paretosolutions.uchicago.edu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c4:ab:35:b3:2a:cc:51:17:74:c4:0e:e4:d2:7c:9c:f9:de was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=paretosolutions.uchicago.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c4:ab:35:b3:2a:cc:51:17:74:c4:0e:e4:d2:7c:9c:f9:deSerial Number (int): 328259778524739536593835414831533716732382
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cf:ca:77:7d:38:09:d8:53:b8:52:70:24:77:ec:3c:1d:cf:8d:c2:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 69:14:d3:b2:af:87:27:a2:55:51:9e:c2:ae:46:c6:c6:8a:07:c4:79
Fingerprint (sha256): 00:1b:50:86:0f:ce:0b:5c:e8:e4:3e:30:7b:aa:da:11:78:f7:64:73:6e:47:6b:c4:67:bf:85:1a:81:5d:2e:4e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate paretosolutions.uchicago.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for paretosolutions.uchicago.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
paretosolutions.uchicago.edu
Other certificates including the domain name uchicago.edu
(limited to 100 certificates)
iic.uchicago.edu
online.professional.uchicago.edu
paretosolutions.uchicago.edu
www.alemsegedlab.uchicago.edu
cdis.uchicago.edu
5695872079757312-fe3.pantheonsite.io
5690145009303552-fe2.pantheonsite.io
www.dickinsonlab.uchicago.edu
biotime.uchicago.edu
accredible.tutor.com
cobeylab.uchicago.edu
cmb-s4.org
statuspage.io
artflx.uchicago.edu
hbpl.uchicago.edu
5695872079757312-fe3.pantheonsite.io
*.uchicago.edu
cri-kaaiismtp2.cri.uchicago.edu
stagingcatalog.uchicago.edu
cluster.technolutions.net
mirabeau.lib.uchicago.edu
uchicago-main.edge.bluestate.digital
5681717746597888-fe4.pantheonsite.io
loop.lib.uchicago.edu
isa.uchicago.edu
uofcsurveylab.uchicago.edu
sw.src.uchicago.edu
5690145009303552-fe2.pantheonsite.io
amploadvance.com
tls.automattic.com
aonhrlearningcenter.credentials.aon.com
www.cef.uchicago.edu
mh.uchicago.edu
www.ec.uchicago.edu
statuspage.io
grahamschoolinfo.uchicago.edu
incapsula.com
statuspage.io
chicagounbound.uchicago.edu
donatetocancer.uchicago.edu
ucwn.uchicago.edu
5695872079757312-fe3.pantheonsite.io
akamai-san108.exacttarget.com
clelandchat.uchicago.edu
smlnj.org
wg-gleacher.uchicago.edu
erairb-prod.uchicago.edu
academy-achievements.gong.io
www.mychoice.uchicago.edu
simswuat23.uchicago.edu
5764640680181760-fe4.pantheonsite.io
player.cs.uchicago.edu
rsna.staging.rcc.uchicago.edu
pyrite.lib.uchicago.edu
gargantua.lib.uchicago.edu
uei-dviz.uchicago.edu
1155-vcenter.uchicago.edu
ability.uchicago.edu
achieve.escoffier.edu
ul-rdg1.ad.uchicago.edu
reserve.staging.chicagobooth.edu
joyeuse.uchicago.edu
athletics.uchicago.edu
myaccount.uchicago.edu
hosted-ce29.grid.uchicago.edu
lists.ci.uchicago.edu
cri-ksqlinsd2.cri.uchicago.edu
minuet.cs.uchicago.edu
www.cdis.uchicago.edu
apply-harris.uchicago.edu
statuspage.io
spt.uchicago.edu
gev.uchicago.edu
whypolicy.uchicago.edu
cobeylab.uchicago.edu
blueprint.uchicago.edu
parkwait.uchicago.edu
academy-achievements.gong.io
www.urban.uchicago.edu
hbpl.uchicago.edu
tls.automattic.com
ulysses.uchicago.edu
tbc.uchicago.edu
cobeylab.uchicago.edu
encyclopedie.uchicago.edu
cobeylab.uchicago.edu
mpcs-courses.cs.uchicago.edu
webchat.uchicago.edu
www.placelab.uchicago.edu
eggplant.uchicago.edu
lbcnet.uchicago.edu
klab.ci.uchicago.edu
jupyterhub.grid.uchicago.edu
guides.lib.uchicago.edu
stream2.uchicago.edu
www-dev.cs.uchicago.edu
cluster.technolutions.net
rdmi.uchicago.edu
dvlf.uchicago.edu
mpml.uchicago.edu
online.professional.uchicago.edu
paretosolutions.uchicago.edu
www.alemsegedlab.uchicago.edu
cdis.uchicago.edu
5695872079757312-fe3.pantheonsite.io
5690145009303552-fe2.pantheonsite.io
www.dickinsonlab.uchicago.edu
biotime.uchicago.edu
accredible.tutor.com
cobeylab.uchicago.edu
cmb-s4.org
statuspage.io
artflx.uchicago.edu
hbpl.uchicago.edu
5695872079757312-fe3.pantheonsite.io
*.uchicago.edu
cri-kaaiismtp2.cri.uchicago.edu
stagingcatalog.uchicago.edu
cluster.technolutions.net
mirabeau.lib.uchicago.edu
uchicago-main.edge.bluestate.digital
5681717746597888-fe4.pantheonsite.io
loop.lib.uchicago.edu
isa.uchicago.edu
uofcsurveylab.uchicago.edu
sw.src.uchicago.edu
5690145009303552-fe2.pantheonsite.io
amploadvance.com
tls.automattic.com
aonhrlearningcenter.credentials.aon.com
www.cef.uchicago.edu
mh.uchicago.edu
www.ec.uchicago.edu
statuspage.io
grahamschoolinfo.uchicago.edu
incapsula.com
statuspage.io
chicagounbound.uchicago.edu
donatetocancer.uchicago.edu
ucwn.uchicago.edu
5695872079757312-fe3.pantheonsite.io
akamai-san108.exacttarget.com
clelandchat.uchicago.edu
smlnj.org
wg-gleacher.uchicago.edu
erairb-prod.uchicago.edu
academy-achievements.gong.io
www.mychoice.uchicago.edu
simswuat23.uchicago.edu
5764640680181760-fe4.pantheonsite.io
player.cs.uchicago.edu
rsna.staging.rcc.uchicago.edu
pyrite.lib.uchicago.edu
gargantua.lib.uchicago.edu
uei-dviz.uchicago.edu
1155-vcenter.uchicago.edu
ability.uchicago.edu
achieve.escoffier.edu
ul-rdg1.ad.uchicago.edu
reserve.staging.chicagobooth.edu
joyeuse.uchicago.edu
athletics.uchicago.edu
myaccount.uchicago.edu
hosted-ce29.grid.uchicago.edu
lists.ci.uchicago.edu
cri-ksqlinsd2.cri.uchicago.edu
minuet.cs.uchicago.edu
www.cdis.uchicago.edu
apply-harris.uchicago.edu
statuspage.io
spt.uchicago.edu
gev.uchicago.edu
whypolicy.uchicago.edu
cobeylab.uchicago.edu
blueprint.uchicago.edu
parkwait.uchicago.edu
academy-achievements.gong.io
www.urban.uchicago.edu
hbpl.uchicago.edu
tls.automattic.com
ulysses.uchicago.edu
tbc.uchicago.edu
cobeylab.uchicago.edu
encyclopedie.uchicago.edu
cobeylab.uchicago.edu
mpcs-courses.cs.uchicago.edu
webchat.uchicago.edu
www.placelab.uchicago.edu
eggplant.uchicago.edu
lbcnet.uchicago.edu
klab.ci.uchicago.edu
jupyterhub.grid.uchicago.edu
guides.lib.uchicago.edu
stream2.uchicago.edu
www-dev.cs.uchicago.edu
cluster.technolutions.net
rdmi.uchicago.edu
dvlf.uchicago.edu
mpml.uchicago.edu
Certificate
The complete raw certificate details for paretosolutions.uchicago.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgISA8SrNbMqzFEXdMQO5NJ8nPneMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MDkwMDMyMTFaFw0x ODEwMDcwMDMyMTFaMCcxJTAjBgNVBAMTHHBhcmV0b3NvbHV0aW9ucy51Y2hpY2Fn by5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCAfLllR3mZSBwG S2eXkkPUCp0nm1Uj1Yynd54Us2WT1AO5+YseMNvMuRWC9cU/b2+Geir7X6enGv5B rcR8ptWcnjq3oebL/ZL/0kUL2NRNWc1f27m1v0dLZyLJ9Gcsv8pwRSUt//Xmuhfb bGYm/dkt8ziYDhn4tKeRuQfxv1ntE+dzAJrY3yIDjzKACwX646oPzr3v3A2y6Smw 5aO962kJfpY4+9BmYXDdOy2jtNCdx6r+B60wQezSv6oPK4b/8fwoXdRe2kwBiuYc 0gPNZArEDTfsZLevIFkZpsfnjEGgBEbAfFcMqh8haL9GM7P7saD4g43LlDgoikn6 XSIoRWeVAgMBAAGjggMjMIIDHzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFM/Kd304 CdhTuFJwJHfsPB3PjcJKMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wJwYDVR0RBCAwHoIccGFyZXRvc29sdXRpb25zLnVj aGljYWdvLmVkdTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMB AQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGr BggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVs aWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFu Y2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8v bGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBAwYKKwYBBAHWeQIEAgSB9ASB 8QDvAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFkfKrlFwAA BAMARzBFAiEAhIRNduLdoAwPIiDz6L2vAqINl/k1UItHSal72RyDZYgCIDVEtXn/ O+wpTS4dLoxwlzWubpZtLC2Y68IKnze30LddAHUA23Sv7ssp7LH+yj5xbSzluaq7 NveEcYPHXZ1PN7Yfv2QAAAFkfKro7QAABAMARjBEAiBlXqOIWcLPBRFlMb6eeAM6 VrvV8PEo9+5/58EPNux09wIgSxohJEtJD4Z6SL5yxuSmRJ/P0bwu5ThKokCzbPUA CbwwDQYJKoZIhvcNAQELBQADggEBAF8d2cL/QO7jgeCANf4NjJej57GvfTJifACq bftx5kw0cKSxonqv7qX57c5W/X1oCdfbsLa5NoD5aWpqeXBRwwkhG6KjdgZefjHQ QcmUfoyFrUokqOxaodNTBDAwQpL2oGpxxQYr+cACMdgW9iQjSUTGzkBWut6WRILL lomvhv/JTK/PJ73BVJMhJi6YWcbqqsaoz0mV0W7nrn94HWtO3BsdINb7STqHh8zP y4LWqRDa5xYR6wAnLFWy8o3ipYi7LW87wdncxkQtvIkP7/KIHcyb9RSY0NyMMsIi 0ZGZfhhcseOj4hyzOZopgdhsOpGTBgy2HEWFOG035W83j1onclM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHy5ZUd5mUgcBktnl5JD 1AqdJ5tVI9WMp3eeFLNlk9QDufmLHjDbzLkVgvXFP29vhnoq+1+npxr+Qa3EfKbV nJ46t6Hmy/2S/9JFC9jUTVnNX9u5tb9HS2ciyfRnLL/KcEUlLf/15roX22xmJv3Z LfM4mA4Z+LSnkbkH8b9Z7RPncwCa2N8iA48ygAsF+uOqD86979wNsukpsOWjvetp CX6WOPvQZmFw3Tsto7TQnceq/getMEHs0r+qDyuG//H8KF3UXtpMAYrmHNIDzWQK xA037GS3ryBZGabH54xBoARGwHxXDKofIWi/RjOz+7Gg+IONy5Q4KIpJ+l0iKEVn lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 328259778524739536593835414831533716732382 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 00:32:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-07 00:32:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paretosolutions.uchicago.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16220006831765974210651332086421410478607604087124697136452636400404298903892865842893817233954993498456196008160158938338713276735536430027784868914354177269130571997366314045730976117178572245435863409240092413214426216503681270753231957502929280977122971003357878351244909519545073353472912189469890879081172935419713595927741746775748447975447857750297394722702382496896203816418211868543901687245133183033022079646289407693634491956414574663232293585648948848731870232608544074831515321236448772622874788279757464672027478556719401298902179036547833553826610689089329095073396299996509479190165897990334222526357 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cfca777d3809d853b852702477ec3c1dcf8dc24a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paretosolutions.uchicago.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001647caae517000004030047304502210084844d76e2dda00c0f2220f3e8bdaf02a20d97f935508b4749a97bd91c83658802203544b579ff3bec294d2e1d2e8c709735ae6e966d2c2d98ebc20a9f37b7d0b75d007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001647caae8ed00000403004630440220655ea38859c2cf05116531be9e78033a56bbd5f0f128f7ee7fe7c10f36ec74f702204b1a21244b490f867a48be72c6e4a6449fcfd1bc2ee5384aa240b36cf50009bc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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