3down.mit.edu
Issued by R3
About this certificate
This digital certificate with serial number 03:c8:33:ec:a5:2a:9a:3c:5d:0e:6e:11:aa:51:f4:6d:f9:e9 was issued on by Let's Encrypt.
With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=3down.mit.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c8:33:ec:a5:2a:9a:3c:5d:0e:6e:11:aa:51:f4:6d:f9:e9Serial Number (int): 329462350539284978656017702131315713636841
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bd:de:40:15:d8:58:4a:45:d1:25:13:7c:af:e4:93:a6:1b:58:65:c1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 51:e4:65:2b:69:d1:e8:40:74:88:38:04:6f:ab:49:76:42:13:b5:55
Fingerprint (sha256): 41:84:6c:d3:90:1f:a9:30:8b:e9:db:d9:82:c1:1a:c2:bb:e7:dc:4d:45:fd:79:6e:76:68:0f:1d:07:29:75:78
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 3down.mit.edu
38
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 3down.mit.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
3down.mit.edu
appcontrol.status.symantec.com
checkrstatus.com
status.accedo.tv
status.aucerna.com
status.avalara.com
status.booqable.com
status.chef.io
status.dispatch.me
status.dome9.com
status.elev.io
status.esendex.com
status.goshippo.com
status.hivestreaming.com
status.i-parcel.com
status.injixo.com
status.itfreedom.com
status.missioncloud.com
status.munzee.com
status.myconnectedsite.com
status.otoy.com
status.pusher.com
status.reevoo.com
status.resdiary.com
status.ringrevenue.com
status.rm.com
status.sa.ucsb.edu
status.skedulo.com
status.smartsheet.com
status.sparkpost.com
status.threatstack.com
status.truecar.com
status.unbelievable-machine.com
status.via.co.uk
status.wistia.com
status.zaius.com
status.zero-one.cc
www.cloudflarestatus.com
appcontrol.status.symantec.com
checkrstatus.com
status.accedo.tv
status.aucerna.com
status.avalara.com
status.booqable.com
status.chef.io
status.dispatch.me
status.dome9.com
status.elev.io
status.esendex.com
status.goshippo.com
status.hivestreaming.com
status.i-parcel.com
status.injixo.com
status.itfreedom.com
status.missioncloud.com
status.munzee.com
status.myconnectedsite.com
status.otoy.com
status.pusher.com
status.reevoo.com
status.resdiary.com
status.ringrevenue.com
status.rm.com
status.sa.ucsb.edu
status.skedulo.com
status.smartsheet.com
status.sparkpost.com
status.threatstack.com
status.truecar.com
status.unbelievable-machine.com
status.via.co.uk
status.wistia.com
status.zaius.com
status.zero-one.cc
www.cloudflarestatus.com
Other certificates including the domain name mit.edu
(limited to 100 certificates)
5692462144159744-fe3.pantheonsite.io
discussions.odl.mit.edu
frankwilczek.mit.edu
5671617594130432-fe3.pantheonsite.io
dreams.media.mit.edu
github-backup.mit.edu
www.wgs.mit.edu
bucket.mit.edu
cf-registration.mit.edu
tstormvideo.ll.mit.edu
clpi.mers.csail.mit.edu
bosefellows.mit.edu
ceepr.mit.edu
somtow-sucharitkul.mit.edu
us.prod.campusgroups.com
cliff-homepage.mcservices1.media.mit.edu
sloanfacultysearches.mit.edu
image.20210408.094303.s11.et.yellsatcloud.com
5724596284162048-fe2.pantheonsite.io
mailto.mit.edu
discussions-ci.odl.mit.edu
covid-stats.wi.mit.edu
bone.mit.edu
nothangout.media.mit.edu
eqaads.ll.mit.edu
listlottery-dev.mit.edu
crowdsensor.org
sciwrite.mit.edu
edu-apps-test.mit.edu
statuspage.io
maz.mit.edu
theta.mit.edu
rmerton.mit.edu
psirudahximenes.com
admissions.emeritus.org
mobilityofthefuture.mit.edu
dome-preview.mit.edu
www.borgeapps.eu
radius.mit.edu
5638203017003008-fe2.pantheonsite.io
aidm.mit.edu
tatacenter.mit.edu
newhouse.mit.edu
sloangroups.mit.edu
mitoc.mit.edu
meche-prod-app-2.mit.edu
olinda.mit.edu
ipespeakerseries.mit.edu
probcomp-2.csail.mit.edu
5750683647082496-fe3.pantheonsite.io
boyerlab.mit.edu
fryonthefly.mit.edu
silvaire.mit.edu
imes-fmp.mit.edu
git.mers.csail.mit.edu
us.prod.campusgroups.com
aldy.csail.mit.edu
beeme.mit.edu
alm.mit.edu
www.gcws.mit.edu
www.create.mit.edu
infiniteseries.mit.edu
mri-rle.mit.edu
5636026810761216-fe1.pantheonsite.io
hsf1.csail.mit.edu
ceepr.mit.edu
ceipostdoc.mit.edu
socialphysics.media.mit.edu
think.mit.edu
hilary.mit.edu
cce.mit.edu
medg.lcs.mit.edu
clubsports.mit.edu
clubareawest.alumclub.mit.edu
ikim.mit.edu
capco-status.polaris.synopsys.com
sdm.mit.edu
msm-dsoos.mit.edu
visor.mit.edu
education.mit.edu
classrooms.mit.edu
terrascope.mit.edu
5638203017003008-fe2.pantheonsite.io
unhangout.media.mit.edu
atlas.mit.edu
www.sloan-hbc.mit.edu
j3.shared.global.fastly.net
cfg2018.csail.mit.edu
ogs.mit.edu
paulbert.media.mit.edu
stat-stage.mit.edu
oc11-jabber-2.mit.edu
j3.shared.global.fastly.net
darts.mit.edu
skullhouse.mit.edu
5636026810761216-fe1.pantheonsite.io
techspace.mit.edu
hkn.mit.edu
create.mit.edu
hecsh1web01.mit.edu
discussions.odl.mit.edu
frankwilczek.mit.edu
5671617594130432-fe3.pantheonsite.io
dreams.media.mit.edu
github-backup.mit.edu
www.wgs.mit.edu
bucket.mit.edu
cf-registration.mit.edu
tstormvideo.ll.mit.edu
clpi.mers.csail.mit.edu
bosefellows.mit.edu
ceepr.mit.edu
somtow-sucharitkul.mit.edu
us.prod.campusgroups.com
cliff-homepage.mcservices1.media.mit.edu
sloanfacultysearches.mit.edu
image.20210408.094303.s11.et.yellsatcloud.com
5724596284162048-fe2.pantheonsite.io
mailto.mit.edu
discussions-ci.odl.mit.edu
covid-stats.wi.mit.edu
bone.mit.edu
nothangout.media.mit.edu
eqaads.ll.mit.edu
listlottery-dev.mit.edu
crowdsensor.org
sciwrite.mit.edu
edu-apps-test.mit.edu
statuspage.io
maz.mit.edu
theta.mit.edu
rmerton.mit.edu
psirudahximenes.com
admissions.emeritus.org
mobilityofthefuture.mit.edu
dome-preview.mit.edu
www.borgeapps.eu
radius.mit.edu
5638203017003008-fe2.pantheonsite.io
aidm.mit.edu
tatacenter.mit.edu
newhouse.mit.edu
sloangroups.mit.edu
mitoc.mit.edu
meche-prod-app-2.mit.edu
olinda.mit.edu
ipespeakerseries.mit.edu
probcomp-2.csail.mit.edu
5750683647082496-fe3.pantheonsite.io
boyerlab.mit.edu
fryonthefly.mit.edu
silvaire.mit.edu
imes-fmp.mit.edu
git.mers.csail.mit.edu
us.prod.campusgroups.com
aldy.csail.mit.edu
beeme.mit.edu
alm.mit.edu
www.gcws.mit.edu
www.create.mit.edu
infiniteseries.mit.edu
mri-rle.mit.edu
5636026810761216-fe1.pantheonsite.io
hsf1.csail.mit.edu
ceepr.mit.edu
ceipostdoc.mit.edu
socialphysics.media.mit.edu
think.mit.edu
hilary.mit.edu
cce.mit.edu
medg.lcs.mit.edu
clubsports.mit.edu
clubareawest.alumclub.mit.edu
ikim.mit.edu
capco-status.polaris.synopsys.com
sdm.mit.edu
msm-dsoos.mit.edu
visor.mit.edu
education.mit.edu
classrooms.mit.edu
terrascope.mit.edu
5638203017003008-fe2.pantheonsite.io
unhangout.media.mit.edu
atlas.mit.edu
www.sloan-hbc.mit.edu
j3.shared.global.fastly.net
cfg2018.csail.mit.edu
ogs.mit.edu
paulbert.media.mit.edu
stat-stage.mit.edu
oc11-jabber-2.mit.edu
j3.shared.global.fastly.net
darts.mit.edu
skullhouse.mit.edu
5636026810761216-fe1.pantheonsite.io
techspace.mit.edu
hkn.mit.edu
create.mit.edu
hecsh1web01.mit.edu
Certificate
The complete raw certificate details for 3down.mit.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIMTCCBxmgAwIBAgISA8gz7KUqmjxdDm4RqlH0bfnpMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTEwMDgwNzAyMjRaFw0yMjAxMDYwNzAyMjNaMBgxFjAUBgNVBAMT DTNkb3duLm1pdC5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr OzrRXzhh56UhK1CtSrGBLJxkemIfniZyElLW8WejkGgkJACElUWA5+GX4HpCmXHC /BnNFGh71Bx5dZMH+SpU8qpi90leT4yxHqvp9aiXBJz6uad0ti1q2WaZM9XYRWwB 1ygw5CgZfX7py7zKQksIQM8hDipw7kgM5L0j/AiS70tOK5f3KBou2UEe7JV4umy0 bR8RNjjrLxgmLBHxQcW4mzcHj0EWs/Q6dwnnT7w0Q7EhehFspU4OfFHABGYEq3l9 djAXg5FiOr4INKo5ci/JP+bYcfORzmTBTBylDfyShiliZ5nLCpT9ujp2k/7nKBZ3 ll9AUiBNbZa0A6zL+sG5AgMBAAGjggVZMIIFVTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFL3eQBXYWEpF0SUTfK/kk6YbWGXBMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MIIDJgYDVR0RBIIDHTCCAxmCDTNkb3duLm1pdC5lZHWCHmFwcGNvbnRyb2wuc3Rh dHVzLnN5bWFudGVjLmNvbYIQY2hlY2tyc3RhdHVzLmNvbYIQc3RhdHVzLmFjY2Vk by50doISc3RhdHVzLmF1Y2VybmEuY29tghJzdGF0dXMuYXZhbGFyYS5jb22CE3N0 YXR1cy5ib29xYWJsZS5jb22CDnN0YXR1cy5jaGVmLmlvghJzdGF0dXMuZGlzcGF0 Y2gubWWCEHN0YXR1cy5kb21lOS5jb22CDnN0YXR1cy5lbGV2LmlvghJzdGF0dXMu ZXNlbmRleC5jb22CE3N0YXR1cy5nb3NoaXBwby5jb22CGHN0YXR1cy5oaXZlc3Ry ZWFtaW5nLmNvbYITc3RhdHVzLmktcGFyY2VsLmNvbYIRc3RhdHVzLmluaml4by5j b22CFHN0YXR1cy5pdGZyZWVkb20uY29tghdzdGF0dXMubWlzc2lvbmNsb3VkLmNv bYIRc3RhdHVzLm11bnplZS5jb22CGnN0YXR1cy5teWNvbm5lY3RlZHNpdGUuY29t gg9zdGF0dXMub3RveS5jb22CEXN0YXR1cy5wdXNoZXIuY29tghFzdGF0dXMucmVl dm9vLmNvbYITc3RhdHVzLnJlc2RpYXJ5LmNvbYIWc3RhdHVzLnJpbmdyZXZlbnVl LmNvbYINc3RhdHVzLnJtLmNvbYISc3RhdHVzLnNhLnVjc2IuZWR1ghJzdGF0dXMu c2tlZHVsby5jb22CFXN0YXR1cy5zbWFydHNoZWV0LmNvbYIUc3RhdHVzLnNwYXJr cG9zdC5jb22CFnN0YXR1cy50aHJlYXRzdGFjay5jb22CEnN0YXR1cy50cnVlY2Fy LmNvbYIfc3RhdHVzLnVuYmVsaWV2YWJsZS1tYWNoaW5lLmNvbYIQc3RhdHVzLnZp YS5jby51a4IRc3RhdHVzLndpc3RpYS5jb22CEHN0YXR1cy56YWl1cy5jb22CEnN0 YXR1cy56ZXJvLW9uZS5jY4IYd3d3LmNsb3VkZmxhcmVzdGF0dXMuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHcARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAF8Xuy4WgAABAMA SDBGAiEAkuJNhukXoGFZcrNbLb/PP4CpMyxdos3vIBrb+2JJzn8CIQD2hUMBYkt1 8ryFxmCNQo7UdA+P6GqZRFWZI1kKgl8reAB2AEHIyrHfIkZKEMahOglCh15OMYsb A+vrS8do8JBilgb2AAABfF7suggAAAQDAEcwRQIgId3zzfNJVDFkyoHP4UByykk3 9q958cuKbAAz+1diikYCIQD+15HQ7VqLIZONpFgnOgn33ewxjIFtk7dROWedErcr nTANBgkqhkiG9w0BAQsFAAOCAQEAr8xMX0nh73yVcTKnuYShQwVjiYHCke8SVstz 9hOD1CizmUPjwTw9ym2lW2YJT9WFJGMToM/4CBz/tV0HibozbZiqcbFDwfobdL3y Rx45zsISVS8r7seDNyDNEye7IWTKQtR7Y+yq+YMwuHu8okzOmO/FyZjM9vHmiac6 tTYxHWr7TePIMd53gss23mgFiG2YmIH2E5+aTgIfvpGtD2x1y7LdXO1tCG/NeWV7 XKq1D0VZUnYHb18d1P+gKju/Z/XYnGYBFYuOtdGdWJdqwKWiQ7xs3SkF1PhIplkY 1OLTsTUrHgFmZGEp/04vioz55NSdJhm/FO6bTwDfWb44ZVDApQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzs60V84YeelIStQrUqx gSycZHpiH54mchJS1vFno5BoJCQAhJVFgOfhl+B6QplxwvwZzRRoe9QceXWTB/kq VPKqYvdJXk+MsR6r6fWolwSc+rmndLYtatlmmTPV2EVsAdcoMOQoGX1+6cu8ykJL CEDPIQ4qcO5IDOS9I/wIku9LTiuX9ygaLtlBHuyVeLpstG0fETY46y8YJiwR8UHF uJs3B49BFrP0OncJ50+8NEOxIXoRbKVODnxRwARmBKt5fXYwF4ORYjq+CDSqOXIv yT/m2HHzkc5kwUwcpQ38koYpYmeZywqU/bo6dpP+5ygWd5ZfQFIgTW2WtAOsy/rB uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 329462350539284978656017702131315713636841 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-08 07:02:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-06 07:02:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3down.mit.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21615957431072457762641305919552754555597554819218933603882877245075404573002233645348735637679487965493056049467130614036347223143136508115736483559207211151512080955042337445028689315503162400359998606626360585667771664532976608174447033152949380762594326058842509094586882599983335842874076682778401171474835682479286778936766506110403540274763358103490243980858161620022703660720432281150552651160766182508674274553641479643092039747165955920725595453382051147721206420316319737869952665162752163410550088976131367709870141921727488635516570591988299326840694828010065660456434336296341967685916106017724237005241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bdde4015d8584a45d125137cafe493a61b5865c1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (797 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3down.mit.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appcontrol.status.symantec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkrstatus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accedo.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.aucerna.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.avalara.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.booqable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.chef.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dispatch.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dome9.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.elev.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.esendex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.goshippo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hivestreaming.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.i-parcel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.injixo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.itfreedom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.missioncloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.munzee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.myconnectedsite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.otoy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pusher.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.reevoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.resdiary.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ringrevenue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sa.ucsb.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.skedulo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.smartsheet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sparkpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.threatstack.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.truecar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.unbelievable-machine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.via.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wistia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.zaius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.zero-one.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudflarestatus.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017c5eecb85a000004030048304602210092e24d86e917a0615972b35b2dbfcf3f80a9332c5da2cdef201adbfb6249ce7f022100f6854301624b75f2bc85c6608d428ed4740f8fe86a9944559923590a825f2b7800760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c5eecba080000040300473045022021ddf3cdf349543164ca81cfe14072ca4937f6af79f1cb8a6c0033fb57628a46022100fed791d0ed5a8b21938da458273a09f7ddec318c816d93b75139679d12b72b9d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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