attstatus.snowflake.com
Issued by R3
About this certificate
This digital certificate with serial number 03:aa:2d:9e:46:1a:50:14:ed:39:43:b5:83:92:ec:93:e1:9f was issued on by Let's Encrypt.
With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=attstatus.snowflake.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:aa:2d:9e:46:1a:50:14:ed:39:43:b5:83:92:ec:93:e1:9fSerial Number (int): 319245497236407637026238463061698167431583
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1b:da:f2:8c:27:c7:81:16:67:58:10:2e:e6:5d:47:be:c0:76:e6:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 30:96:94:80:a4:ba:de:d0:2a:82:64:54:a5:e4:12:7a:77:7e:c2:83
Fingerprint (sha256): 31:02:f6:c5:3e:3f:79:62:84:b0:14:60:0f:16:4c:44:59:6f:c0:c1:70:e3:82:0a:b2:63:c5:ad:76:a1:6d:d9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate attstatus.snowflake.com
38
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for attstatus.snowflake.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
attstatus.snowflake.com
dataservices.status.panzura.com
kroostatus.mambu.com
status.au.safetyculture.com
status.blockchyp.com
status.bqecore.com
status.bridgew.edu
status.brightfunds.org
status.bsdex.de
status.coalescepayments.com
status.coffeemeetsbagel.com
status.digipost.no
status.ekkosense.co.uk
status.eleostech.com
status.getwhiplash.com
status.ghostretail.com
status.kafinea.com
status.maker.co
status.onnicelabel.com
status.osiris.caci.nl
status.performanceleader.com
status.pingboard.com
status.playment.io
status.radai.com
status.rfp360.com
status.ridekura.com
status.safetyculture.com
status.schemeserve.com
status.skylark.swiftnav.com
status.textexpander.com
status.thoughtindustries.com
status.tink.com
status.transport2.com
status.velou.com
status.voyager.nz
status.vusion.io
status.wlvpn.com
status.xavier-analytics.com
dataservices.status.panzura.com
kroostatus.mambu.com
status.au.safetyculture.com
status.blockchyp.com
status.bqecore.com
status.bridgew.edu
status.brightfunds.org
status.bsdex.de
status.coalescepayments.com
status.coffeemeetsbagel.com
status.digipost.no
status.ekkosense.co.uk
status.eleostech.com
status.getwhiplash.com
status.ghostretail.com
status.kafinea.com
status.maker.co
status.onnicelabel.com
status.osiris.caci.nl
status.performanceleader.com
status.pingboard.com
status.playment.io
status.radai.com
status.rfp360.com
status.ridekura.com
status.safetyculture.com
status.schemeserve.com
status.skylark.swiftnav.com
status.textexpander.com
status.thoughtindustries.com
status.tink.com
status.transport2.com
status.velou.com
status.voyager.nz
status.vusion.io
status.wlvpn.com
status.xavier-analytics.com
Other certificates including the domain name snowflake.com
(limited to 100 certificates)
1e291ab3status.snowflake.com
1e291ab3status.snowflake.com
developer.status.atlassian.com
*.autotestcore2.eastus2.azure-dev.app.snowflake.com
attstatus.snowflake.com
glmatching.snowflake.com
finserv.snowflake.com
attstatus.snowflake.com
*.ordevautotest.us-west-2.aws-dev.app.snowflake.com
*.c1.eu-west-1.aws.app.snowflake.com
*.devtemptest2core1.us-west-2.aws-dev.app.snowflake.com
pricingautomation.snowflake.com
*.autotestc1.eastus2.azure-dev.app.snowflake.com
app1e-status.outreach.io
event.snowflake.com
*.m1.us-gov-west-1.aws-gov.app.snowflake.com
attstatus.snowflake.com
*.c1.us-east-1.aws.app.snowflake.com
lift.snowflake.com
*.oltp1.us-west-2.aws-dev.app.snowflake.com
community.snowflake.com
partner-payment-api.snowflake.com
snowamp.snowflake.com
abemcertified.abem.org
ciscokineticbeta.iotspdev.io
events.snowflake.com
attstatus.snowflake.com
developer.status.atlassian.com
utc-converter.snowflake.com
*.gfts.us-east-2.aws.app.snowflake.com
app-cdn-staging.app.snowflake.com
attstatus.snowflake.com
app-cdntest1.snowflake.com
usergroups.snowflake.com
attstatus.snowflake.com
snowamp-uat.snowflake.com
seone.snowflake.com
app1e-status.outreach.io
1e291ab3status.snowflake.com
pricingautomation.snowflake.com
events.snowflake.com
app1e-status.outreach.io
go.snowflake.com
developer.status.atlassian.com
seone-qa.snowflake.com
events.snowflake.com
attstatus.snowflake.com
ipe-em-ssm-activation-code-us-east-1.snowflake.com
demo.streamlit.snowflake.com
app1e-status.outreach.io
*.qa3.us-west-2.aws-dev.app.snowflake.com
sni204121.cloudflaressl.com
*.autotestc1.eastus2.azure-dev.app.snowflake.com
demo.streamlit.snowflake.com
liftdev.snowflake.com
1e291ab3status.snowflake.com
*.capitalone.us-east-1.aws.app.snowflake.com
attstatus.snowflake.com
cleanroom-sso.snowflake.com
accredible.armanl.eu
1e291ab3status.snowflake.com
*.snowvmtest.us-west-2.aws-dev.app.snowflake.com
*.core2.us-west-2.aws-dev.app.snowflake.com
attstatus.snowflake.com
it-ds-chromadb.snowflake.com
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
app1e-status.outreach.io
*.qa6.us-west-2.aws-dev.app.snowflake.com
app1e-status.outreach.io
app1e-status.outreach.io
corp-vpn.snowflake.com
argocd-it-dev.snowflake.com
app1e-status.outreach.io
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
partner-payment-oauth.snowflake.com
events.snowflake.com
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
events.snowflake.com
app.my-guitar-tabs.com
*.autotestcore2.eastus2.azure-dev.app.snowflake.com
*.t1.usgovvirginia.azure-gov.app.snowflake.com
abemcertified.abem.org
*.citi.us-east-2.aws.app.snowflake.com
*.devtemptest3core1.us-west-2.aws-dev.app.snowflake.com
api.developers.snowflake.com
lift.snowflake.com
leapfrog-ssl-33.gcs-web.com
*.c2.eastus2.azure-dev.app.snowflake.com
sni204121.cloudflaressl.com
events.snowflake.com
1e291ab3status.snowflake.com
app1e-status.outreach.io
app1e-status.outreach.io
*.c1.eu-west-1.aws.app.snowflake.com
sni204121.cloudflaressl.com
ciscokineticbeta.iotspdev.io
sales-engineering-account.snowflake.com
api.developers.snowflake.com
app-cdn-staging.app.snowflake.com
app1e-status.outreach.io
1e291ab3status.snowflake.com
developer.status.atlassian.com
*.autotestcore2.eastus2.azure-dev.app.snowflake.com
attstatus.snowflake.com
glmatching.snowflake.com
finserv.snowflake.com
attstatus.snowflake.com
*.ordevautotest.us-west-2.aws-dev.app.snowflake.com
*.c1.eu-west-1.aws.app.snowflake.com
*.devtemptest2core1.us-west-2.aws-dev.app.snowflake.com
pricingautomation.snowflake.com
*.autotestc1.eastus2.azure-dev.app.snowflake.com
app1e-status.outreach.io
event.snowflake.com
*.m1.us-gov-west-1.aws-gov.app.snowflake.com
attstatus.snowflake.com
*.c1.us-east-1.aws.app.snowflake.com
lift.snowflake.com
*.oltp1.us-west-2.aws-dev.app.snowflake.com
community.snowflake.com
partner-payment-api.snowflake.com
snowamp.snowflake.com
abemcertified.abem.org
ciscokineticbeta.iotspdev.io
events.snowflake.com
attstatus.snowflake.com
developer.status.atlassian.com
utc-converter.snowflake.com
*.gfts.us-east-2.aws.app.snowflake.com
app-cdn-staging.app.snowflake.com
attstatus.snowflake.com
app-cdntest1.snowflake.com
usergroups.snowflake.com
attstatus.snowflake.com
snowamp-uat.snowflake.com
seone.snowflake.com
app1e-status.outreach.io
1e291ab3status.snowflake.com
pricingautomation.snowflake.com
events.snowflake.com
app1e-status.outreach.io
go.snowflake.com
developer.status.atlassian.com
seone-qa.snowflake.com
events.snowflake.com
attstatus.snowflake.com
ipe-em-ssm-activation-code-us-east-1.snowflake.com
demo.streamlit.snowflake.com
app1e-status.outreach.io
*.qa3.us-west-2.aws-dev.app.snowflake.com
sni204121.cloudflaressl.com
*.autotestc1.eastus2.azure-dev.app.snowflake.com
demo.streamlit.snowflake.com
liftdev.snowflake.com
1e291ab3status.snowflake.com
*.capitalone.us-east-1.aws.app.snowflake.com
attstatus.snowflake.com
cleanroom-sso.snowflake.com
accredible.armanl.eu
1e291ab3status.snowflake.com
*.snowvmtest.us-west-2.aws-dev.app.snowflake.com
*.core2.us-west-2.aws-dev.app.snowflake.com
attstatus.snowflake.com
it-ds-chromadb.snowflake.com
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
app1e-status.outreach.io
*.qa6.us-west-2.aws-dev.app.snowflake.com
app1e-status.outreach.io
app1e-status.outreach.io
corp-vpn.snowflake.com
argocd-it-dev.snowflake.com
app1e-status.outreach.io
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
partner-payment-oauth.snowflake.com
events.snowflake.com
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
events.snowflake.com
app.my-guitar-tabs.com
*.autotestcore2.eastus2.azure-dev.app.snowflake.com
*.t1.usgovvirginia.azure-gov.app.snowflake.com
abemcertified.abem.org
*.citi.us-east-2.aws.app.snowflake.com
*.devtemptest3core1.us-west-2.aws-dev.app.snowflake.com
api.developers.snowflake.com
lift.snowflake.com
leapfrog-ssl-33.gcs-web.com
*.c2.eastus2.azure-dev.app.snowflake.com
sni204121.cloudflaressl.com
events.snowflake.com
1e291ab3status.snowflake.com
app1e-status.outreach.io
app1e-status.outreach.io
*.c1.eu-west-1.aws.app.snowflake.com
sni204121.cloudflaressl.com
ciscokineticbeta.iotspdev.io
sales-engineering-account.snowflake.com
api.developers.snowflake.com
app-cdn-staging.app.snowflake.com
app1e-status.outreach.io
Certificate
The complete raw certificate details for attstatus.snowflake.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIUzCCBzugAwIBAgISA6otnkYaUBTtOUO1g5Lsk+GfMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDkxOTQ0MzRaFw0yNDA1MDkxOTQ0MzNaMCIxIDAeBgNVBAMT F2F0dHN0YXR1cy5zbm93Zmxha2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAwM/7416Iw50dFDK5XUZfso991qdgTfY4CofcjXsxWlbzy+YNO7+X 7LlCAHTDswSEKg5PAHBj3rPU6RV/ChSmroAqszutu2h5GuYZak04EEeHDBwHok3S wTHyxTsFw5wA79Mt6TwV7kfjG+EPmkAT+Rat9hb/K5oovyIX4aBCmwe1cvZDMMYc MZkR2Ox0NtA13QdSpwQ6bDeSBU5OjhcnOjB0SwAyWYbh11hBHyQT35J3cs1XQWBL fJr55tsUehiy0haBdFGhG4nZpqLQa99OeBTvCePAewcvmIuqD86u6l2czWElvroS F1vs9CBWT8VyH1VNk8vaAHcv5+xsZXCPTwIDAQABo4IFcTCCBW0wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBQb2vKMJ8eBFmdYEC7mXUe+wHbmrjAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCCA3cGA1UdEQSCA24wggNqghdhdHRzdGF0dXMuc25vd2ZsYWtl LmNvbYIfZGF0YXNlcnZpY2VzLnN0YXR1cy5wYW56dXJhLmNvbYIUa3Jvb3N0YXR1 cy5tYW1idS5jb22CG3N0YXR1cy5hdS5zYWZldHljdWx0dXJlLmNvbYIUc3RhdHVz LmJsb2NrY2h5cC5jb22CEnN0YXR1cy5icWVjb3JlLmNvbYISc3RhdHVzLmJyaWRn ZXcuZWR1ghZzdGF0dXMuYnJpZ2h0ZnVuZHMub3Jngg9zdGF0dXMuYnNkZXguZGWC G3N0YXR1cy5jb2FsZXNjZXBheW1lbnRzLmNvbYIbc3RhdHVzLmNvZmZlZW1lZXRz YmFnZWwuY29tghJzdGF0dXMuZGlnaXBvc3Qubm+CFnN0YXR1cy5la2tvc2Vuc2Uu Y28udWuCFHN0YXR1cy5lbGVvc3RlY2guY29tghZzdGF0dXMuZ2V0d2hpcGxhc2gu Y29tghZzdGF0dXMuZ2hvc3RyZXRhaWwuY29tghJzdGF0dXMua2FmaW5lYS5jb22C D3N0YXR1cy5tYWtlci5jb4IWc3RhdHVzLm9ubmljZWxhYmVsLmNvbYIVc3RhdHVz Lm9zaXJpcy5jYWNpLm5sghxzdGF0dXMucGVyZm9ybWFuY2VsZWFkZXIuY29tghRz dGF0dXMucGluZ2JvYXJkLmNvbYISc3RhdHVzLnBsYXltZW50LmlvghBzdGF0dXMu cmFkYWkuY29tghFzdGF0dXMucmZwMzYwLmNvbYITc3RhdHVzLnJpZGVrdXJhLmNv bYIYc3RhdHVzLnNhZmV0eWN1bHR1cmUuY29tghZzdGF0dXMuc2NoZW1lc2VydmUu Y29tghtzdGF0dXMuc2t5bGFyay5zd2lmdG5hdi5jb22CF3N0YXR1cy50ZXh0ZXhw YW5kZXIuY29tghxzdGF0dXMudGhvdWdodGluZHVzdHJpZXMuY29tgg9zdGF0dXMu dGluay5jb22CFXN0YXR1cy50cmFuc3BvcnQyLmNvbYIQc3RhdHVzLnZlbG91LmNv bYIRc3RhdHVzLnZveWFnZXIubnqCEHN0YXR1cy52dXNpb24uaW+CEHN0YXR1cy53 bHZwbi5jb22CG3N0YXR1cy54YXZpZXItYW5hbHl0aWNzLmNvbTATBgNVHSAEDDAK MAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHb/iD8KtvuVUcJh zPWHujS0pM27KdxoQgqf5mdMWjp0AAABjY+daN4AAAQDAEcwRQIgQWSdDdol5E4Q hVpBpqmI+lsasUTMJRAxCb+3aojnX2QCIQCkljDi6Xlxnik1hzeu7+iG2qm3Ysuc Kv8PelxtI+S9OgB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB jY+daesAAAQDAEgwRgIhALSxRDRr49rWH5XKsZJofc5pgKqY9WdxXGJIEgVyeS/E AiEAqaqNBs0Amko7PF0hxkWrFOZlme7Oifl49j7pPma6OL4wDQYJKoZIhvcNAQEL BQADggEBAJMm3npqflVWmhdfGMRX8eqa6RYF5R2bmw/wIwQGcq53nwa8kKKZd/JO zH16DmCyh9NLwxKXMBYtYOckD86YaaXMuuKlIHE0brIvZLbVX/RuWNoNw/yQbm7X J2rUCAuj/WafXTN3e8HK5gHzW5TWbGJpV7ZoZLhKl8tjxuZQE5JR1r/0BbB3j179 QgU1aioDM4Cjy3RUZE7D0MnCvyJK/Aoy1Q42L9z0Z1sAOrknDWq+USv+b4qTdYaV Gwhnyoa7DwanjnZ5A71n2TEIwKeUr851Sbn6LqVUf0b4U3kb2BAItdI4Q6G81MvR 1SJrUWvdWTmFyy6bnmBxatZ+OmfTvVA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM/7416Iw50dFDK5XUZf so991qdgTfY4CofcjXsxWlbzy+YNO7+X7LlCAHTDswSEKg5PAHBj3rPU6RV/ChSm roAqszutu2h5GuYZak04EEeHDBwHok3SwTHyxTsFw5wA79Mt6TwV7kfjG+EPmkAT +Rat9hb/K5oovyIX4aBCmwe1cvZDMMYcMZkR2Ox0NtA13QdSpwQ6bDeSBU5Ojhcn OjB0SwAyWYbh11hBHyQT35J3cs1XQWBLfJr55tsUehiy0haBdFGhG4nZpqLQa99O eBTvCePAewcvmIuqD86u6l2czWElvroSF1vs9CBWT8VyH1VNk8vaAHcv5+xsZXCP TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319245497236407637026238463061698167431583 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 19:44:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 19:44:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'attstatus.snowflake.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24340315255864783368739129512614081038597918896380269212335031014348294272598930837592249493072068765133825895352987121169454570155073363831222673989819915944937708679718285807112506729786546596209787343832246110500444590251846699610345343411637912233698459516846473305168502562796512995933119552901563403978885789885947451721399098906069483592196461705892986244745198422844110701289701940769208875439138057199686730757345063789304845205334552040821634452621645378764882074673762583343159414866689385514324345858852156407488173952409532619771078702245037121381792440557614773476468364459749762052296730245616316223311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1bdaf28c27c781166758102ee65d47bec076e6ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (878 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attstatus.snowflake.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataservices.status.panzura.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kroostatus.mambu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.au.safetyculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.blockchyp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bqecore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bridgew.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.brightfunds.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bsdex.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coalescepayments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coffeemeetsbagel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.digipost.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ekkosense.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.eleostech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.getwhiplash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ghostretail.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.kafinea.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.maker.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.onnicelabel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.osiris.caci.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.performanceleader.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pingboard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.playment.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.radai.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rfp360.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ridekura.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.safetyculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.schemeserve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.skylark.swiftnav.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.textexpander.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.thoughtindustries.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tink.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.transport2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.velou.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.voyager.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vusion.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wlvpn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.xavier-analytics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d8f9d68de0000040300473045022041649d0dda25e44e10855a41a6a988fa5b1ab144cc25103109bfb76a88e75f64022100a49630e2e979719e29358737aeefe886daa9b762cb9c2aff0f7a5c6d23e4bd3a00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d8f9d69eb0000040300483046022100b4b144346be3dad61f95cab192687dce6980aa98f567715c6248120572792fc4022100a9aa8d06cd009a4a3b3c5d21c645ab14e66599eece89f978f63ee93e66ba38be . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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