*.test.k8s.centrio.com
Issued by R3
About this certificate
This digital certificate with serial number 04:7a:0e:2d:03:26:c6:96:60:6c:8b:49:50:b8:65:4f:f2:a3 was issued on by Let's Encrypt.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.test.k8s.centrio.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7a:0e:2d:03:26:c6:96:60:6c:8b:49:50:b8:65:4f:f2:a3Serial Number (int): 389982435400614460831155329263809294496419
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 48:60:33:46:63:ec:15:4c:87:08:2f:71:f9:aa:fc:a6:98:dd:70:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6a:17:a2:e9:6e:64:f4:46:ee:e3:b8:59:2b:d7:09:f5:6f:e6:2c:f9
Fingerprint (sha256): 2c:f2:ed:58:0e:d4:e6:d8:3a:e9:b5:5a:6d:80:0d:e2:bc:09:42:2d:8b:f1:5d:a7:e7:d9:f9:15:0d:ce:5d:36
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.test.k8s.centrio.com
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.test.k8s.centrio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.k8s.sandbox.us-east-1.centrio.com
*.k8s.sandbox.us-west-2.centrio.com
*.k8s.test.us-east-1.centrio.com
*.k8s.test.us-west-2.centrio.com
*.sandbox.blendlabs.com
*.sandbox.centrio.com
*.sandbox.us-east-1.blendlabs.com
*.sandbox.us-east-1.centrio.com
*.sandbox.us-west-2.blendlabs.com
*.sandbox.us-west-2.centrio.com
*.test-mirror.k8s.centrio.com
*.test.k8s.centrio.com
*.test.us-east-1.centrio.com
*.test.us-west-2.centrio.com
sandbox.blendlabs.com
sandbox.centrio.com
sandbox.us-east-1.blendlabs.com
sandbox.us-east-1.centrio.com
sandbox.us-west-2.blendlabs.com
sandbox.us-west-2.centrio.com
test-mirror.k8s.centrio.com
test.k8s.centrio.com
test.us-east-1.centrio.com
test.us-west-2.centrio.com
*.k8s.sandbox.us-west-2.centrio.com
*.k8s.test.us-east-1.centrio.com
*.k8s.test.us-west-2.centrio.com
*.sandbox.blendlabs.com
*.sandbox.centrio.com
*.sandbox.us-east-1.blendlabs.com
*.sandbox.us-east-1.centrio.com
*.sandbox.us-west-2.blendlabs.com
*.sandbox.us-west-2.centrio.com
*.test-mirror.k8s.centrio.com
*.test.k8s.centrio.com
*.test.us-east-1.centrio.com
*.test.us-west-2.centrio.com
sandbox.blendlabs.com
sandbox.centrio.com
sandbox.us-east-1.blendlabs.com
sandbox.us-east-1.centrio.com
sandbox.us-west-2.blendlabs.com
sandbox.us-west-2.centrio.com
test-mirror.k8s.centrio.com
test.k8s.centrio.com
test.us-east-1.centrio.com
test.us-west-2.centrio.com
Other certificates including the domain name centrio.com
(limited to 100 certificates)
paultest.sandbox.centrio.com
*.sandbox.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.istio.test.k8s.centrio.com
vpn2.centrio.com
*.sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
prometheus.test.k8s.centrio.com
radius.sandbox.centrio.com
proxy.sandbox.centrio.com
www.centrio.com
*.istio.sandbox.k8s.centrio.com
pong.centrio.com
prometheus.test.k8s.centrio.com
certmanager.sandbox.centrio.com
cert-test.sandbox.centrio.com
*.sandbox.k8s.centrio.com
*.sandbox.k8s.centrio.com
centrio.com
*.top.k8s.centrio.com
*.sandbox.centrio.com
*.sandbox.centrio.com
cartography.sandbox.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
*.k8s.sandbox.us-east-1.centrio.com
*.test.k8s.centrio.com
*.sandbox.k8s.centrio.com
www.centrio.com
*.sandbox.centrio.com
*.chinmaya.k8s.centrio.com
*.test.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
certmanager.sandbox.centrio.com
paultest.sandbox.centrio.com
www.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
prometheus.chinmaya.k8s.centrio.com
*.k8s.sandbox.centrio.com
proxy.sandbox.centrio.com
*.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
certmanager.sandbox.centrio.com
*.test-us-west-2.k8s.us-west-2.centrio.com
www.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
*.sandbox.centrio.com
culture-board.app-container.vpn.centrio.com
*.sandbox.k8s.centrio.com
vault-infrastructure.test.us-west-2.centrio.com
*.sandbox.k8s.centrio.com
*.top.k8s.centrio.com
*.test.k8s.centrio.com
vision.sandbox.centrio.com
*.mt.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
grafana.sandbox.k8s.centrio.com
*.test.k8s.centrio.com
centrio.com
www.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.sandbox.k8s.centrio.com
test.chan.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
prometheus.sandbox.k8s.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
www.centrio.com
proxy.sandbox.centrio.com
pdfkit.sandbox.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
tinode.co
prometheus.chinmaya.k8s.centrio.com
grafana.top.k8s.centrio.com
prometheus.test.k8s.centrio.com
prometheus.top.k8s.centrio.com
*.test.k8s.centrio.com
proxy.sandbox.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.centrio.com
pong.centrio.com
paultest1.sandbox.centrio.com
*.istio.test.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.sandbox.k8s.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
paultest.sandbox.centrio.com
gse-api.sandbox.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
blahblahblah.sandbox.centrio.com
sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.istio.test.k8s.centrio.com
vpn2.centrio.com
*.sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
prometheus.test.k8s.centrio.com
radius.sandbox.centrio.com
proxy.sandbox.centrio.com
www.centrio.com
*.istio.sandbox.k8s.centrio.com
pong.centrio.com
prometheus.test.k8s.centrio.com
certmanager.sandbox.centrio.com
cert-test.sandbox.centrio.com
*.sandbox.k8s.centrio.com
*.sandbox.k8s.centrio.com
centrio.com
*.top.k8s.centrio.com
*.sandbox.centrio.com
*.sandbox.centrio.com
cartography.sandbox.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
*.k8s.sandbox.us-east-1.centrio.com
*.test.k8s.centrio.com
*.sandbox.k8s.centrio.com
www.centrio.com
*.sandbox.centrio.com
*.chinmaya.k8s.centrio.com
*.test.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
certmanager.sandbox.centrio.com
paultest.sandbox.centrio.com
www.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
prometheus.chinmaya.k8s.centrio.com
*.k8s.sandbox.centrio.com
proxy.sandbox.centrio.com
*.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
certmanager.sandbox.centrio.com
*.test-us-west-2.k8s.us-west-2.centrio.com
www.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
*.sandbox.centrio.com
culture-board.app-container.vpn.centrio.com
*.sandbox.k8s.centrio.com
vault-infrastructure.test.us-west-2.centrio.com
*.sandbox.k8s.centrio.com
*.top.k8s.centrio.com
*.test.k8s.centrio.com
vision.sandbox.centrio.com
*.mt.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
grafana.sandbox.k8s.centrio.com
*.test.k8s.centrio.com
centrio.com
www.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.sandbox.k8s.centrio.com
test.chan.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
prometheus.sandbox.k8s.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
www.centrio.com
proxy.sandbox.centrio.com
pdfkit.sandbox.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
tinode.co
prometheus.chinmaya.k8s.centrio.com
grafana.top.k8s.centrio.com
prometheus.test.k8s.centrio.com
prometheus.top.k8s.centrio.com
*.test.k8s.centrio.com
proxy.sandbox.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.centrio.com
pong.centrio.com
paultest1.sandbox.centrio.com
*.istio.test.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.sandbox.k8s.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
paultest.sandbox.centrio.com
gse-api.sandbox.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
blahblahblah.sandbox.centrio.com
sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
Certificate
The complete raw certificate details for *.test.k8s.centrio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgISBHoOLQMmxpZgbItJULhlT/KjMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA5MDQyMDE5MTNaFw0yMjEyMDMyMDE5MTJaMCExHzAdBgNVBAMM FioudGVzdC5rOHMuY2VudHJpby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDJZUoLQLFicqDdUBY+yRWaZj/iy9whbG3JoXUOD518XLKrxu18G7xt lgQOf/zX4gYO3rtE7PbkTMTvxITrwhByWy/enmnzJXZfECOF5MZWIkHXCbB22CFY RAmK1j/J4z5MjAfplceNYfyIUtFAnUnZgf7BDmrOfGcGxnVO4ImtcZkbm+NCAdCW jPeD+aq9WFsvVuipX0gM5TUfSohcwby1Olbs9OHVsisqQAadcOpgPymnLSrJ2YY2 4dWAMhT8Be7VTSiGeaJpb196SsWlHVi1PkG13vfhqeJ39+tGiO3CaomLFtvzarGr n6Zr4INBMiiYqCn0wrAbLXM+clcIsF2nAgMBAAGjggQcMIIEGDAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFEhgM0Zj7BVMhwgvcfmq/KaY3XDLMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMIIC3QYDVR0RBIIC1DCCAtCCIyouazhzLnNhbmRib3gudXMtZWFz dC0xLmNlbnRyaW8uY29tgiMqLms4cy5zYW5kYm94LnVzLXdlc3QtMi5jZW50cmlv LmNvbYIgKi5rOHMudGVzdC51cy1lYXN0LTEuY2VudHJpby5jb22CICouazhzLnRl c3QudXMtd2VzdC0yLmNlbnRyaW8uY29tghcqLnNhbmRib3guYmxlbmRsYWJzLmNv bYIVKi5zYW5kYm94LmNlbnRyaW8uY29tgiEqLnNhbmRib3gudXMtZWFzdC0xLmJs ZW5kbGFicy5jb22CHyouc2FuZGJveC51cy1lYXN0LTEuY2VudHJpby5jb22CISou c2FuZGJveC51cy13ZXN0LTIuYmxlbmRsYWJzLmNvbYIfKi5zYW5kYm94LnVzLXdl c3QtMi5jZW50cmlvLmNvbYIdKi50ZXN0LW1pcnJvci5rOHMuY2VudHJpby5jb22C FioudGVzdC5rOHMuY2VudHJpby5jb22CHCoudGVzdC51cy1lYXN0LTEuY2VudHJp by5jb22CHCoudGVzdC51cy13ZXN0LTIuY2VudHJpby5jb22CFXNhbmRib3guYmxl bmRsYWJzLmNvbYITc2FuZGJveC5jZW50cmlvLmNvbYIfc2FuZGJveC51cy1lYXN0 LTEuYmxlbmRsYWJzLmNvbYIdc2FuZGJveC51cy1lYXN0LTEuY2VudHJpby5jb22C H3NhbmRib3gudXMtd2VzdC0yLmJsZW5kbGFicy5jb22CHXNhbmRib3gudXMtd2Vz dC0yLmNlbnRyaW8uY29tght0ZXN0LW1pcnJvci5rOHMuY2VudHJpby5jb22CFHRl c3QuazhzLmNlbnRyaW8uY29tghp0ZXN0LnVzLWVhc3QtMS5jZW50cmlvLmNvbYIa dGVzdC51cy13ZXN0LTIuY2VudHJpby5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AGZqTVpn84RxClL8Jf0zP3iCdcNYY1bDdP+xgE4LVd4sOt0U+NHPwjJhrDsPvB4O gXTjz9LbYKc02TM1dJhMxKWVJA2ljyiYTzJKjaGkuEUo5mvGZvINHfs+BKLYzPqi xNGl2u7wW6pX6wmuznbIHQ+KlGyaZPRfJ4zjVgATzSR0gRPU66YyBufIcsQi4Fm2 iZBk6vRkBTEAQI1o49JJiSSQ/uSamUB0a5W8XQhpB8mZneeReNvwoBdkO6lNlsmq tkYQ/r9CAZbTPs9KRHXHZVxs0/EF/4bZou2PsKMhrC2/CsqNUHKjcNYM/7d4TQsq jYPnLp5CarZIwqdk5lT+XCY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWVKC0CxYnKg3VAWPskV mmY/4svcIWxtyaF1Dg+dfFyyq8btfBu8bZYEDn/81+IGDt67ROz25EzE78SE68IQ clsv3p5p8yV2XxAjheTGViJB1wmwdtghWEQJitY/yeM+TIwH6ZXHjWH8iFLRQJ1J 2YH+wQ5qznxnBsZ1TuCJrXGZG5vjQgHQloz3g/mqvVhbL1boqV9IDOU1H0qIXMG8 tTpW7PTh1bIrKkAGnXDqYD8ppy0qydmGNuHVgDIU/AXu1U0ohnmiaW9fekrFpR1Y tT5Btd734anid/frRojtwmqJixbb82qxq5+ma+CDQTIomKgp9MKwGy1zPnJXCLBd pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 389982435400614460831155329263809294496419 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-04 20:19:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 20:19:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.k8s.centrio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25423846881135033621922640433196347369696198542237998183459839429081743249776997921924943120933701719194579157472752964884840737098827127319777755168658050367077204086815899586826711896944620845573728770109543861604125407949142100923089981463683020097320451759776988670740395382307336989002447361034292930298983482387351453555405820962566409371663461798613179103396171866340417152293432264791300606339031553133340407409856739344735969419453306852352739772911197608681891169198633886745779901235542421168234135842611666052102225620064223772656563416204045926582425169274645183818636655925327688895963423292832986717607 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4860334663ec154c87082f71f9aafca698dd70cb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.sandbox.us-east-1.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.sandbox.us-west-2.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.test.us-east-1.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.test.us-west-2.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.blendlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-east-1.blendlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-east-1.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-west-2.blendlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-west-2.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-mirror.k8s.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.k8s.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.us-east-1.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.us-west-2.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.blendlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-east-1.blendlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-east-1.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-west-2.blendlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-west-2.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mirror.k8s.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.k8s.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.us-east-1.centrio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.us-west-2.centrio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00666a4d5a67f384710a52fc25fd333f788275c3586356c374ffb1804e0b55de2c3add14f8d1cfc23261ac3b0fbc1e0e8174e3cfd2db60a734d9333574984cc4a595240da58f28984f324a8da1a4b84528e66bc666f20d1dfb3e04a2d8ccfaa2c4d1a5daeef05baa57eb09aece76c81d0f8a946c9a64f45f278ce3560013cd24748113d4eba63206e7c872c422e059b6899064eaf464053100408d68e3d249892490fee49a9940746b95bc5d086907c9999de79178dbf0a017643ba94d96c9aab64610febf420196d33ecf4a4475c7655c6cd3f105ff86d9a2ed8fb0a321ac2dbf0aca8d5072a370d60cffb7784d0b2a8d83e72e9e426ab648c2a764e654fe5c26