arkiv.status.geoikt.no
Issued by R3
About this certificate
This digital certificate with serial number 04:c1:b7:75:80:24:1b:26:10:ac:47:1e:91:8e:d2:8f:a1:4e was issued on by Let's Encrypt.
With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=arkiv.status.geoikt.no
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c1:b7:75:80:24:1b:26:10:ac:47:1e:91:8e:d2:8f:a1:4eSerial Number (int): 414367499363752243445610312496004654408014
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 98:95:f7:df:10:b4:74:18:9e:52:66:9f:fd:4c:ca:8d:9d:f6:3c:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 42:e3:5d:86:a6:79:23:c3:2e:c0:13:0e:6a:e5:c2:4b:f7:59:c3:5c
Fingerprint (sha256): 33:77:c9:73:c4:87:de:28:73:91:e3:21:f3:4a:c5:f1:23:22:c9:58:14:b8:54:18:88:9d:89:37:5a:cc:8a:a8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate arkiv.status.geoikt.no
38
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for arkiv.status.geoikt.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arkiv.status.geoikt.no
status-page.gurado.io
status.100ms.live
status.30kft.com.au
status.accessmanagement.motion.abb.com
status.advisorsexcel.com
status.basecone.com
status.basehq.com
status.chasehistory.net
status.cloud.virtana.com
status.coniq.com
status.courier.com
status.digitraffic.fi
status.evilcanary.com
status.evolveip.eu
status.gericall.nl
status.greendotcorp.com
status.hello-internet.co.uk
status.herocoders.com
status.iexapis.com
status.inaxus.com
status.interviewschedule.com
status.iys.org.tr
status.lambdalabs.com
status.livingsecurity.com
status.loopup.com
status.metricly.com
status.namirial.com
status.prontoforms.com
status.proxsys.net
status.sparkjarapp.com
status.surfly.jp
status.trueipsolutions.com
status.usemechanic.com
status.wasabi.com
statuspage.sports.gracenote.com
trust.datorama.com
uhg.status.netskope.io
status-page.gurado.io
status.100ms.live
status.30kft.com.au
status.accessmanagement.motion.abb.com
status.advisorsexcel.com
status.basecone.com
status.basehq.com
status.chasehistory.net
status.cloud.virtana.com
status.coniq.com
status.courier.com
status.digitraffic.fi
status.evilcanary.com
status.evolveip.eu
status.gericall.nl
status.greendotcorp.com
status.hello-internet.co.uk
status.herocoders.com
status.iexapis.com
status.inaxus.com
status.interviewschedule.com
status.iys.org.tr
status.lambdalabs.com
status.livingsecurity.com
status.loopup.com
status.metricly.com
status.namirial.com
status.prontoforms.com
status.proxsys.net
status.sparkjarapp.com
status.surfly.jp
status.trueipsolutions.com
status.usemechanic.com
status.wasabi.com
statuspage.sports.gracenote.com
trust.datorama.com
uhg.status.netskope.io
Other certificates including the domain name geoikt.no
(limited to 100 certificates)
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
test-nvdb-client.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-georeg-api.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-nvdb-client.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
*.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
test-nvdb-client.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-georeg-api.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-nvdb-client.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
*.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
Certificate
The complete raw certificate details for arkiv.status.geoikt.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmzCCBoOgAwIBAgISBMG3dYAkGyYQrEcekY7Sj6FOMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTAyMDMwOTQ1MDBaFw0yMTA1MDQwOTQ1MDBaMCExHzAdBgNVBAMT FmFya2l2LnN0YXR1cy5nZW9pa3Qubm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDKJ7MmCRU1XN4hlOzJKQR9SFat9p/D+GvWKfSS6NeF+VjlJXAwcEy0 hb+LMhvIfDTVkPmEo7cvEdGslWUZqKyN0yR/MjrnMQxlsuSYEDXfp6f/EJGOTWwj tpqDUeDrM8edtn2uhsbkhZnmlsatMp19DT2cQ/ExgRjiS5F04R3D2FdBplLytBtT vxG4DN5LaAgJ7qyV13tFNyqxIuKC80K01M9dpAk7t4enUazP53xQ3VoSyFzp9BQt oAHX9C8WzEHQTHiaRQHP8xZOKPvpzciniJAg8XCHFe8SgvV3kZpTifTMwCRbQFeB JALQIvDfgNdQWgItNDDsLxZr0LlYOXcFAgMBAAGjggS6MIIEtjAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFJiV998QtHQYnlJmn/1Myo2d9jwdMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMIIDewYDVR0RBIIDcjCCA26CFmFya2l2LnN0YXR1cy5nZW9pa3Qu bm+CFXN0YXR1cy1wYWdlLmd1cmFkby5pb4IRc3RhdHVzLjEwMG1zLmxpdmWCE3N0 YXR1cy4zMGtmdC5jb20uYXWCJnN0YXR1cy5hY2Nlc3NtYW5hZ2VtZW50Lm1vdGlv bi5hYmIuY29tghhzdGF0dXMuYWR2aXNvcnNleGNlbC5jb22CE3N0YXR1cy5iYXNl Y29uZS5jb22CEXN0YXR1cy5iYXNlaHEuY29tghdzdGF0dXMuY2hhc2VoaXN0b3J5 Lm5ldIIYc3RhdHVzLmNsb3VkLnZpcnRhbmEuY29tghBzdGF0dXMuY29uaXEuY29t ghJzdGF0dXMuY291cmllci5jb22CFXN0YXR1cy5kaWdpdHJhZmZpYy5maYIVc3Rh dHVzLmV2aWxjYW5hcnkuY29tghJzdGF0dXMuZXZvbHZlaXAuZXWCEnN0YXR1cy5n ZXJpY2FsbC5ubIIXc3RhdHVzLmdyZWVuZG90Y29ycC5jb22CG3N0YXR1cy5oZWxs by1pbnRlcm5ldC5jby51a4IVc3RhdHVzLmhlcm9jb2RlcnMuY29tghJzdGF0dXMu aWV4YXBpcy5jb22CEXN0YXR1cy5pbmF4dXMuY29tghxzdGF0dXMuaW50ZXJ2aWV3 c2NoZWR1bGUuY29tghFzdGF0dXMuaXlzLm9yZy50coIVc3RhdHVzLmxhbWJkYWxh YnMuY29tghlzdGF0dXMubGl2aW5nc2VjdXJpdHkuY29tghFzdGF0dXMubG9vcHVw LmNvbYITc3RhdHVzLm1ldHJpY2x5LmNvbYITc3RhdHVzLm5hbWlyaWFsLmNvbYIW c3RhdHVzLnByb250b2Zvcm1zLmNvbYISc3RhdHVzLnByb3hzeXMubmV0ghZzdGF0 dXMuc3BhcmtqYXJhcHAuY29tghBzdGF0dXMuc3VyZmx5LmpwghpzdGF0dXMudHJ1 ZWlwc29sdXRpb25zLmNvbYIWc3RhdHVzLnVzZW1lY2hhbmljLmNvbYIRc3RhdHVz Lndhc2FiaS5jb22CH3N0YXR1c3BhZ2Uuc3BvcnRzLmdyYWNlbm90ZS5jb22CEnRy dXN0LmRhdG9yYW1hLmNvbYIWdWhnLnN0YXR1cy5uZXRza29wZS5pbzBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEASxnF2+McpeP3miRhD5eY0KdwHTBtDMzuure8R+Er2Pym VsQBhPpz0wZZPpz4mFCmr+qeAWDpdLTNlrfEXoa4v/klZQNdYYBegGljb3EQLb4U xHZA54DRVMTKE9+7IKqxv1La0iXAmJqAd9d2EJcIC+WN1NgXVU//ASfYHs9YMSQR hCte3T/Ai+ITcfzzLk5jYZqYB9jX4X/0rk9cPbe85h7jJV08ys+YRbnJzBtn818f aOLASUtnPWuoKUKKafJSXiHck/QtcHAARXh4sQ7z74VOm+AgszfPmQVu+tR4OFod mTSM69q2oSuu8GxOd3kZTE9aR7YZzo7jINy35Suk+g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiezJgkVNVzeIZTsySkE fUhWrfafw/hr1in0kujXhflY5SVwMHBMtIW/izIbyHw01ZD5hKO3LxHRrJVlGais jdMkfzI65zEMZbLkmBA136en/xCRjk1sI7aag1Hg6zPHnbZ9robG5IWZ5pbGrTKd fQ09nEPxMYEY4kuRdOEdw9hXQaZS8rQbU78RuAzeS2gICe6sldd7RTcqsSLigvNC tNTPXaQJO7eHp1Gsz+d8UN1aEshc6fQULaAB1/QvFsxB0Ex4mkUBz/MWTij76c3I p4iQIPFwhxXvEoL1d5GaU4n0zMAkW0BXgSQC0CLw34DXUFoCLTQw7C8Wa9C5WDl3 BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 414367499363752243445610312496004654408014 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-03 09:45:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-04 09:45:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arkiv.status.geoikt.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25519714303726181493190592312650432583623612618825248999752045408918716047063639305380350427951949177421572705267272628221572263633739718013643178280153147686200936584376238855834388008768815667025659237543111546196723258788649539958904114697649505078633104662075081884816121214686436597999751509545713603712531350961221092555311515477165364309181624551799916983529467145064000783916202272694497015547997572124113106065668099197879484274001249857118973589999236518877631410719153622750552650191203363253667872384063209928710390498450418195283850540277233871451229642204939219333866911167978781936240192918309635192581 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9895f7df10b474189e52669ffd4cca8d9df63c1d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (882 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkiv.status.geoikt.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-page.gurado.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.100ms.live' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.30kft.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accessmanagement.motion.abb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.advisorsexcel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.basecone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.basehq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.chasehistory.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cloud.virtana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coniq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.courier.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.digitraffic.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.evilcanary.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.evolveip.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gericall.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.greendotcorp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hello-internet.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.herocoders.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.iexapis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inaxus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.interviewschedule.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.iys.org.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.lambdalabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.livingsecurity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.loopup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.metricly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.namirial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.prontoforms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.proxsys.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sparkjarapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.surfly.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.trueipsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.usemechanic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wasabi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage.sports.gracenote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.datorama.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg.status.netskope.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004b19c5dbe31ca5e3f79a24610f9798d0a7701d306d0ccceebab7bc47e12bd8fca656c40184fa73d306593e9cf89850a6afea9e0160e974b4cd96b7c45e86b8bff92565035d61805e8069636f71102dbe14c47640e780d154c4ca13dfbb20aab1bf52dad225c0989a8077d7761097080be58dd4d817554fff0127d81ecf58312411842b5edd3fc08be21371fcf32e4e63619a9807d8d7e17ff4ae4f5c3db7bce61ee3255d3ccacf9845b9c9cc1b67f35f1f68e2c0494b673d6ba829428a69f2525e21dc93f42d707000457878b10ef3ef854e9be020b337cf99056efad478385a1d99348cebdab6a12baef06c4e7779194c4f5a47b619ce8ee320dcb7e52ba4fa