api-platform-status.production.tax.service.gov.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:99:82:0c:9c:fc:b0:a6:d5:f7:a5:6d:8b:bf:a7:7d:21:41 was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-platform-status.production.tax.service.gov.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:82:0c:9c:fc:b0:a6:d5:f7:a5:6d:8b:bf:a7:7d:21:41
Serial Number (int): 313572925065274732508279189673218431328577
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:c3:c5:9e:40:14:b0:aa:62:7a:5b:e1:17:f2:ad:91:01:c7:39:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:c7:ab:20:54:6e:63:b1:31:4a:9c:30:28:5a:39:91:df:d0:ee:39
Fingerprint (sha256): 18:6e:f7:9b:d8:48:7d:22:77:49:e2:90:90:6b:64:f2:fc:f9:d1:51:8f:ea:85:ec:5f:98:f2:82:3c:c4:62:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api-platform-status.production.tax.service.gov.uk

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-platform-status.production.tax.service.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-platform-status.production.tax.service.gov.uk
ey-nextwave.status.subvrsive.com
status-goto-developer.logmeininc.com
status.1-stop.biz
status.accufundonline.com
status.cirrusinsight.com
status.coinmarketcap.com
status.extole.com
status.globaldataconsortium.com
status.gotomeeting.com
status.gototraining.com
status.gotowebinar.com
status.grammarly.com
status.grasshopper.com
status.hive.hr
status.idrift.no
status.inwebo.com
status.jive.com
status.join.me
status.layerstack.com
status.logmeinaccess.com
status.logmeinremotesupport.com
status.meetviva.com
status.naga.com
status.nexonia.com
status.nomical.com
status.nscom.com
status.opentechalliance.com
status.rebelmouse.com
status.rectanglehealth.com
status.redcanary.com
status.sealights.io
status.sparkhire.com
status.storefeeder.com
status.vtex.com
status.vtex.com.br
status.workast.com
statuspage.keeper.io

Other certificates including the domain name tax.service.gov.uk

(limited to 100 certificates)
landscape.production.tools.tax.service.gov.uk
developer.service.hmrc.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
admin.staging.tax.service.gov.uk
api.externaltest.tax.service.gov.uk
api.development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
open.artefacts.tax.service.gov.uk
cip-canary-service-10-42.development.cip-paas.tax.service.gov.uk
dis.tax.service.gov.uk
childcare.tax.service.gov.uk
childcare.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
*.development.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
lab02.build.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
platapps-live.tax.service.gov.uk
www.prototypes.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
kibana.internal-lab04.telemetry.tax.service.gov.uk
maps-11-987.development.cip-paas.tax.service.gov.uk
*.live.platops.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-8-55.development.cip-paas.tax.service.gov.uk
online.hmrc.gov.uk
www.staging.tax.service.gov.uk
cname-acs-fast-stream.development.tax.service.gov.uk
development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
mdtp-system.platapps-labs.tax.service.gov.uk
confluence.staging.tools.tax.service.gov.uk
grafana-alerting.internal-lab01.telemetry.tax.service.gov.uk
elasticsearch.internal-staging.telemetry.tax.service.gov.uk
selfservice.staging.tools.tax.service.gov.uk
*.tax.service.gov.uk
online.hmrc.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
*.internal-lab03.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
jira.staging.tools.tax.service.gov.uk
dis.qa.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
bank-account-insights.staging.cip-app.tax.service.gov.uk
platapps-labs.tax.service.gov.uk
test-transaction-engine.tax.service.gov.uk
cname-jons-ccn2.integration.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
cip-canary-service-2-38.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
dis.qa.tax.service.gov.uk
*.integration.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
qa.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
lab02.artefacts.tax.service.gov.uk
cname-jons-transaction-engine.integration.tax.service.gov.uk
api.integration.tax.service.gov.uk
paas-sample-2732-150.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
design.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
paas-sample-2-38.development.cip-paas.tax.service.gov.uk
platapps-platops-sandbox.tax.service.gov.uk
kibana.mdtp-staging.telemetry.tax.service.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
kibana.internal-lab03.telemetry.tax.service.gov.uk
*.tax.service.gov.uk
paas-sample-2703-144.development.cip-paas.tax.service.gov.uk
lab03.externaltest.testing.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
cip-canary-service-5-23.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
api.staging.tax.service.gov.uk
trigger.lab03.prototypes.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
status-tool.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-11-73.development.cip-paas.tax.service.gov.uk
elasticsearch.internal-lab02.telemetry.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
mediastorage-alb.staging.tools.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
api.development.tax.service.gov.uk
cname-transaction-engine.staging.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
*.labs.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
user-management-dod-1397.poc.sandbox.tools.tax.service.gov.uk
transaction-engine.development.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
*.integration.tax.service.gov.uk

Certificate

The complete raw certificate details for api-platform-status.production.tax.service.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+DQ03QrakLs3Jifd5D2
ZQdokLTCFPVMTrRtnYF0cXKnCrg4Cx7FqbAssrsY7y6m4pD31gF+64CxthRPVW3/
g2KsfKofsc/UaGdj+FpTU8SIvO8+b4SQMrNe3jybrxVE2T7V/w5lQk1jQQIRRkfc
b4DVmrFvSWn23p9lCagUCYdh6fN5eTC+Og3MEocnJhArhxP7X598+WpimURUBxg2
Z/vtC0soNKij4CSxiZDqTa118o5OCNJNOJWBwe7pzo5taUOaKUMLDXsUkalweW9u
pMnTNQg522ljOtHwNk2pkLOqyNI/eoiX8bYPV0PgAtVbG9ns/msTKNXKxH+KETHI
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313572925065274732508279189673218431328577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-27 20:22:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-25 20:22:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-platform-status.production.tax.service.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26242189894562810719696427632050369223099193170584975124260691062617189763570580805186102865938340471662794259300600039898537347602786832474481159939555530911434536209501196983328076031135595876719581614397155738458586360948795850248306209835024035289409451237998386708414152585399638271098559783979649584236511042127198389767924550207104451918466220607075845481872061363635099187222985381418173319360042519505803102051175799097406988446863263405778101544408158680167523346150897628367633810474248332261173785419264513296622060162410455154995650157018535563352941532680185776071820561115107430872830116474105233524921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81c3c59e4014b0aa627a5be117f2ad9101c73949
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (908 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-platform-status.production.tax.service.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey-nextwave.status.subvrsive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-goto-developer.logmeininc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.1-stop.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accufundonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cirrusinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coinmarketcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.extole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.globaldataconsortium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gotomeeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gototraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gotowebinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grammarly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grasshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hive.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.idrift.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inwebo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.jive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.join.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.layerstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.logmeinaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.logmeinremotesupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.meetviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.naga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nexonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nomical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nscom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.opentechalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rebelmouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rectanglehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.redcanary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sealights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sparkhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.storefeeder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vtex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vtex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.workast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage.keeper.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000182418a4fd70000040300483046022100dc556d988a36a0426f7d8feb8d8fd3da4ac6d83931e8d016e1819cf47c49c305022100e2c03d9fe009223da92abf0cd8960b8fe4a73ea7dfe5c9fce865cac6b30e441500750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000182418a50850000040300463044022029b585904dc4fbbca463dec343ffbd545e58e6810a9a886e792490ad37d9662d022045beae046e1d7815d9c2705e203e2d5b4e9180a4a063af3503abc11afe0042e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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