allotta.io
- Kraft Heinz Foods Company -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number b7:78:47:d3:bb:cf:77:8a:a2:fe:1a:89:20:c9:2b:b3 was issued on by Sectigo Limited.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Kraft Heinz Foods Company
Organization:
Kraft Heinz Foods Company
State / Province:
Illinois
Country: US
Country: US
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): b7:78:47:d3:bb:cf:77:8a:a2:fe:1a:89:20:c9:2b:b3Serial Number (int): 243873255678012442835454437888312814515
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: d1:e0:3a:aa:a3:c0:f8:ec:a8:84:6d:39:27:b9:d9:49:fa:c7:c4:13
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 37:bc:8e:d4:b4:f2:a9:66:3b:44:bc:92:ca:b7:e1:33:6b:94:d5:28
Fingerprint (sha256): b0:52:73:d6:0b:c4:b9:82:1e:88:4e:c7:3f:ab:56:ba:14:60:55:7c:58:02:30:ec:b0:47:14:af:a3:3c:3d:37
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate allotta.io
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for allotta.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
allotta.io
api.allotta.io
indexer.allotta.io
www.allotta.io
api.allotta.io
indexer.allotta.io
www.allotta.io
Other certificates including the domain name allotta.io
(limited to 100 certificates)
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
auth.allotta.io
mapa.taniafruchi.com.br
s7-sni.cloudinary.com
redige.lapieza.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
stg.allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
dev.allotta.io
prv.allotta.io
mapa.taniafruchi.com.br
s7-sni.cloudinary.com
s7-sni.cloudinary.com
dev.cargo.helex.io
www.wiggs.dev
s7-sni.cloudinary.com
allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
cdn.allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
npr.allotta.io
emilia-lach.dev
orion-next.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
link.aios.pe
s7-sni.cloudinary.com
s7-sni.cloudinary.com
dunarivercruises.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
auth.allotta.io
mapa.taniafruchi.com.br
s7-sni.cloudinary.com
redige.lapieza.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
stg.allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
dev.allotta.io
prv.allotta.io
mapa.taniafruchi.com.br
s7-sni.cloudinary.com
s7-sni.cloudinary.com
dev.cargo.helex.io
www.wiggs.dev
s7-sni.cloudinary.com
allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
cdn.allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
allotta.io
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
npr.allotta.io
emilia-lach.dev
orion-next.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
link.aios.pe
s7-sni.cloudinary.com
s7-sni.cloudinary.com
dunarivercruises.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
Certificate
The complete raw certificate details for allotta.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIRALd4R9O7z3eKov4aiSDJK7MwDQYJKoZIhvcNAQELBQAw gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0yNDA2MDMwMDAwMDBaFw0yNTA2MDMyMzU5NTlaMFkxCzAJBgNV BAYTAlVTMREwDwYDVQQIEwhJbGxpbm9pczEiMCAGA1UEChMZS3JhZnQgSGVpbnog Rm9vZHMgQ29tcGFueTETMBEGA1UEAxMKYWxsb3R0YS5pbzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKu+vtLlpmQXMBDdrXEq7xrz20ZrbGv7hVJg/+yq foJCHDkpaRhcxlTmD74i/qZYoIuqi9duSx7jY5cmAy71/5/vx6kkv9GCcjoUyLog KYtWRw4/0ViDUpsnk45jJ/Rpwp9ZnHX+RyqpTizlycOTGmpk2wGIyWT1zl1i75xu 35xXNd+sM5GghT+EhwrJPrrhLp+piCsrB8xQR6wbGuoxW17N/j7q2vmcoIPY4njO fn1yJUQ7TPVmau5yLjJTB31r1pse7K+OjDq2IfyFZv7nBV/g06XVWW4rZmhzi9CH vDZLHspQKOMqZFHPqB6A/ZORrfrl2dtVIggcMrsJBx6KKWECAwEAAaOCA4IwggN+ MB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/rMB0GA1UdDgQWBBTR4Dqq o8D47KiEbTknudlJ+sfEEzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEE AbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMw CAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5j b20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJD QS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5z ZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3Vy ZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5j b20wggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AM8RVu7VLnyv84db2Wkum+ka cWdKsBfsrAHSW3fOzDsIAAABj97Nw+8AAAQDAEcwRQIgdtPzJ3wsaIW+GVIT0nO8 cwfAL3jScr3StGRknCoEWIECIQD/v1UOtfyTdlYcizq8TEJp9HoB82jHQNWvflgN zFTVvAB1AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABj97Nw64A AAQDAEYwRAIgO2/UdztxTQRQ3WXwb2g48w3F8jI4yd8ZoVIuR2M5P5wCIEwmR5i2 DL6IBYHkSDsVLpG+wd0MEJf1rhCppGHWrtk4AHYATnWjJ1yaEMM4W2zU3z9S6x3w 4I4bjWnAsfpksWKaOd8AAAGP3s3DjwAABAMARzBFAiEA9OGwxDqdbxOILZBChfDM JaMxagF+Dt+BAZbNacPToMgCIGRvBKHlj2QDRxoWkE9G3U70flVAtLFcZjZKyn34 SiqNMEkGA1UdEQRCMECCCmFsbG90dGEuaW+CDmFwaS5hbGxvdHRhLmlvghJpbmRl eGVyLmFsbG90dGEuaW+CDnd3dy5hbGxvdHRhLmlvMA0GCSqGSIb3DQEBCwUAA4IB AQAgmwSCjvh0rLF2YgJ5LM1YxMbg2EslSXnV4i+DjyEKWPvyFu5EWVB+qOu0MvOc mZPANthRiUt0orAoiWcK4DYB3tud4OFqaZS+0dxWUWafn4pU++XoYmV+1tM2bv0D cLEFJOT7iR2+GGUNb+OkG/h97O1gTiOB2z5+OoAbxoWrPkg15o9Vy1uhuDn4n+o0 afFszmINNqJRMmvt8ulllOXCzK3Q0q70ZFpAHtCwwNaqrBjh8xIPX4FLAVIWt9XF IMEDqlqVpNYhymQ2O5Yir862d6aDvuOIQJ9MOimM7BukiKDTXfox7L2ZehA4y3ge uPGToC9bvAT5a3iGEENinTQE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq76+0uWmZBcwEN2tcSrv GvPbRmtsa/uFUmD/7Kp+gkIcOSlpGFzGVOYPviL+pligi6qL125LHuNjlyYDLvX/ n+/HqSS/0YJyOhTIuiApi1ZHDj/RWINSmyeTjmMn9GnCn1mcdf5HKqlOLOXJw5Ma amTbAYjJZPXOXWLvnG7fnFc136wzkaCFP4SHCsk+uuEun6mIKysHzFBHrBsa6jFb Xs3+Pura+Zygg9jieM5+fXIlRDtM9WZq7nIuMlMHfWvWmx7sr46MOrYh/IVm/ucF X+DTpdVZbitmaHOL0Ie8NkseylAo4ypkUc+oHoD9k5Gt+uXZ21UiCBwyuwkHHoop YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 243873255678012442835454437888312814515 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kraft Heinz Foods Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allotta.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21680810214331430524574568097129753361410581422120741474582673373939986238328157660471128278871250849747954896228845501168471529766973273053488310959019518895667816518798622857881883055048904493043848182388366974995813203868928320683903532878250106954292550856984431199082218764757820314722340193201670419310701988564672599901191969269882913425443145661268425526491113385639239068426118344990245376465846548961109674265390381317172595841111957831523882194191714485546476144444662676976416079236897762591357116407012791512803467199839048762106257763636949788871621321665824928169265620768997036093439393746568683858273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d1e03aaaa3c0f8eca8846d3927b9d949fac7c413 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allotta.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.allotta.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indexer.allotta.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allotta.io' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00209b04828ef874acb1766202792ccd58c4c6e0d84b254979d5e22f838f210a58fbf216ee4459507ea8ebb432f39c9993c036d851894b74a2b02889670ae03601dedb9de0e16a6994bed1dc5651669f9f8a54fbe5e862657ed6d3366efd0370b10524e4fb891dbe18650d6fe3a41bf87deced604e2381db3e7e3a801bc685ab3e4835e68f55cb5ba1b839f89fea3469f16cce620d36a251326bedf2e96594e5c2ccadd0d2aef4645a401ed0b0c0d6aaac18e1f3120f5f814b015216b7d5c520c103aa5a95a4d621ca64363b9622afceb677a683bee388409f4c3a298cec1ba488a0d35dfa31ecbd997a1038cb781eb8f193a02f5bbc04f96b78861043629d3404