api-platform-status.production.tax.service.gov.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:7d:6e:23:c1:b8:b5:b3:b2:bc:a6:fd:15:f9:7c:09:53 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-platform-status.production.tax.service.gov.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:7d:6e:23:c1:b8:b5:b3:b2:bc:a6:fd:15:f9:7c:09:53
Serial Number (int): 297233231699339368317720820968881544497491
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:2d:32:e4:5a:2a:67:e5:bd:6b:4b:49:37:86:e7:dc:1f:25:59:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:e2:fc:8d:d7:81:67:bb:96:40:5e:ec:c3:5a:96:bf:03:54:b2:10
Fingerprint (sha256): 32:11:1c:74:42:13:4f:79:b7:8e:18:20:44:00:63:02:ae:22:ec:b8:22:ae:3d:28:85:a7:2f:87:09:c3:1f:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api-platform-status.production.tax.service.gov.uk

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-platform-status.production.tax.service.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-platform-status.production.tax.service.gov.uk
status-developer.getgo.com
status-goto-developer.logmeininc.com
status.1-stop.biz
status.accufundonline.com
status.blakes.founded.partners
status.bold360.com
status.cirrusinsight.com
status.coinmarketcap.com
status.extole.com
status.globaldataconsortium.com
status.gotomeeting.com
status.gototraining.com
status.gotowebinar.com
status.grammarly.com
status.grasshopper.com
status.hive.hr
status.idrift.no
status.jive.com
status.join.me
status.layerstack.com
status.logmeinaccess.com
status.logmeinremotesupport.com
status.meetviva.com
status.naga.com
status.nexonia.com
status.nomical.com
status.nscom.com
status.opentechalliance.com
status.rebelmouse.com
status.rectanglehealth.com
status.redcanary.com
status.sparkhire.com
status.storefeeder.com
status.stroock.com
status.vtex.com
status.vtex.com.br
status.workast.com
statuspage.keeper.io
www.nsonestatus.net

Other certificates including the domain name tax.service.gov.uk

(limited to 100 certificates)
landscape.production.tools.tax.service.gov.uk
developer.service.hmrc.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
admin.staging.tax.service.gov.uk
api.externaltest.tax.service.gov.uk
api.development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
open.artefacts.tax.service.gov.uk
cip-canary-service-10-42.development.cip-paas.tax.service.gov.uk
dis.tax.service.gov.uk
childcare.tax.service.gov.uk
childcare.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
*.development.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
lab02.build.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
platapps-live.tax.service.gov.uk
www.prototypes.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
kibana.internal-lab04.telemetry.tax.service.gov.uk
maps-11-987.development.cip-paas.tax.service.gov.uk
*.live.platops.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-8-55.development.cip-paas.tax.service.gov.uk
online.hmrc.gov.uk
www.staging.tax.service.gov.uk
cname-acs-fast-stream.development.tax.service.gov.uk
development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
mdtp-system.platapps-labs.tax.service.gov.uk
confluence.staging.tools.tax.service.gov.uk
grafana-alerting.internal-lab01.telemetry.tax.service.gov.uk
elasticsearch.internal-staging.telemetry.tax.service.gov.uk
selfservice.staging.tools.tax.service.gov.uk
*.tax.service.gov.uk
online.hmrc.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
*.internal-lab03.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
jira.staging.tools.tax.service.gov.uk
dis.qa.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
bank-account-insights.staging.cip-app.tax.service.gov.uk
platapps-labs.tax.service.gov.uk
test-transaction-engine.tax.service.gov.uk
cname-jons-ccn2.integration.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
cip-canary-service-2-38.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
dis.qa.tax.service.gov.uk
*.integration.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
qa.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
lab02.artefacts.tax.service.gov.uk
cname-jons-transaction-engine.integration.tax.service.gov.uk
api.integration.tax.service.gov.uk
paas-sample-2732-150.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
design.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
paas-sample-2-38.development.cip-paas.tax.service.gov.uk
platapps-platops-sandbox.tax.service.gov.uk
kibana.mdtp-staging.telemetry.tax.service.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
kibana.internal-lab03.telemetry.tax.service.gov.uk
*.tax.service.gov.uk
paas-sample-2703-144.development.cip-paas.tax.service.gov.uk
lab03.externaltest.testing.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
cip-canary-service-5-23.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
api.staging.tax.service.gov.uk
trigger.lab03.prototypes.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
status-tool.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-11-73.development.cip-paas.tax.service.gov.uk
elasticsearch.internal-lab02.telemetry.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
mediastorage-alb.staging.tools.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
api.development.tax.service.gov.uk
cname-transaction-engine.staging.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
*.labs.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
user-management-dod-1397.poc.sandbox.tools.tax.service.gov.uk
transaction-engine.development.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
*.integration.tax.service.gov.uk

Certificate

The complete raw certificate details for api-platform-status.production.tax.service.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN3SLXhH8VIPjCfzSbPc
tuxbMo2QPt+T6ZzRAcVhn0NjuzgWrw69agWwFmcmZCMCGYnsRTwOMDvz6Thlbxix
DzDdz7IRQpF+B0hBGCe2ZqYPyuZChArqjRr8rIW1K3iy0c5ZZMsfyVzxoYRfkNsz
VNSmC8ihML0qRjHTJPZkQZwo7vh2hTTFKzaYAtag4Lc6mRXGpe/hvWtD/V07v/pI
ZJfcYGEwD1juBj4eV5Cy8snxE7Jy27YfGPrJaoiyTbtXAbbAVuosK+mzdhiARJfn
3uqM6GHdHuKG73mVqHn2qvLX7unGFs1/SUdR3HcaR1ArG1dSA5yPPQRTu11dGR6g
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297233231699339368317720820968881544497491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 08:13:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 08:13:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-platform-status.production.tax.service.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21822372469173988156512226996185482530908153170353247459311638434419610340617180470880537664243528061977526960962801846437027020120849394295269695962688209260184536928778841554606707781438654121872824716902761385397664638209522870944213321978673989573146092665607344333254536861273692165663781591585368398961602340581297682718994404297608816573899358502373413144711180834820594422400505737799288322760540899013368587391146405771036229994623492921041338637982798967144100312773324361549562037484722524596723170203436439445179133138262521382306243417682022524472587553026307724011261496271201401140385629676855296434289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							512d32e45a2a67e5bd6b4b493786e7dc1f255927
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (955 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-platform-status.production.tax.service.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-developer.getgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-goto-developer.logmeininc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.1-stop.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accufundonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.blakes.founded.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bold360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cirrusinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coinmarketcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.extole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.globaldataconsortium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gotomeeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gototraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gotowebinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grammarly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grasshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hive.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.idrift.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.jive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.join.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.layerstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.logmeinaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.logmeinremotesupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.meetviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.naga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nexonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nomical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nscom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.opentechalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rebelmouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rectanglehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.redcanary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sparkhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.storefeeder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.stroock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vtex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vtex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.workast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage.keeper.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsonestatus.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016879fbf3810000040300483046022100e314330cdfc804fc8cadcd66fee3b0baa50b918da3e7a5c74f5e51241b11cdd80221008628825498e57a09a497aa8860559e86c6a3b20784f9275fc2e95294530889d900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016879fbf38a0000040300483046022100b6a4c4948bd35a9917a6a661f37d6e43c7918c866e212d679cee92e61013c636022100e66efa712bd6fc0155fd10d43eafb2906c8fe52d091afbd2eeff1329c1a51fae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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