groove.kiva.org
Issued by R3
About this certificate
This digital certificate with serial number 04:03:44:1f:1d:8f:db:83:dd:c6:41:be:25:09:cd:49:c1:45 was issued on by Let's Encrypt.
With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=groove.kiva.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:03:44:1f:1d:8f:db:83:dd:c6:41:be:25:09:cd:49:c1:45Serial Number (int): 349560539892307233215071337120099061055813
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3e:13:9d:80:a7:12:35:2d:d3:e2:69:54:9c:70:e6:da:32:9a:69:61
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 87:13:e5:99:b7:00:2b:af:30:21:6c:d4:f0:b4:d8:b9:a8:7b:9a:3c
Fingerprint (sha256): 1f:05:ba:7d:91:70:81:a0:d2:f6:6f:0d:80:71:c9:92:97:43:2f:3c:16:00:d5:22:05:7e:38:4f:62:a5:94:e8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate groove.kiva.org
49
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for groove.kiva.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.grooveapp.com
branded.groove.co
branded.grooveapp.com
engine.groove.co
groove-engine.herokuapp.com
groove.adpearance.com
groove.appspace.com
groove.appzen.com
groove.avidratings.com
groove.buildium.com
groove.cloudgizmos.com
groove.cloudleaf.io
groove.crossover.com
groove.ehlinks.com
groove.elastic.co
groove.everquote.com
groove.fundera.com
groove.g2.com
groove.gocanvas.com
groove.goswift.ly
groove.groove.co
groove.grooveapp.com
groove.grvlnk.com
groove.grvlnk1.com
groove.jebbit.com
groove.joincoalition.com
groove.kenshoo.com
groove.kiva.org
groove.konghq.com
groove.learnship.com
groove.litmusteam.com
groove.lyric.com
groove.national.biz
groove.observepoint.com
groove.origamirisk.com
groove.placeexchange.com
groove.poppulo.com
groove.rapidapi.com
groove.robinpowered.com
groove.simondata.com
groove.swivl.com
groove.uber.com
groove.vipinsiders.com
groove.wellright.com
groove.workfront.com
groove.zappistore.com
groove.zenreach.com
groove.zydoc.com
private.groove.co
branded.groove.co
branded.grooveapp.com
engine.groove.co
groove-engine.herokuapp.com
groove.adpearance.com
groove.appspace.com
groove.appzen.com
groove.avidratings.com
groove.buildium.com
groove.cloudgizmos.com
groove.cloudleaf.io
groove.crossover.com
groove.ehlinks.com
groove.elastic.co
groove.everquote.com
groove.fundera.com
groove.g2.com
groove.gocanvas.com
groove.goswift.ly
groove.groove.co
groove.grooveapp.com
groove.grvlnk.com
groove.grvlnk1.com
groove.jebbit.com
groove.joincoalition.com
groove.kenshoo.com
groove.kiva.org
groove.konghq.com
groove.learnship.com
groove.litmusteam.com
groove.lyric.com
groove.national.biz
groove.observepoint.com
groove.origamirisk.com
groove.placeexchange.com
groove.poppulo.com
groove.rapidapi.com
groove.robinpowered.com
groove.simondata.com
groove.swivl.com
groove.uber.com
groove.vipinsiders.com
groove.wellright.com
groove.workfront.com
groove.zappistore.com
groove.zenreach.com
groove.zydoc.com
private.groove.co
Other certificates including the domain name kiva.org
(limited to 100 certificates)
devvm-api.dk1.kiva.org
secure.novica.com
secure.novica.com
*.stage.kiva.org
*.stage.kiva.org
gender.kiva.org
masterbooker.com
lend.kiva.org
groove.ehlinks.com
jespergustafsson.com
secure.novica.com
*.dev.kiva.org
groove.simondata.com
careers.kiva.org
partnerships.kiva.org
sni.cloudflaressl.com
login.kiva.org
www.marlim.co
*.dev.kiva.org
groove.robinpowered.com
*.dev.kiva.org
www.kiva.org
lend.kiva.org
www.gender.kiva.org
sgchuscpje.device.sighub.ch
go.kiva.org
groove.swivl.com
www.gender.kiva.org
groove.lyric.com
partnerships.kiva.org
groove.kiva.org
links.kiva.org
www.starterplus.net
login.kiva.org
groove.ehlinks.com
secure.novica.com
cdn.steviewonder.es
lend.kiva.org
partnerships.kiva.org
groove.jebbit.com
lend.kiva.org
www.refugees.kiva.org
us.kiva.org
groove.jebbit.com
admin-api.k1.kiva.org
go.kiva.org
*.kiva.org
www.kiva.org
groove.adpearance.com
*.stage.kiva.org
*.kiva.org
educathours.com
secure.novica.com
groove.cloudleaf.io
*.kiva.org
secure.novica.com
www.refugees.kiva.org
login.kiva.org
novica.com
*.kiva.org
login.kiva.org
www.labs.kiva.org
www.dashboard.geotargetly.com
gender.kiva.org
groove.kiva.org
www.refugees.kiva.org
groove.trustarc.com
novica.com
viska.com
*.kiva.org
sg.travelrank.org
go.kiva.org
secure.novica.com
login.qa.kiva.org
*.qa.kiva.org
branded.grooveapp.com
us.kiva.org
groove.g2.com
groove.uber.com
www.webboot.io
refugees.kiva.org
careers.kiva.org
wordscanner.app
*.kiva.org
*.kiva.org
careers.kiva.org
sdk.sl.kiva.org
*.dev.kiva.org
*.stage.kiva.org
*.kiva.org
us.kiva.org
wordscanner.app
*.dk1.kiva.org
admin-api.dk1.kiva.org
careers.kiva.org
*.dev.kiva.org
*.dev.kiva.org
marketplace-api.k1.kiva.org
bjuttflix.niels.me
groove.crossover.com
secure.novica.com
secure.novica.com
*.stage.kiva.org
*.stage.kiva.org
gender.kiva.org
masterbooker.com
lend.kiva.org
groove.ehlinks.com
jespergustafsson.com
secure.novica.com
*.dev.kiva.org
groove.simondata.com
careers.kiva.org
partnerships.kiva.org
sni.cloudflaressl.com
login.kiva.org
www.marlim.co
*.dev.kiva.org
groove.robinpowered.com
*.dev.kiva.org
www.kiva.org
lend.kiva.org
www.gender.kiva.org
sgchuscpje.device.sighub.ch
go.kiva.org
groove.swivl.com
www.gender.kiva.org
groove.lyric.com
partnerships.kiva.org
groove.kiva.org
links.kiva.org
www.starterplus.net
login.kiva.org
groove.ehlinks.com
secure.novica.com
cdn.steviewonder.es
lend.kiva.org
partnerships.kiva.org
groove.jebbit.com
lend.kiva.org
www.refugees.kiva.org
us.kiva.org
groove.jebbit.com
admin-api.k1.kiva.org
go.kiva.org
*.kiva.org
www.kiva.org
groove.adpearance.com
*.stage.kiva.org
*.kiva.org
educathours.com
secure.novica.com
groove.cloudleaf.io
*.kiva.org
secure.novica.com
www.refugees.kiva.org
login.kiva.org
novica.com
*.kiva.org
login.kiva.org
www.labs.kiva.org
www.dashboard.geotargetly.com
gender.kiva.org
groove.kiva.org
www.refugees.kiva.org
groove.trustarc.com
novica.com
viska.com
*.kiva.org
sg.travelrank.org
go.kiva.org
secure.novica.com
login.qa.kiva.org
*.qa.kiva.org
branded.grooveapp.com
us.kiva.org
groove.g2.com
groove.uber.com
www.webboot.io
refugees.kiva.org
careers.kiva.org
wordscanner.app
*.kiva.org
*.kiva.org
careers.kiva.org
sdk.sl.kiva.org
*.dev.kiva.org
*.stage.kiva.org
*.kiva.org
us.kiva.org
wordscanner.app
*.dk1.kiva.org
admin-api.dk1.kiva.org
careers.kiva.org
*.dev.kiva.org
*.dev.kiva.org
marketplace-api.k1.kiva.org
bjuttflix.niels.me
groove.crossover.com
Certificate
The complete raw certificate details for groove.kiva.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIILDCCBxSgAwIBAgISBANEHx2P24PdxkG+JQnNScFFMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTAyMTgxNDA4MTJaFw0yMTA1MTkxNDA4MTJaMBoxGDAWBgNVBAMT D2dyb292ZS5raXZhLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AO83cTzhuLiruiyv9MyEojVuF9bkRcFo8U7nD/w+BxZySznpUbOPDuI8SrZyggAg ExIf0UALaNb1s+F6O8VtV9mv7QD5jMokaUKhziMraqTIczzoSbsYDL8F39csRIt3 bLg5z7C0C6RQlTIo91UPeTj3WtmV9Sj3WwVH7bpNov4nsBAjvNPe4onk4hAaSTek PtwuYAN84MCjvhNgwi927NgB93I8JXx9whMn9wMNWrO9oXOmy2MXINhxiR98P6tw f57qX+zLLF+2/cYYsIYpkqPoihqYEAnLEVQ9eMeSkK5r6xco0IsLjItcyAE7revx iJFkg1S/XHeOxhDtwi45cG8CAwEAAaOCBVIwggVOMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUPhOdgKcSNS3T4mlUnHDm2jKaaWEwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wggQTBgNVHREEggQKMIIEBoIRYXBwLmdyb292ZWFwcC5jb22CEWJyYW5kZWQu Z3Jvb3ZlLmNvghVicmFuZGVkLmdyb292ZWFwcC5jb22CEGVuZ2luZS5ncm9vdmUu Y2+CG2dyb292ZS1lbmdpbmUuaGVyb2t1YXBwLmNvbYIVZ3Jvb3ZlLmFkcGVhcmFu Y2UuY29tghNncm9vdmUuYXBwc3BhY2UuY29tghFncm9vdmUuYXBwemVuLmNvbYIW Z3Jvb3ZlLmF2aWRyYXRpbmdzLmNvbYITZ3Jvb3ZlLmJ1aWxkaXVtLmNvbYIWZ3Jv b3ZlLmNsb3VkZ2l6bW9zLmNvbYITZ3Jvb3ZlLmNsb3VkbGVhZi5pb4IUZ3Jvb3Zl LmNyb3Nzb3Zlci5jb22CEmdyb292ZS5laGxpbmtzLmNvbYIRZ3Jvb3ZlLmVsYXN0 aWMuY2+CFGdyb292ZS5ldmVycXVvdGUuY29tghJncm9vdmUuZnVuZGVyYS5jb22C DWdyb292ZS5nMi5jb22CE2dyb292ZS5nb2NhbnZhcy5jb22CEWdyb292ZS5nb3N3 aWZ0Lmx5ghBncm9vdmUuZ3Jvb3ZlLmNvghRncm9vdmUuZ3Jvb3ZlYXBwLmNvbYIR Z3Jvb3ZlLmdydmxuay5jb22CEmdyb292ZS5ncnZsbmsxLmNvbYIRZ3Jvb3ZlLmpl YmJpdC5jb22CGGdyb292ZS5qb2luY29hbGl0aW9uLmNvbYISZ3Jvb3ZlLmtlbnNo b28uY29tgg9ncm9vdmUua2l2YS5vcmeCEWdyb292ZS5rb25naHEuY29tghRncm9v dmUubGVhcm5zaGlwLmNvbYIVZ3Jvb3ZlLmxpdG11c3RlYW0uY29tghBncm9vdmUu bHlyaWMuY29tghNncm9vdmUubmF0aW9uYWwuYml6ghdncm9vdmUub2JzZXJ2ZXBv aW50LmNvbYIWZ3Jvb3ZlLm9yaWdhbWlyaXNrLmNvbYIYZ3Jvb3ZlLnBsYWNlZXhj aGFuZ2UuY29tghJncm9vdmUucG9wcHVsby5jb22CE2dyb292ZS5yYXBpZGFwaS5j b22CF2dyb292ZS5yb2JpbnBvd2VyZWQuY29tghRncm9vdmUuc2ltb25kYXRhLmNv bYIQZ3Jvb3ZlLnN3aXZsLmNvbYIPZ3Jvb3ZlLnViZXIuY29tghZncm9vdmUudmlw aW5zaWRlcnMuY29tghRncm9vdmUud2VsbHJpZ2h0LmNvbYIUZ3Jvb3ZlLndvcmtm cm9udC5jb22CFWdyb292ZS56YXBwaXN0b3JlLmNvbYITZ3Jvb3ZlLnplbnJlYWNo LmNvbYIQZ3Jvb3ZlLnp5ZG9jLmNvbYIRcHJpdmF0ZS5ncm9vdmUuY28wTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ KoZIhvcNAQELBQADggEBAB1PLC2PXIQS5xnS3ki6fWKj6oQQu50r06sG6Ji6HFoT 587pFfX68+Iy90caaTUoT5dN6jPR8KCzfKe6zmjD68QmmOcLxkhYcR76VJfzlIBQ qG76LbzTupaPDbVNTzNzQhPUczhDUWa2Mfpdn4IU1VNtnh6cu+ORZtEAS97Xyd64 htt/c43BBBf9CRNL3NuE4Hae4qQrz3/y7ovfeH0XwQycNxEXZWNHymm40Jb+p42r LsMkxsUdcPjRTADyY4+jGgN0hWBJxNMj6owfpQYoPSn9mb1e5LxGj92g0KBfXKI+ 63O8tSqzWniSnrnE3+IeaTfY+soKE53j1KEYegzrgPI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zdxPOG4uKu6LK/0zISi NW4X1uRFwWjxTucP/D4HFnJLOelRs48O4jxKtnKCACATEh/RQAto1vWz4Xo7xW1X 2a/tAPmMyiRpQqHOIytqpMhzPOhJuxgMvwXf1yxEi3dsuDnPsLQLpFCVMij3VQ95 OPda2ZX1KPdbBUftuk2i/iewECO8097iieTiEBpJN6Q+3C5gA3zgwKO+E2DCL3bs 2AH3cjwlfH3CEyf3Aw1as72hc6bLYxcg2HGJH3w/q3B/nupf7MssX7b9xhiwhimS o+iKGpgQCcsRVD14x5KQrmvrFyjQiwuMi1zIATut6/GIkWSDVL9cd47GEO3CLjlw bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 349560539892307233215071337120099061055813 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-18 14:08:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-19 14:08:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'groove.kiva.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30198294521352743648283435430721485599681319224356580242841120490099317610100582819368562848547273436537634975200457670977563106947654049404632056383280889834654539269524738352565707942675886846638446439203674284369381239581356348183732301750835852703735999040043479188504556397139857762151149320402947803318670771056556267415459473083520032086051378737256272367648774892995820941750657599186753984051628950249280765146695642167816475658220668646217137187020304538168631727860441548989981356595243334974818769309135469787906254934287007843649023470631722181667398377735495035757835631115952187953542947506515720368239 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3e139d80a712352dd3e269549c70e6da329a6961 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1034 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.grooveapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branded.groove.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branded.grooveapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engine.groove.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove-engine.herokuapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.adpearance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.appspace.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.appzen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.avidratings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.buildium.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.cloudgizmos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.cloudleaf.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.crossover.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.ehlinks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.elastic.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.everquote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.fundera.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.g2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.gocanvas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.goswift.ly' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.groove.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.grooveapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.grvlnk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.grvlnk1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.jebbit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.joincoalition.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.kenshoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.kiva.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.konghq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.learnship.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.litmusteam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.lyric.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.national.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.observepoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.origamirisk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.placeexchange.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.poppulo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.rapidapi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.robinpowered.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.simondata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.swivl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.uber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.vipinsiders.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.wellright.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.workfront.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.zappistore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.zenreach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.zydoc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.groove.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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