api-platform-status.production.tax.service.gov.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:d4:68:45:39:b7:b8:fb:25:84:23:c9:f7:bb:e5:10:89:99 was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api-platform-status.production.tax.service.gov.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:68:45:39:b7:b8:fb:25:84:23:c9:f7:bb:e5:10:89:99
Serial Number (int): 333615318733217914355604027479383350479257
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:d0:9b:7c:69:8b:f7:f2:f6:1a:64:b6:96:60:df:17:c8:06:61:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:3a:b8:18:9b:23:0c:0c:ac:4c:b8:95:7a:90:98:48:60:97:74:b1
Fingerprint (sha256): 54:64:c1:0a:e1:96:b0:b0:33:60:92:6f:72:d1:78:5e:5a:f1:3f:27:9e:1f:bb:cb:50:e5:ee:0d:68:14:04:92

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api-platform-status.production.tax.service.gov.uk

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-platform-status.production.tax.service.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-platform-status.production.tax.service.gov.uk
dnb-status.inrupt.com
ey-nextwave.status.subvrsive.com
status-goto-developer.logmeininc.com
status.1-stop.biz
status.accufundonline.com
status.cirrusinsight.com
status.coinmarketcap.com
status.gotomeeting.com
status.gototraining.com
status.gotowebinar.com
status.grammarly.com
status.grasshopper.com
status.hive.hr
status.idrift.no
status.inwebo.com
status.jive.com
status.join.me
status.layerstack.com
status.logmeinaccess.com
status.logmeinremotesupport.com
status.meetviva.com
status.naga.com
status.newsim.de
status.nexonia.com
status.nomical.com
status.nscom.com
status.rebelmouse.com
status.rectanglehealth.com
status.redcanary.com
status.sealights.io
status.sparkhire.com
status.storefeeder.com
status.vtex.com
status.vtex.com.br
status.workast.com
statuspage.keeper.io

Other certificates including the domain name tax.service.gov.uk

(limited to 100 certificates)
landscape.production.tools.tax.service.gov.uk
developer.service.hmrc.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
admin.staging.tax.service.gov.uk
api.externaltest.tax.service.gov.uk
api.development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
open.artefacts.tax.service.gov.uk
cip-canary-service-10-42.development.cip-paas.tax.service.gov.uk
dis.tax.service.gov.uk
childcare.tax.service.gov.uk
childcare.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
*.development.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
lab02.build.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
platapps-live.tax.service.gov.uk
www.prototypes.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
kibana.internal-lab04.telemetry.tax.service.gov.uk
maps-11-987.development.cip-paas.tax.service.gov.uk
*.live.platops.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-8-55.development.cip-paas.tax.service.gov.uk
online.hmrc.gov.uk
www.staging.tax.service.gov.uk
cname-acs-fast-stream.development.tax.service.gov.uk
development.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
kibana.internal-lab02.telemetry.tax.service.gov.uk
mdtp-system.platapps-labs.tax.service.gov.uk
confluence.staging.tools.tax.service.gov.uk
grafana-alerting.internal-lab01.telemetry.tax.service.gov.uk
elasticsearch.internal-staging.telemetry.tax.service.gov.uk
selfservice.staging.tools.tax.service.gov.uk
*.tax.service.gov.uk
online.hmrc.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
*.internal-lab03.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
jira.staging.tools.tax.service.gov.uk
dis.qa.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
bank-account-insights.staging.cip-app.tax.service.gov.uk
platapps-labs.tax.service.gov.uk
test-transaction-engine.tax.service.gov.uk
cname-jons-ccn2.integration.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
cip-canary-service-2-38.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
dis.qa.tax.service.gov.uk
*.integration.tax.service.gov.uk
platapps-labs.tools.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
qa.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
lab02.artefacts.tax.service.gov.uk
cname-jons-transaction-engine.integration.tax.service.gov.uk
api.integration.tax.service.gov.uk
paas-sample-2732-150.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
design.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
paas-sample-2-38.development.cip-paas.tax.service.gov.uk
platapps-platops-sandbox.tax.service.gov.uk
kibana.mdtp-staging.telemetry.tax.service.gov.uk
mediastorage.staging.tools.tax.service.gov.uk
kibana.internal-lab03.telemetry.tax.service.gov.uk
*.tax.service.gov.uk
paas-sample-2703-144.development.cip-paas.tax.service.gov.uk
lab03.externaltest.testing.tax.service.gov.uk
childcare-provider-checker.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
cip-canary-service-5-23.development.cip-paas.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
api.staging.tax.service.gov.uk
trigger.lab03.prototypes.tax.service.gov.uk
tools-proxy.staging.tools.tax.service.gov.uk
status-tool.internal-lab02.telemetry.tax.service.gov.uk
cip-canary-service-11-73.development.cip-paas.tax.service.gov.uk
elasticsearch.internal-lab02.telemetry.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
mediastorage-alb.staging.tools.tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
webchat-dev.tax.service.gov.uk
api.development.tax.service.gov.uk
cname-transaction-engine.staging.tax.service.gov.uk
default.development.cip-paas.tax.service.gov.uk
*.labs.telemetry.tax.service.gov.uk
*.staging.upscan.tax.service.gov.uk
user-management-dod-1397.poc.sandbox.tools.tax.service.gov.uk
transaction-engine.development.tax.service.gov.uk
tax.service.gov.uk
api-platform-status.production.tax.service.gov.uk
*.integration.tax.service.gov.uk

Certificate

The complete raw certificate details for api-platform-status.production.tax.service.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBobN15Ss9FhZwo/GuwM
3kjKOi918CCBnFuaxzJ56veFerKSUJsmk8aAkNB8qNb3BHt8yOaI7hkHrnYwQSzy
XqU/x9QamLOpZ4Tjdr5oPYkCw7lAPhPalvl+o6YkC/BA7Sim8fJBPW3GTzcLSXko
bOlByhZzXAsNC69fp/wS2s/T9sFMkOtDWQ7L6c09zP+MMXRHJW08CQIbtBdfkVYE
fgAtmbp/FGrIH1b8zW+cvEcIcbTAwNo6sNjtK0EYqS82hPIk3yvXD/c8558gyScN
a47qmTGLeCGQe+YQ4Y/8YA2qPK3nGLZpdvZkEgKwD0hUoG+kfw7E3oth9Vov+xmU
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333615318733217914355604027479383350479257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 08:07:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 08:07:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-platform-status.production.tax.service.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20715955517474510539272651974212664029589921044383645769939549883032231665588792107214314656800971693638711403503880287729885727084937996148593136266823333006207833338770429198074553582796804393070888690148909239154025443795144458661036832981926285628472644727414336792054825944236155867400346500300393549299561903207671022907113116259599645561850053990008030745125490440075041072170067025869703644402423929985592016811355255773057404740674387731594218512231644365038242233784873145348173734962677421390243974103663366920274312143080434013587953703072359561523008886892972278136860034010538760618997806609605435430051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25d09b7c698bf7f2f61a64b69660df17c8066198
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (868 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-platform-status.production.tax.service.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnb-status.inrupt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ey-nextwave.status.subvrsive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-goto-developer.logmeininc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.1-stop.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accufundonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cirrusinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coinmarketcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gotomeeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gototraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gotowebinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grammarly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.grasshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hive.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.idrift.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inwebo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.jive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.join.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.layerstack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.logmeinaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.logmeinremotesupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.meetviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.naga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.newsim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nexonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nomical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.nscom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rebelmouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rectanglehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.redcanary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sealights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sparkhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.storefeeder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vtex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vtex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.workast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage.keeper.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018adb0b0d750000040300463044022046ebe9f26fe5b96db6dd84190d418d381fc03254b43325483f6907cbed65cc4502204f4c0ac63fb0080e9f376d9046c3babbeb1d46b06eee25dec3c3ffb86e98a573007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018adb0b0d6a0000040300473045022100f68a6032afbfe0259b80a90262035d9131ad163231ca76e7259239046978eac1022014117dd058d3dd72fb1f7d14a77fe6b5370e066350a708019513df5aa07153e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00894cfc1534fbea8921a840fb19f6399cc3da6948cc2d50294db2281419972aa3ba21a7faca0895f0180a67b6d33d4a3225978172366e76c545fb61d75f5f06ce3f24e8f09e50e6c621735fedf8a2138bca139b6d6b3f60055b4d9be93f70776adcbed5f7f2f5a010b05c61efe1cce77a47dde9b2aaec55f515226a1ffae353daf7a0b33d4647990dad695853b1e01f1f2d59b45fae754330d35163bd83324119c679bec6b401c6a790493994407cd7435b73a8e83f882854e39dbc720a5e5a15143324593a3d630401973d6189efe492950b7ce96137979020236539f644e72319e92bed195292889d36aa47af46fd39d387ad4402f0859b37aebc450db3fc75