alerts.library.nyu.edu
Issued by R3
About this certificate
This digital certificate with serial number 04:fb:d9:a2:42:03:a2:07:04:56:17:1f:59:01:43:c3:a7:b8 was issued on by Let's Encrypt.
With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=alerts.library.nyu.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fb:d9:a2:42:03:a2:07:04:56:17:1f:59:01:43:c3:a7:b8Serial Number (int): 434149302790299813685400960814894211639224
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a5:b5:e1:3a:04:c4:51:99:93:57:ed:85:38:2a:98:54:e4:4f:60:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 87:85:dc:06:6b:2e:63:19:d0:65:d0:09:65:dd:ec:17:70:0d:b8:0d
Fingerprint (sha256): 76:77:40:ae:d3:ac:57:10:a0:50:97:d9:ee:46:da:e7:35:6c:2c:5d:2b:aa:fb:61:69:4e:fd:36:70:76:74:df
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate alerts.library.nyu.edu
40
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for alerts.library.nyu.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alerts.library.nyu.edu
status.akeneo.com
status.arc.fmc.com
status.ardoq.com
status.autopilothq.com
status.beam.cloud
status.bomcheck.net
status.capdesk.com
status.cliniko.com
status.compliancesystems.cloud
status.cresta.com
status.d1.cx
status.gestionix.com
status.hydrow.com
status.infotrack.com
status.its.sfu.ca
status.labelinsight.com
status.leavelogic.com
status.legalforce-cloud.com
status.meinkeasy.de
status.metaplane.dev
status.paccarsolutions.trimble.com
status.polly.help
status.pwnhealth.com
status.railz.ai
status.revenuewell.com
status.ribbit.ai
status.ruvos.com
status.solidgate.com
status.sonar.software
status.splitit.com
status.spoton.com
status.supportbook.nl
status.syntropystack.com
status.titan.email
status.twic.ai
status.universal.nl
status.vyopta.com
status.worldticket.com
www.keasystatus.de
status.akeneo.com
status.arc.fmc.com
status.ardoq.com
status.autopilothq.com
status.beam.cloud
status.bomcheck.net
status.capdesk.com
status.cliniko.com
status.compliancesystems.cloud
status.cresta.com
status.d1.cx
status.gestionix.com
status.hydrow.com
status.infotrack.com
status.its.sfu.ca
status.labelinsight.com
status.leavelogic.com
status.legalforce-cloud.com
status.meinkeasy.de
status.metaplane.dev
status.paccarsolutions.trimble.com
status.polly.help
status.pwnhealth.com
status.railz.ai
status.revenuewell.com
status.ribbit.ai
status.ruvos.com
status.solidgate.com
status.sonar.software
status.splitit.com
status.spoton.com
status.supportbook.nl
status.syntropystack.com
status.titan.email
status.twic.ai
status.universal.nl
status.vyopta.com
status.worldticket.com
www.keasystatus.de
Other certificates including the domain name nyu.edu
(limited to 100 certificates)
nyush-nac1.shanghai.nyu.edu
hosting.nyu.edu
rits.hosting.nyu.edu
rebekahrust.hosting.nyu.edu
ssoprod.its.nyu.edu
zora.hosting.nyu.edu
giki.hosting.nyu.edu
diploma.sps.nyu.edu
5648867420798976-fe4.pantheonsite.io
fastmri.med.nyu.edu
fcl.law.nyu.edu
mobileprint.nyu.edu
admissions.emeritus.org
cluster3.technolutions.net
pdsdev.library.nyu.edu
5676582576324608-fe3.pantheonsite.io
cluster3.technolutions.net
applicant.stern.nyu.edu
katejustement.hosting.nyu.edu
heng.hosting.nyu.edu
drkjlancaster.hosting.nyu.edu
klaporta.hosting.nyu.edu
sueannlau.hosting.nyu.edu
recreationregistration.nyu.edu
dcone.hosting.nyu.edu
makerspace.engineering.nyu.edu
shanghai.hosting.nyu.edu
cairoash.hosting.nyu.edu
laurafranklin-hall.hosting.nyu.edu
ssl714081.cloudflaressl.com
tolga.hosting.nyu.edu
greenestuff.hosting.nyu.edu
tisch.nyu.edu
cb.engineering.nyu.edu
5629935204958208-fe2.pantheonsite.io
newborn.hosting.nyu.edu
dslinks.hosting.nyu.edu
holostor.hpc.nyu.edu
cas02pmvwi.shc.sa.nyu.edu
bennyboy.hosting.nyu.edu
drr.cfs.nyu.edu
j3.shared.global.fastly.net
affiliate-snd.albert.its.nyu.edu
webinar.online.engineering.nyu.edu
nyush.hosting.nyu.edu
marl.smusic.nyu.edu
isdm.nyu.edu
sliu.hosting.nyu.edu
shibboleth.nyu.edu
kimmelonestop.nyu.edu
underrights.hosting.nyu.edu
cybersymposium.engineering.nyu.edu
vgc.poly.edu
debrajlevine.hosting.nyu.edu
banking-business-review.com
cga.hosting.nyu.edu
keywords.nyupress.org
sl5298.hosting.nyu.edu
christinexu.hosting.nyu.edu
rh.abudhabi.nyu.edu
shanghai.hosting.nyu.edu
home.nyu.edu
tmsdc02.shc.sa.nyu.edu
osiris.cyber.nyu.edu
jose.hosting.nyu.edu
katejustement.hosting.nyu.edu
violetnetwork.nyu.edu
koh.hosting.nyu.edu
whyb.hosting.nyu.edu
balletcenter.nyu.edu
eatingglobally.heatherruthlee.hosting.nyu.edu
vh-b7-te.law.nyu.edu
spanua3.hosting.nyu.edu
cluster3.technolutions.net
shanghai.hosting.nyu.edu
englishchannel.hosting.nyu.edu
textbooks.shanghai.nyu.edu
engage.its.nyu.edu
cga.hosting.nyu.edu
ais-web.stern.nyu.edu
*.stern.nyu.edu
wormtails.bio.nyu.edu
banking-business-review.com
seungguini.hosting.nyu.edu
laraybabrar.hosting.nyu.edu
learn.gencore.bio.nyu.edu
cluster2.technolutions.net
alicezhao.com
sofie.stern.nyu.edu
isdm.nyu.edu
fasedtech.hosting.nyu.edu
alyazia.hosting.nyu.edu
vgc.poly.edu
5629935204958208-fe2.pantheonsite.io
hockygroup.hosting.nyu.edu
drkjlancaster.hosting.nyu.edu
nyuresearchsites.org
5676582576324608-fe3.pantheonsite.io
fame.nyu.edu
guantanamo.dlib.nyu.edu
hosting.nyu.edu
rits.hosting.nyu.edu
rebekahrust.hosting.nyu.edu
ssoprod.its.nyu.edu
zora.hosting.nyu.edu
giki.hosting.nyu.edu
diploma.sps.nyu.edu
5648867420798976-fe4.pantheonsite.io
fastmri.med.nyu.edu
fcl.law.nyu.edu
mobileprint.nyu.edu
admissions.emeritus.org
cluster3.technolutions.net
pdsdev.library.nyu.edu
5676582576324608-fe3.pantheonsite.io
cluster3.technolutions.net
applicant.stern.nyu.edu
katejustement.hosting.nyu.edu
heng.hosting.nyu.edu
drkjlancaster.hosting.nyu.edu
klaporta.hosting.nyu.edu
sueannlau.hosting.nyu.edu
recreationregistration.nyu.edu
dcone.hosting.nyu.edu
makerspace.engineering.nyu.edu
shanghai.hosting.nyu.edu
cairoash.hosting.nyu.edu
laurafranklin-hall.hosting.nyu.edu
ssl714081.cloudflaressl.com
tolga.hosting.nyu.edu
greenestuff.hosting.nyu.edu
tisch.nyu.edu
cb.engineering.nyu.edu
5629935204958208-fe2.pantheonsite.io
newborn.hosting.nyu.edu
dslinks.hosting.nyu.edu
holostor.hpc.nyu.edu
cas02pmvwi.shc.sa.nyu.edu
bennyboy.hosting.nyu.edu
drr.cfs.nyu.edu
j3.shared.global.fastly.net
affiliate-snd.albert.its.nyu.edu
webinar.online.engineering.nyu.edu
nyush.hosting.nyu.edu
marl.smusic.nyu.edu
isdm.nyu.edu
sliu.hosting.nyu.edu
shibboleth.nyu.edu
kimmelonestop.nyu.edu
underrights.hosting.nyu.edu
cybersymposium.engineering.nyu.edu
vgc.poly.edu
debrajlevine.hosting.nyu.edu
banking-business-review.com
cga.hosting.nyu.edu
keywords.nyupress.org
sl5298.hosting.nyu.edu
christinexu.hosting.nyu.edu
rh.abudhabi.nyu.edu
shanghai.hosting.nyu.edu
home.nyu.edu
tmsdc02.shc.sa.nyu.edu
osiris.cyber.nyu.edu
jose.hosting.nyu.edu
katejustement.hosting.nyu.edu
violetnetwork.nyu.edu
koh.hosting.nyu.edu
whyb.hosting.nyu.edu
balletcenter.nyu.edu
eatingglobally.heatherruthlee.hosting.nyu.edu
vh-b7-te.law.nyu.edu
spanua3.hosting.nyu.edu
cluster3.technolutions.net
shanghai.hosting.nyu.edu
englishchannel.hosting.nyu.edu
textbooks.shanghai.nyu.edu
engage.its.nyu.edu
cga.hosting.nyu.edu
ais-web.stern.nyu.edu
*.stern.nyu.edu
wormtails.bio.nyu.edu
banking-business-review.com
seungguini.hosting.nyu.edu
laraybabrar.hosting.nyu.edu
learn.gencore.bio.nyu.edu
cluster2.technolutions.net
alicezhao.com
sofie.stern.nyu.edu
isdm.nyu.edu
fasedtech.hosting.nyu.edu
alyazia.hosting.nyu.edu
vgc.poly.edu
5629935204958208-fe2.pantheonsite.io
hockygroup.hosting.nyu.edu
drkjlancaster.hosting.nyu.edu
nyuresearchsites.org
5676582576324608-fe3.pantheonsite.io
fame.nyu.edu
guantanamo.dlib.nyu.edu
Certificate
The complete raw certificate details for alerts.library.nyu.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHTzCCBjegAwIBAgISBPvZokIDogcEVhcfWQFDw6e4MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTIxNjQzNTNaFw0yNDA1MTIxNjQzNTJaMCExHzAdBgNVBAMT FmFsZXJ0cy5saWJyYXJ5Lm55dS5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDAaRlUS4OHJ0M31PzJ7EKvB9CDOY0wz7/D+2/nOmQk16jakb1ni/LU mk9h/PXv5LgtQWWEUkq7xrYu34eMwro3seDZh2d47dt/WGU3zYY83VLAG7cByNN1 rYY6tsgJhbfcniXEdEYLofOn+hAqgljco2hX1qpW2qhtyZK3qu9BuWP5+/eP/zpC jaSNMpIi6su9k6oVW1Ne34iZPbykhIrpOILe47MGJAuNM1ChCJNIdK08XAh9dZRr M2apVdZBpYIY85Yn54wYCuBoCI2NMA3Ub88e45+h7xLsp8t7kklwoNFzDYYk0q/L Lc5w6ufJ+NAlosbKxf0Io+cbYq4mgUibAgMBAAGjggRuMIIEajAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFKW14ToExFGZk1fthTgqmFTkT2CeMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMIIDaAYDVR0RBIIDXzCCA1uCFmFsZXJ0cy5saWJyYXJ5Lm55dS5l ZHWCEXN0YXR1cy5ha2VuZW8uY29tghJzdGF0dXMuYXJjLmZtYy5jb22CEHN0YXR1 cy5hcmRvcS5jb22CFnN0YXR1cy5hdXRvcGlsb3RocS5jb22CEXN0YXR1cy5iZWFt LmNsb3VkghNzdGF0dXMuYm9tY2hlY2submV0ghJzdGF0dXMuY2FwZGVzay5jb22C EnN0YXR1cy5jbGluaWtvLmNvbYIec3RhdHVzLmNvbXBsaWFuY2VzeXN0ZW1zLmNs b3VkghFzdGF0dXMuY3Jlc3RhLmNvbYIMc3RhdHVzLmQxLmN4ghRzdGF0dXMuZ2Vz dGlvbml4LmNvbYIRc3RhdHVzLmh5ZHJvdy5jb22CFHN0YXR1cy5pbmZvdHJhY2su Y29tghFzdGF0dXMuaXRzLnNmdS5jYYIXc3RhdHVzLmxhYmVsaW5zaWdodC5jb22C FXN0YXR1cy5sZWF2ZWxvZ2ljLmNvbYIbc3RhdHVzLmxlZ2FsZm9yY2UtY2xvdWQu Y29tghNzdGF0dXMubWVpbmtlYXN5LmRlghRzdGF0dXMubWV0YXBsYW5lLmRldoIi c3RhdHVzLnBhY2NhcnNvbHV0aW9ucy50cmltYmxlLmNvbYIRc3RhdHVzLnBvbGx5 LmhlbHCCFHN0YXR1cy5wd25oZWFsdGguY29tgg9zdGF0dXMucmFpbHouYWmCFnN0 YXR1cy5yZXZlbnVld2VsbC5jb22CEHN0YXR1cy5yaWJiaXQuYWmCEHN0YXR1cy5y dXZvcy5jb22CFHN0YXR1cy5zb2xpZGdhdGUuY29tghVzdGF0dXMuc29uYXIuc29m dHdhcmWCEnN0YXR1cy5zcGxpdGl0LmNvbYIRc3RhdHVzLnNwb3Rvbi5jb22CFXN0 YXR1cy5zdXBwb3J0Ym9vay5ubIIYc3RhdHVzLnN5bnRyb3B5c3RhY2suY29tghJz dGF0dXMudGl0YW4uZW1haWyCDnN0YXR1cy50d2ljLmFpghNzdGF0dXMudW5pdmVy c2FsLm5sghFzdGF0dXMudnlvcHRhLmNvbYIWc3RhdHVzLndvcmxkdGlja2V0LmNv bYISd3d3LmtlYXN5c3RhdHVzLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMBMGCisG AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDwheBSFc/LAPBOC8V IBpenU0FX2bJT4LeRkIFf45Uv1OwJMP87L4TfZP2votOFR2z5VddP0EsRA8+B2oq /8Ny/c2AL9ExngiwCgE/B7iT6+5gZLizvYGmr3EJr0QIibiup7qf/yOlfYeDf+nl dSWZ0UcbDXn86KBzJWjyrbvWNQ1HrRyIlaqMSXufTGM2tDIK1r7IHAHnqlj+gZEq tluEdPkS3ZbGT02PAcw+1JV9elWxg2tbJyJBGXDo1OlKrPBISwb9TU6t/opE6mns uYl6Q3DcaO95BR/lcL5olUR9ROdzHmD2au/FFpvgpniiDe2i60+by3af3PB6WuEW 2cfU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGkZVEuDhydDN9T8yexC rwfQgzmNMM+/w/tv5zpkJNeo2pG9Z4vy1JpPYfz17+S4LUFlhFJKu8a2Lt+HjMK6 N7Hg2YdneO3bf1hlN82GPN1SwBu3AcjTda2GOrbICYW33J4lxHRGC6Hzp/oQKoJY 3KNoV9aqVtqobcmSt6rvQblj+fv3j/86Qo2kjTKSIurLvZOqFVtTXt+ImT28pISK 6TiC3uOzBiQLjTNQoQiTSHStPFwIfXWUazNmqVXWQaWCGPOWJ+eMGArgaAiNjTAN 1G/PHuOfoe8S7KfLe5JJcKDRcw2GJNKvyy3OcOrnyfjQJaLGysX9CKPnG2KuJoFI mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434149302790299813685400960814894211639224 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 16:43:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 16:43:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alerts.library.nyu.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24289580773614382897113914781822249372555688333351835527016899373973232298440821418277471189139261003555599254977740195955958963418942236090286380325357244231151566460353115428432916558177810326683215064436471297651412393426329169689813757571011565244134090335573348884228704667000121524919974989608901321330372422469152179775501154713128263693247402445684034245874486442650428799930259732933761606705947878336532322159511463007074772953445605001034513699645751202906981844353313937925911329106857848980878105337681716860906159685983792425593653119102627200003760107095966280060216288231527850843972811305958758238363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a5b5e13a04c451999357ed85382a9854e44f609e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (863 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alerts.library.nyu.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.akeneo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.arc.fmc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ardoq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.autopilothq.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.beam.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bomcheck.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.capdesk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cliniko.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.compliancesystems.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cresta.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.d1.cx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gestionix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.hydrow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.infotrack.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.its.sfu.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.labelinsight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.leavelogic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.legalforce-cloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.meinkeasy.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.metaplane.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.paccarsolutions.trimble.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.polly.help' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pwnhealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.railz.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.revenuewell.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ribbit.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ruvos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.solidgate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sonar.software' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.splitit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.spoton.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.supportbook.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.syntropystack.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.titan.email' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.twic.ai' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.universal.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vyopta.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.worldticket.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keasystatus.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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