groove.elastic.co

Issued by R3

About this certificate

This digital certificate with serial number 03:39:22:99:d5:34:cc:34:4e:d2:a3:60:1f:b3:7b:c8:77:d1 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=groove.elastic.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:22:99:d5:34:cc:34:4e:d2:a3:60:1f:b3:7b:c8:77:d1
Serial Number (int): 280778945207386583532513840311155441563601
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:2e:67:cd:2d:c6:87:f1:34:b0:aa:f8:f9:ea:ac:99:c0:78:35:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:42:f4:a6:76:0a:83:a7:65:fa:9d:f0:11:d1:49:86:02:01:da:0e
Fingerprint (sha256): 91:fb:11:4a:6c:dd:f0:0f:ee:75:95:77:be:da:4d:03:b5:75:66:ab:bf:4e:55:88:4b:af:79:b4:b9:2b:f0:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate groove.elastic.co

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for groove.elastic.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.grooveapp.com
branded.groove.co
branded.grooveapp.com
engine.groove.co
groove-engine.herokuapp.com
groove.adpearance.com
groove.appian.com
groove.appspace.com
groove.appzen.com
groove.avidratings.com
groove.buildium.com
groove.cloudgizmos.com
groove.cloudleaf.io
groove.crossover.com
groove.ehlinks.com
groove.elastic.co
groove.everquote.com
groove.fundera.com
groove.g2.com
groove.gocanvas.com
groove.goswift.ly
groove.groove.co
groove.grooveapp.com
groove.grvlnk.com
groove.grvlnk1.com
groove.grvlnk2.com
groove.grvlnk3.com
groove.grvlnk4.com
groove.jebbit.com
groove.joincoalition.com
groove.kenshoo.com
groove.kiva.org
groove.konghq.com
groove.learnship.com
groove.litmusteam.com
groove.lyric.com
groove.national.biz
groove.observepoint.com
groove.origamirisk.com
groove.placeexchange.com
groove.poppulo.com
groove.rapidapi.com
groove.riskified.com
groove.robinpowered.com
groove.simondata.com
groove.swivl.com
groove.trustarc.com
groove.uber.com
groove.veeva.com
groove.vipinsiders.com
groove.wellright.com
groove.workfront.com
groove.zappistore.com
groove.zenreach.com
groove.zydoc.com
private.groove.co

Other certificates including the domain name elastic.co

(limited to 100 certificates)
license.elastic.co
email.staging-alerts.elastic.co
flower.ea-registry-production.elastic.co
govcloud-status.elastic.co
apm-ci.elastic.co
oss-dependencies-dev.elastic.co
search-ba-demo.elastic.co
bistatus.mplatform.ch
ems-logs.elastic.co
us-east-1-staging-cloud-monitor.elastic.co
test-cert.spf.elastic.co
*.elastic.co
broadcaster-service.elastic.co
canvas.elastic.co
link.elastic.co
apm-agent-versions-staging.elastic.co
elastic.co
r2.shared.global.fastly.net
beats-ci.elastic.co
s.ssl.fastly.net
stag-static-www.elastic.co
godaddy-status.elastic.co
secrets.elastic.co
aws-eu-central-1-monitor-staging-cloud.elastic.co
govcloud-status.elastic.co
download-stats-staging.elastic.co
infra-ci.elastic.co
clients-ci.elastic.co
r2.shared.global.fastly.net
artifacts-staging.elastic.co
*.elastic.co
govcloud-status.elastic.co
au.credential.getsmarter.com
abemcertified.abem.org
ibm-dal-p00-metrics-staging-cloud.elastic.co
jobs.elastic.co
jenkins.elastic.co
eu-west-1b.secrets-test.elastic.co
r2.shared.global.fastly.net
aws-eu-central-1-metrics-staging-cloud.elastic.co
demo-staging.elastic.co
green.demo.elastic.co
cloud-test-stats.elastic.co
cloud-status.dimensiondata.com
tiles.maps.elastic.co
swiftype-ci.elastic.co
tiles.maps.elastic.co
business-systems-ci.elastic.co
dns-vetting1g.map.fastly.net
cloudstatus.protel.net
business-systems-ci.elastic.co
abemcertified.abem.org
infra-stats.elastic.co
docker-auth.ea-registry-production.elastic.co
artifacts-no-kpi.elastic.co
flower.ea-registry-production.elastic.co
r2.shared.global.fastly.net
email.elastic.co
tiles.maps.elastic.co
j.ssl.fastly.net
artifacts-staging.elastic.co
swiftype-ci.elastic.co
internal-ci.elastic.co
flower.ea-registry-production.elastic.co
cds3.cvent.com
build-stats-test.elastic.co
jvm-catalog.elastic.co
customer-test.ssl.fastly.net
registry.ea-registry-staging.elastic.dev
email.staging-ess.cloud.elastic.co
a3.shared.global.fastly.net
kibana-ci.elastic.co
r2.shared.global.fastly.net
support.elastic.co
license.elastic.co
beats-ci.elastic.co
support-hub.elastic.dev
sa-demo-kibana.prod.sa.elastic.co
cloudstatus.protel.net
r2.shared.global.fastly.net
groove.elastic.co
kibana.telemetry-staging.elastic.co
artifacts-staging.elastic.co
dns-vetting1g.map.fastly.net
s.ssl.fastly.net
aonhrlearningcenter.credentials.aon.com
govcloud-status.elastic.co
auth.elastic.co
flower.ea-registry-production.elastic.co
maps.elastic.co
aws-eu-central-1-logging-staging-cloud.elastic.co
artifacts-no-kpi.elastic.co
telemetry.elastic.co
aonhrlearningcenter.credentials.aon.com
r2.shared.global.fastly.net
artifacts-no-kpi.elastic.co
staging-deepthought.elastic.co
clachecker.elastic.co
oss-dependencies-dev.elastic.co
flower.ea-registry-production.elastic.co

Certificate

The complete raw certificate details for groove.elastic.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth877otOe6Lj05J7cWD/
tzC/UHx506i9M8mJCAmV0MZGczFqCXJ22R1lLwT9Wdx+mJEdKvvD/oZ0pcc862Wh
k78vCohc49NDsElhIuqNuulbieE0vjE3jJxMxto5+Bo3ugzcz4LpLhcUP5bVACav
AK4Ziev7LTg1IUz+yRago6PeoQr6BIaF/Uv3XcKMw6DgJXProR+0R+gdQYLY+yoo
l8wECLlw4Uaqlk7w7yvgJAQhdfMQQ0YlGPa+17UjJSBAitpXnuqxgdgiTmg94Oh7
gszHB11SiHUUxxZZn7WsqgDPYVq5BR8wOzGj08JQLTb4JiPWg/QEyZMFiWFDd3U0
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280778945207386583532513840311155441563601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 18:32:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-14 18:32:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'groove.elastic.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22990773616840189285285585032248847743190235202847215793838237578325997697596448218110796210241276360278813034543246975854889431333416110177683765037821109659003646498921330982035243063896525425515034691428420395789330441255157271530049403538188443509865184563870080261973241352869904643413678125919472514600668380205610145218406977126550374531487965869029041752316210970081808460833960806190299383290723144830142668749877242217366452667286510258852000254563625724019139437004461849775565914619199146012607036441204532518536151056627152759201464064981577120347323138210094781216347905615719010301690434074279568290999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							862e67cd2dc687f134b0aaf8f9eaac99c07835b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1174 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.grooveapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branded.groove.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branded.grooveapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engine.groove.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove-engine.herokuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.adpearance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.appian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.appspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.appzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.avidratings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.buildium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.cloudgizmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.cloudleaf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.crossover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.ehlinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.elastic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.everquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.fundera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.g2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.gocanvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.goswift.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.groove.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.grooveapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.grvlnk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.grvlnk1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.grvlnk2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.grvlnk3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.grvlnk4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.jebbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.joincoalition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.kenshoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.kiva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.konghq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.learnship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.litmusteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.lyric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.national.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.observepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.origamirisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.placeexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.poppulo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.rapidapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.riskified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.robinpowered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.simondata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.swivl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.trustarc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.uber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.veeva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.vipinsiders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.wellright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.workfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.zappistore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.zenreach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groove.zydoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.groove.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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