spectrumflow.net
Issued by R3
About this certificate
This digital certificate with serial number 03:19:44:f6:d2:d6:60:9f:9e:e9:15:ee:fa:6c:a1:6e:09:f7 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=spectrumflow.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:19:44:f6:d2:d6:60:9f:9e:e9:15:ee:fa:6c:a1:6e:09:f7Serial Number (int): 269935586053335522448895242340607770626551
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a5:da:26:09:92:1b:e3:f5:7f:e5:16:ea:e3:f5:4d:56:bc:f7:54:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 69:95:65:ff:4a:8b:27:39:40:fb:d8:1b:cd:11:51:2e:ec:cd:80:bc
Fingerprint (sha256): 85:ca:d5:52:f2:57:f9:f8:80:cb:4d:5c:27:ed:21:db:b5:3f:93:5f:71:1b:58:65:16:65:a1:99:41:15:9b:a4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate spectrumflow.net
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spectrumflow.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.dev.spectrumflow.net
*.gitlab-pages.spectrumflow.net
*.idm.spectrumflow.net
*.spectrumflow.net
*.test.spectrumflow.net
*.vie.spectrumflow.net
spectrumflow.net
*.gitlab-pages.spectrumflow.net
*.idm.spectrumflow.net
*.spectrumflow.net
*.test.spectrumflow.net
*.vie.spectrumflow.net
spectrumflow.net
Other certificates including the domain name spectrumflow.net
(limited to 100 certificates)
rancher-waf-test.spectrumflow.net
spectrumflow.net
pagebuilder.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
spice.spectrumflow.net
dynamic-experience-prod-distillery.argo-cd.spectrumflow.net
*.spectrumflow.net
rancher.spectrumflow.net
testrodeo.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
dte-stage.argo-cd.spectrumflow.net
spectrumflow.net
spectrumflow.net
rancher-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
dm-nonprod-eks.argo-cd.spectrumflow.net
backend.testrodeo.spectrumflow.net
*.spectrumflow.net
distillery.spectrumflow.net
uat-business.pci.spectrumflow.net
tdcs-dev.spectrumflow.net
clusters-stable.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvrnew-eks.argo-cd.spectrumflow.net
gitlab.spectrumflow.net
spectrumflow.net
best-slate.spectrumflow.net
rancher.spectrumflow.net
vsi-specflow-entitlements-capiv4.argo-cd.spectrumflow.net
lineups.vsi.spectrumflow.net
fosd.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
ipvs-dev-eks-blue.argo-cd.spectrumflow.net
leo-metadata.argo-cd.spectrumflow.net
epgs-loadtest.argo-cd.spectrumflow.net
slate-tve-engprod.spectrumflow.net
rancher-test-upgrade-argocd.spectrumflow.net
pci.spectrumflow.net
jdtest-cluster-3-capi.spectrumflow.net
rancher.spectrumflow.net
v2.spectrumflow.net
rancher-next-argocd.spectrumflow.net
lantern-dev-capiv5-sf.argo-cd.spectrumflow.net
spectrumreach.ncs.spectrumflow.net
prod.spectrumflow.net
emu.spectrumflow.net
cdvr-mc1.argo-cd.spectrumflow.net
*.qa.mds.spectrumflow.net
rancher-next.spectrumflow.net
transition-meta-toolbox-flow.meta.spectrum.net
rancher-test-upgrade.spectrumflow.net
spectrumflow.net
*.meta.spectrum.net
settings-vhs-capi.spectrumflow.net
nns-search-eks-cluster.argo-cd.spectrumflow.net
vsi-specflow-ipvs-new.argo-cd.spectrumflow.net
ecd2.spectrumflow.net
rancher-argocd.spectrumflow.net
figaro.spectrumflow.net
spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
slate-tve-engprod.argo-cd.spectrumflow.net
ipvs-mc1.argo-cd.spectrumflow.net
focus-stage.argo-cd.spectrumflow.net
dte-stage.spectrumflow.net
pltvspecflow-1-29.argo-cd.spectrumflow.net
testrodeo.spectrumflow.net
neel-test.spectrumflow.net
backend.testrodeo.spectrumflow.net
best-cluster.argo-cd.spectrumflow.net
ipvs-dev-purple.argo-cd.spectrumflow.net
spectrumflow.net
rancher.spectrumflow.net
cewga.spectrumflow.net
cewga.ncs.spectrumflow.net
settings-vhs-poc-capi.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
cewga-ncs-lowers.argo-cd.spectrumflow.net
metadata-epgs.argo-cd.spectrumflow.net
*.tvsdk.spectrumflow.net
rancher-test-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
spectrumflow.net
clusters.spectrumflow.net
*.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
pdetube.spectrumflow.net
cewga.spectrumflow.net
*.pltv.spectrumflow.net
sspp-web-preprod.spectrumflow.net
*.pinxt-sdk-docs.spectrumflow.net
settings-mc1.argo-cd.spectrumflow.net
neel-test.argo-cd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
*.meta.spectrum.net
best-eks-capiv5-sf.argo-cd.spectrumflow.net
spectrumflow.net
pagebuilder.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
spice.spectrumflow.net
dynamic-experience-prod-distillery.argo-cd.spectrumflow.net
*.spectrumflow.net
rancher.spectrumflow.net
testrodeo.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
dte-stage.argo-cd.spectrumflow.net
spectrumflow.net
spectrumflow.net
rancher-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
dm-nonprod-eks.argo-cd.spectrumflow.net
backend.testrodeo.spectrumflow.net
*.spectrumflow.net
distillery.spectrumflow.net
uat-business.pci.spectrumflow.net
tdcs-dev.spectrumflow.net
clusters-stable.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvrnew-eks.argo-cd.spectrumflow.net
gitlab.spectrumflow.net
spectrumflow.net
best-slate.spectrumflow.net
rancher.spectrumflow.net
vsi-specflow-entitlements-capiv4.argo-cd.spectrumflow.net
lineups.vsi.spectrumflow.net
fosd.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
ipvs-dev-eks-blue.argo-cd.spectrumflow.net
leo-metadata.argo-cd.spectrumflow.net
epgs-loadtest.argo-cd.spectrumflow.net
slate-tve-engprod.spectrumflow.net
rancher-test-upgrade-argocd.spectrumflow.net
pci.spectrumflow.net
jdtest-cluster-3-capi.spectrumflow.net
rancher.spectrumflow.net
v2.spectrumflow.net
rancher-next-argocd.spectrumflow.net
lantern-dev-capiv5-sf.argo-cd.spectrumflow.net
spectrumreach.ncs.spectrumflow.net
prod.spectrumflow.net
emu.spectrumflow.net
cdvr-mc1.argo-cd.spectrumflow.net
*.qa.mds.spectrumflow.net
rancher-next.spectrumflow.net
transition-meta-toolbox-flow.meta.spectrum.net
rancher-test-upgrade.spectrumflow.net
spectrumflow.net
*.meta.spectrum.net
settings-vhs-capi.spectrumflow.net
nns-search-eks-cluster.argo-cd.spectrumflow.net
vsi-specflow-ipvs-new.argo-cd.spectrumflow.net
ecd2.spectrumflow.net
rancher-argocd.spectrumflow.net
figaro.spectrumflow.net
spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
slate-tve-engprod.argo-cd.spectrumflow.net
ipvs-mc1.argo-cd.spectrumflow.net
focus-stage.argo-cd.spectrumflow.net
dte-stage.spectrumflow.net
pltvspecflow-1-29.argo-cd.spectrumflow.net
testrodeo.spectrumflow.net
neel-test.spectrumflow.net
backend.testrodeo.spectrumflow.net
best-cluster.argo-cd.spectrumflow.net
ipvs-dev-purple.argo-cd.spectrumflow.net
spectrumflow.net
rancher.spectrumflow.net
cewga.spectrumflow.net
cewga.ncs.spectrumflow.net
settings-vhs-poc-capi.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
cewga-ncs-lowers.argo-cd.spectrumflow.net
metadata-epgs.argo-cd.spectrumflow.net
*.tvsdk.spectrumflow.net
rancher-test-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
spectrumflow.net
clusters.spectrumflow.net
*.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
pdetube.spectrumflow.net
cewga.spectrumflow.net
*.pltv.spectrumflow.net
sspp-web-preprod.spectrumflow.net
*.pinxt-sdk-docs.spectrumflow.net
settings-mc1.argo-cd.spectrumflow.net
neel-test.argo-cd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
*.meta.spectrum.net
best-eks-capiv5-sf.argo-cd.spectrumflow.net
Certificate
The complete raw certificate details for spectrumflow.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgISAxlE9tLWYJ+e6RXu+myhbgn3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTAxOTMzMTJaFw0yNDA4MDgxOTMzMTFaMBsxGTAXBgNVBAMT EHNwZWN0cnVtZmxvdy5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC AQCFYvR/eEDE4EsbyT+se4tae6LZj29W8Rz/KiAH258h99Hz276kmG9+L+7rCJYC ydaeN2gjC4zx9hCYMSl166bxCmBTfoHFXJ0ZfrGzEEpGS/sV5GrWOv9WOa58BiBE fe9eg3FNlnYUS1pJTnjxB6woZ2yEGeK6bo5+wUPsbOS+WG1dEt3GFcU7Ap+ZHhmC jpbpxbOZSwT58CtUVMNLDdkmPKpWDDJQL3GOZYlbq+gFC0M2AMGPPpipI1pF5b+Y Ntry2+7ttXsGro+Xv2sUchGAuZZ9PHQYgDl2zpAaAzD+J6fbhhp4MvKFy3F4DBob 7sJiZi6zZSd8+6viFBo1vZ5bHIGOFFcM5DybfhQBq9oGNhXpmNVLz1DHumYCZQRg q5QpAKnrr8TGTamh0NKdXNEGOjYo2CbuiLKFReGcy8GSGmzCaqBvcPs4kFouJ4Em Gs5kXBqAZIsO6vLO4fK8h4uLcGLPOgaM9PCw4saGaLUfCauOxbEU5Zbc2Fq8zYSu WjOqfYKeTYNDF6pDwUf9gpYBz6hJPseDokq/0sbVJ+Sw9wS/F0Mi5jTkb2R2XkGo yFg3YmmvLCeJMpp8048mkpDRTr/U8yyYOM4rRW9dNmr13uxyETfXhlKjt8iHbWZD o6yKUBba+okBUj8MIILqiubuWH8LXCiSSzBtBz0njkUXiQIDAQABo4ICqjCCAqYw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSl2iYJkhvj9X/lFurj9U1WvPdUPTAfBgNV HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0 cDovL3IzLmkubGVuY3Iub3JnLzCBswYDVR0RBIGrMIGoghYqLmRldi5zcGVjdHJ1 bWZsb3cubmV0gh8qLmdpdGxhYi1wYWdlcy5zcGVjdHJ1bWZsb3cubmV0ghYqLmlk bS5zcGVjdHJ1bWZsb3cubmV0ghIqLnNwZWN0cnVtZmxvdy5uZXSCFyoudGVzdC5z cGVjdHJ1bWZsb3cubmV0ghYqLnZpZS5zcGVjdHJ1bWZsb3cubmV0ghBzcGVjdHJ1 bWZsb3cubmV0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGPZDWz 7AAABAMARjBEAiB+fpSYlIVObJol2v0MBabHqZCHFbVKZd8NsB0v9SH9ZwIgTtLi PHDoSsapLN7DWYudEDfyv2hu4Lb4KWZxAkhVi54AdgDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAY9kNbPzAAAEAwBHMEUCIQCZYWLVCtLgLxOlYJ0i NQ+q685QpkMBbHkA4jmIdGPQVwIgPRVq6qP+xMgAvOPECoghOOMxrSR/tVOm350g 8eK340UwDQYJKoZIhvcNAQELBQADggEBADwVnfKlTHRuQJ8rENlJBjZnvXGqhGsO uQQmPMdttyNGc2E8XREYo2O6qFx7zLNcnDHNLYJmG2ynj5XHVnAZLwbioCRbHRau eFzSAXC9Fh+wN1qtLA2V5imySdoZhXXdAXzuWaanz07y7/kEsGEOcjmVKBOEwNAe h8fv8sovYH6m+2Qyq2jPzJYoPow6FpALrle4wUOaH6AQn6RLK6t5DRnhop0cdy2W dX8BS+3UT9zFrAJszfDzGxhVF/fRNxO29nxvckHrbCyHPQfZI5cGWxUNUN0PidQ9 4vVm/VaJUU2EWTEVjIBBbn9/6cVTgnMUQN8WeOutio803C8UuhNGSyg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAhWL0f3hAxOBLG8k/rHuL Wnui2Y9vVvEc/yogB9ufIffR89u+pJhvfi/u6wiWAsnWnjdoIwuM8fYQmDEpdeum 8QpgU36BxVydGX6xsxBKRkv7FeRq1jr/VjmufAYgRH3vXoNxTZZ2FEtaSU548Qes KGdshBnium6OfsFD7GzkvlhtXRLdxhXFOwKfmR4Zgo6W6cWzmUsE+fArVFTDSw3Z JjyqVgwyUC9xjmWJW6voBQtDNgDBjz6YqSNaReW/mDba8tvu7bV7Bq6Pl79rFHIR gLmWfTx0GIA5ds6QGgMw/ien24YaeDLyhctxeAwaG+7CYmYus2UnfPur4hQaNb2e WxyBjhRXDOQ8m34UAavaBjYV6ZjVS89Qx7pmAmUEYKuUKQCp66/Exk2podDSnVzR Bjo2KNgm7oiyhUXhnMvBkhpswmqgb3D7OJBaLieBJhrOZFwagGSLDuryzuHyvIeL i3BizzoGjPTwsOLGhmi1HwmrjsWxFOWW3NhavM2Erlozqn2Cnk2DQxeqQ8FH/YKW Ac+oST7Hg6JKv9LG1SfksPcEvxdDIuY05G9kdl5BqMhYN2JprywniTKafNOPJpKQ 0U6/1PMsmDjOK0VvXTZq9d7schE314ZSo7fIh21mQ6OsilAW2vqJAVI/DCCC6orm 7lh/C1wokkswbQc9J45FF4kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269935586053335522448895242340607770626551 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 19:33:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 19:33:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spectrumflow.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 544169619892239803786894883888678375619085303960399740542730134840252081660598109970487598587344863731892978780734926147861723491353459875620029447231903035167646353061166111382628349544536806588528773651935403343748168937458258818332420352001944846937725726522674859115659725684188240873601595981074941254539520117123895309089996440515697577726399689586607968756172445522593944311154318413848396485161269011060327097771779116911604342719167057739334904303995325616863733695605264243685871143770979096208474506348648908158537217906010350454774115227807930935129963792426227932697866556222169455807215408171925087157203045038972126977660549276698139263994539081960027126704649714505585433084056362564252279011024810091381461600394776724329126702203732608170017864899236376898882170012719318224784130145713884276826143202029621010618503664025807562371611210480030998754124428575511319650677356104421905646990266907222763689558282790321682031680052785223602584485940607872436791521351166149343132222532810096831712284688299326253205217857376679790928010828579782682662510883918281470940984356272334908530010735337751238768885973724323502000349850832825424506732013590083219325020761412738571447893227096376801261426214350387280792065929 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a5da2609921be3f57fe516eae3f54d56bcf7543d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.spectrumflow.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitlab-pages.spectrumflow.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idm.spectrumflow.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectrumflow.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.spectrumflow.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vie.spectrumflow.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumflow.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f6435b3ec000004030046304402207e7e949894854e6c9a25dafd0c05a6c7a9908715b54a65df0db01d2ff521fd6702204ed2e23c70e84ac6a92cdec3598b9d1037f2bf686ee0b6f82966710248558b9e007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f6435b3f30000040300473045022100996162d50ad2e02f13a5609d22350faaebce50a643016c7900e239887463d05702203d156aeaa3fec4c800bce3c40a882138e331ad247fb553a6df9d20f1e2b7e345 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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