local.knowre.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:89:98:0d:a5:30:79:c8:d5:69:58:c0:35:ae:fd:fe:38 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.knowre.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:89:98:0d:a5:30:79:c8:d5:69:58:c0:35:ae:fd:fe:38
Serial Number (int): 345569496166056545354943557983761042636344
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: df:9b:5d:d1:d4:f1:6c:71:22:35:d4:ba:a1:d8:72:e6:de:3e:3b:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:88:15:8c:83:9e:e3:e4:d9:3c:d3:7a:91:f0:f3:b4:d3:c2:bb:1a
Fingerprint (sha256): 23:bf:7b:da:19:a0:f2:bb:4c:fd:2f:f1:59:27:b7:1a:7d:00:25:00:82:37:95:60:28:81:fe:b8:2c:a5:08:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.knowre.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.knowre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adm.knowreinc.com
alasy-unstable.knowreapi.com
calc-tk-beta.knowreapi.com
calc-tk-stable.knowreapi.com
calc-tk-unstable.knowreapi.com
calc.knowreapp.com
caspa-tk-unstable.knowreapi.com
cd-adm-gray-c.knowreinc.com
cr-adm-gray-c.knowreinc.com
daekyo-beta.knowreapp.com
daekyo-kr-api-test.knowre.com
daekyo-kr-api.knowre.com
daekyo-stable.knowreapp.com
daekyo-unstable.knowreapp.com
daekyo.knowreapp.com
ebs-beta.knowreapp.com
ebs-proxy.knowreapp.com
ebs-stable.knowreapp.com
ebs-unstable.knowreapp.com
ebs.knowreapp.com
educoach-beta.knowreapp.com
educoach-stable.knowreapp.com
educoach-unstable.knowreapp.com
educoach.knowreapp.com
glesea-testing-https.knowreapi.com
glesea-testing.knowreapi.com
griest.knowreapi.com
homeschool-beta.knowreapp.com
homeschool-stable.knowreapp.com
homeschool-unstable.knowreapp.com
homeschool.knowreapp.com
jpdky.purple.knowre.com
knowre.com
local.knowre.com
local.knowreapi.com
local.knowreapp.com
local.knowreinc.com
locian-nv-stable.knowreapi.com
locian-nv-unstable.knowreapi.com
locian-tk-stable.knowreapi.com
locian-tk-unstable.knowreapi.com
locian0kr-stable.knowreapi.com
locian0kr-unstable.knowreapi.com
locian0us-stable.knowreapi.com
locian0us-unstable.knowreapi.com
messi.knowreapp.com
mowbore-dump-worker-nv-stable.knowreapi.com
mowbore-dump-worker-tk-stable.knowreapi.com
mowbore-dump-worker-tk-unstable.knowreapi.com
mowbore-nv-stable.knowreapi.com
mowbore-tk-stable.knowreapi.com
mowbore-tk-unstable.knowreapi.com
noba.knowreapi.com
nv-adm-gray-c.knowreinc.com
oreesh-testing.knowreapi.com
school-beta.knowreapp.com
school-stable.knowreapp.com
school-unstable.knowreapp.com
school.knowreapp.com
sinod-testing.knowreapi.com
square-beta.knowreapp.com
square-stable.knowreapp.com
square-temp-unstable.knowreapp.com
square-temp.knowreapp.com
square-unstable.knowreapp.com
square.knowreapp.com
sylvan-beta.knowreapp.com
sylvan-stable.knowreapp.com
sylvan-unstable.knowreapp.com
sylvan.knowreapp.com
tk-adm-gray-c.knowreinc.com
vpn-core.knowreinc.com
vpn-nvirginia.knowreinc.com
vpn-tokyo.knowreinc.com
yamizaka.knowreapi.com
zwi-testing.knowreapi.com

Other certificates including the domain name knowre.com

(limited to 100 certificates)
jroboticksclub.com
knowre.com
*.knowre.com
*.knowre.com
villaart.com.ar
coact.space
*.knowre.com
www.passmoresdiner.ca
*.knowre.com
local.knowre.com
*.knowre.com
surix.co
*.knowre.com
*.knowre.com
www.oxeye.ai
local.knowre.com
*.knowre.com
smashopoly.com
local.knowre.com
local.knowre.com
knowre.com
local.knowre.com
anusoft.in
about.knowre.com
local.knowre.com
u.knowre.com
local.knowre.com
*.knowre.com
knowre.com
local.knowre.com
*.knowre.com
knowre.com
u.knowre.com
local.knowre.com
*.knowre.com
*.knowre.com
villaart.com.ar
walletwatcher.app
*.knowre.com
protium.codes
local.knowre.com
jp-skt-purple-p.knowre.com
*.knowre.com
*.knowre.com
*.knowre.com
*.knowre.com
surix.co
*.knowre.com
www.arcadiaxr.com
*.knowre.com
*.knowre.com
daekyo.knowre.com
local.knowre.com
www.knowre.com
www.thegoodcrew.io
local.knowre.com
local.knowre.com
*.knowre.com
local.knowre.com
view.braingrafter.com
about.knowre.com
knowre.com
u.knowre.com
local.knowre.com
local.knowre.com
about.knowre.com
mbabazi.co
local.knowre.com
local.knowre.com
*.knowre.com
local.knowre.com
*.knowre.com
*.knowre.com
*.knowre.com
www.heelum.com
htoohtoo.me
www.knowre.com
stm.daekyo.com
*.knowre.com
about.knowre.com
www.knowre.com
local.knowre.com
local.knowre.com
local.knowre.com
www.thegoodcrew.io
www.publinet.com.ar
*.knowre.com
*.knowre.com
about.knowre.com
*.knowre.com
*.knowre.com
local.knowre.com
*.knowre.com
tastingplanner.com
local.knowre.com
local.knowre.com
local.knowre.com
*.knowre.com
knowre.com
*.knowre.com

Certificate

The complete raw certificate details for local.knowre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA248NmF+CrrHtQHb80uCV
hBsMLSmJiYf9U+2flkQP/G5Zkc4ckXXNSd/K87LAXjX7wx5CBb3ZM3MDDxhWRC+1
XY1CyKfrDw8Sb0nURWMk6KIYUuzAZhJlBSmC8kjxEzcUXWNM1ffQgT6tUKD2Di3s
R28b3sYL67uJAe+MtPdl2/1TkpbQ0ugRQ4lxIbcLhvwMxfoKzKFY4Pefx+DwDPZs
cmpcIU+f8BX2B6yq/2KrUfazgwaU5pbjK0PMGDFnI82638iHY5gLuakC9kiRWlUI
t7IxTMfR6cG7RkeRKS8YoIhCFudHi3espIZDqEUQHY26chs73zmQ9/KOyrwbhS5O
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345569496166056545354943557983761042636344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-23 09:35:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-21 09:35:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.knowre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27716730903413579915734806992754507402747497484288778935657698625670197634850279024038961821048377760882687486495438297473473067902412217860976684125769850950403631956317293455035577029696218341682626980531571827171728715962819590649096431652469690879239764953783623270109658768995752507676641712292603963802511648807665718707244792923836883430368472137618989150237626317875519957052267527397812129881486608590819577937497542873642540333978062097050214402460340759302162998568802172148073862992203532734208779940262471972268366091459357387654051531693375951962180613115309999256181666177328260353157592638325877788287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df9b5dd1d4f16c712235d4baa1d872e6de3e3ba4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alasy-unstable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calc-tk-beta.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calc-tk-stable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calc-tk-unstable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calc.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caspa-tk-unstable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cd-adm-gray-c.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cr-adm-gray-c.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daekyo-beta.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daekyo-kr-api-test.knowre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daekyo-kr-api.knowre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daekyo-stable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daekyo-unstable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daekyo.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebs-beta.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebs-proxy.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebs-stable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebs-unstable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebs.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educoach-beta.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educoach-stable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educoach-unstable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educoach.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glesea-testing-https.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glesea-testing.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'griest.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschool-beta.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschool-stable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschool-unstable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschool.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpdky.purple.knowre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.knowre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locian-nv-stable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locian-nv-unstable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locian-tk-stable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locian-tk-unstable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locian0kr-stable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locian0kr-unstable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locian0us-stable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locian0us-unstable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messi.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mowbore-dump-worker-nv-stable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mowbore-dump-worker-tk-stable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mowbore-dump-worker-tk-unstable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mowbore-nv-stable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mowbore-tk-stable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mowbore-tk-unstable.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noba.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nv-adm-gray-c.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oreesh-testing.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school-beta.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school-stable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school-unstable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinod-testing.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'square-beta.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'square-stable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'square-temp-unstable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'square-temp.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'square-unstable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'square.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvan-beta.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvan-stable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvan-unstable.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylvan.knowreapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk-adm-gray-c.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-core.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-nvirginia.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-tokyo.knowreinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamizaka.knowreapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwi-testing.knowreapi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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