4ISc3RhdHVzLmRpc3BhdGNoLm1lghBzdGF0dXMuZG9t ZTkuY29tgg5zdGF0dXMuZWxldi5pb4ISc3RhdHVzLmVzZW5kZXguY29tghNzdGF0 dXMuZ29zaGlwcG8uY29tghhzdGF0dXMuaGl2ZXN0cmVhbWluZy5jb22CEXN0YXR1 cy5pbmppeG8uY29tghRzdGF0dXMuaXRmcmVlZG9tLmNvbYIXc3RhdHVzLm1pc3Np b25jbG91ZC5jb22CEnN0YXR1cy5tb2NvYXBwLmNvbYITc3RhdHVzLm1vZGVsYml0 LmNvbYIac3RhdHVzLm15Y29ubmVjdGVkc2l0ZS5jb22CEXN0YXR1cy5vbW5pZ28u b25lgg9zdGF0dXMub3RveS5jb22CEXN0YXR1cy5wdXNoZXIuY29tghFzdGF0dXMu cmVldm9vLmNvbYITc3RhdHVzLnJlc2RpYXJ5LmNvbYIWc3RhdHVzLnJpbmdyZXZl bnVlLmNvbYINc3RhdHVzLnJtLmNvbYISc3RhdHVzLnNhLnVjc2IuZWR1ghJzdGF0 dXMuc2tlZHVsby5jb22CFXN0YXR1cy5zbWFydHNoZWV0LmNvbYIUc3RhdHVzLnNw YXJrcG9zdC5jb22CH3N0YXR1cy51bmJlbGlldmFibGUtbWFjaGluZS5jb22CEnN0 YXR1cy53b29zbWFwLmNvbYIQc3RhdHVzLnphaXVzLmNvbYISc3RhdHVzLnplcm8t b25lLmNjghh3d3cuY2xvdWRmbGFyZXN0YXR1cy5jb20wTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB6MoxU2Lct tiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYgguh1QAAAEAwBHMEUCIEKQbknN Xw0YnZNeYoSy7cfstv9atKBCE+RPs1oQ5bxYAiEAn+uN9E0UmXRYjG6w9+cDBsG9 u6IEsgX4adFXq2GFDK0AdQCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yC igAAAYgguh1oAAAEAwBGMEQCIEzmqnJ4IpsbbCYTsPuewo/DQtJ6/tf1TI3zcg+P KqjGAiAw2dMaGpkjGqQUuWuO6sh6hihbW9Bj1R+z/Ma4VIA2wTANBgkqhkiG9w0B AQsFAAOCAQEAqmvaDtoo3SQUJVMxIO3G7fOpwjU/8haegNXCo5o5GkaG/NoNrVkP lLwn263Wx6j1e0a7U03fYRCqf8l0SD9JrHQdBkPQX55ey6hCifpF6/alNrye+eYG blZs/MGC8JaXPQSDzJX58y5mTnOPwxZiH7VX3Sxbq4SX/R8RmdPM6h33Z7U2ugGc TAHP6diAvRQssbtMqxB3oVCX85fiilCNq0Ztprs98HEAbWr3kR2XmN8QDauI80X6 ROvrKdiBu9bk3VDzT1G2W7Dn2G/OJ0qeTk+AoDSzFXnl9XHXjTa3p0+wRrAiPlWB 4p2cByCewZ5RZ9aq/1H4+9p/Cz9lq1RaJA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwk2CDU5sJtqw5dWPK6J KG4Ci2/0orvsFDXAM3Y6bSCPukNYETv+3ZESHYqOxmHlF10b2GuMKwy/pA379x2f qlfiNu09ya5aYxHTvCcpA8UWF/GagUnh9EJXmaigIZEOWaJYqrwSprvOPGUnTGmG /pNaBMLcBLXbZrX1tUiZgXLMEMGEUmXtHETK8d0meI8GagQbxM57Lnc/euKvfMZB NIi4KkIwVMCHE66qQspiz0oLDUiDz6/JwSTJ+t/N5pDT98PXlNPU0P/zfVYVo2pI +CFrxNik35OyqxdJYGSj1lwJ/GJApw9juxyOarLkMM7rvD49o+wnMlp5TjP2skxb VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335532702688419703886856223526859027108977 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-15 17:44:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-13 17:44:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3down.mit.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24116058392843704296950520143186536960043437268978940473371439843549131918375688147445673038182363608063018534071193371187853062619908185813374402042601706954857735944249964886230843875290208062253259201092963191109115159495500976547215861281176079499630657338464765751804153835654826749357245035226858963238880084119985053241700569447504057156573154017058236904031803568443056145596316754921026879106180756869144111973228555265283417829648931049562780152521513151248692330407830433764076293923581480167148979099860075663740599074240653407001027297449422039606717068263401043191086679620929545907266277392062058617687 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 07a337a1d5c78ee7c36071469b2a756d8c09af6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (835 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3down.mit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkrstatus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipstatus.ninetyone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productstatus.tavant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accedo.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.aip.f5.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.aucerna.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.avalara.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.booqable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.carear.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cas.taxbit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.chef.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dispatch.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dome9.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.elev.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.esendex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.goshippo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hivestreaming.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.injixo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.itfreedom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.missioncloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.mocoapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.modelbit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.myconnectedsite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.omnigo.one' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.otoy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pusher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.reevoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.resdiary.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ringrevenue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sa.ucsb.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.skedulo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.smartsheet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sparkpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.unbelievable-machine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.woosmap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.zaius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.zero-one.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudflarestatus.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018820ba1d500000040300473045022042906e49cd5f0d189d935e6284b2edc7ecb6ff5ab4a04213e44fb35a10e5bc580221009feb8df44d149974588c6eb0f7e70306c1bdbba204b205f869d157ab61850cad007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018820ba1d68000004030046304402204ce6aa7278229b1b6c2613b0fb9ec28fc342d27afed7f54c8df3720f8f2aa8c6022030d9d31a1a99231aa414b96b8eeac87a86285b5bd063d51fb3fcc6b8548036c1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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