yorkregion.com
Issued by R3
About this certificate
This digital certificate with serial number 03:61:79:ac:a5:ec:6f:59:db:52:5f:bb:3f:5a:f1:7f:2d:b1 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=yorkregion.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:61:79:ac:a5:ec:6f:59:db:52:5f:bb:3f:5a:f1:7f:2d:b1Serial Number (int): 294505980414491306128890412895550448807345
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 37:ca:a4:f2:1b:d1:b3:9d:ba:57:58:f4:0f:f7:a6:3a:9c:63:b9:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a8:d7:06:b1:94:ac:c2:df:d5:df:ef:ba:cf:01:b3:78:7d:fc:c4:09
Fingerprint (sha256): 01:1d:7b:b6:e5:8f:1e:ea:e5:4a:cc:6c:a5:2e:3d:83:de:f5:3c:06:28:7b:ff:34:16:f3:00:b3:b2:4a:89:1e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate yorkregion.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for yorkregion.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
yorkregion.com
Other certificates including the domain name yorkregion.com
(limited to 100 certificates)
local.buckinghamtoday.co.uk
yorkregion.com
yorkregion.com
eastyorkbeach.toronto.com
kalamazooshopping.mlive.com
local.kentnews.co.uk
local.flamboroughreview.com
local.theameryfreepress.com
local.panolawatchman.com
local.yourdailyjournal.com
local.thefirsthundredmiles.com
admin.adforge.com
local.thegazette.com
eastern-courier.origami.neighbourly.co.nz
local.dissexpress.co.uk
local.bensonnews-sun.com
local.mexicoledger.com
local.summitdaily.com
local.101highlandlakes.com
local.wahpetondailynews.com
local.ripongazette.co.uk
local.daily-chronicle.com
get.yorkregion.com
local.newstribune.info
peterborough.mykawartha.com
*.yorkregion.com
local.airgunshooting.co.uk
local.southwesternontario.ca
markham.yorkregion.com
the-nelson-leader.origami.neighbourly.co.nz
flintshopping.mlive.com
western-leader.origami.neighbourly.co.nz
local.newportnewstimes.com
local.clintonnc.com
portperry.durhamregion.com
local.bridemagazine.co.uk
tomball.communityimpact.com
local.lutontoday.co.uk
georgina.yorkregion.com
admin.adforge.com
s.yorkregion.com
local.ottawasun.com
local.sachem.ca
newhomes.yorkregion.com
local.northjersey.com
local.hertsad.co.uk
local.brechinadvertiser.co.uk
local.banbridgeleader.co.uk
s.yorkregion.com
local.brookingsregister.com
local.hutchnews.com
*.yorkregion.com
local.kent-life.co.uk
local.clevelandcountyherald.com
km.local.kentonline.co.uk
local.bemidjipioneer.com
local.cambstimes.co.uk
local.northamptonchron.co.uk
local.wisbechstandard.co.uk
local.moodycountyenterprise.com
*.yorkregion.com
local.pontiacdailyleader.com
local.thefirsthundredmiles.com
parrysoundnorth.parrysound.com
s.yorkregion.com
local.eastlondonadvertiser.co.uk
local.militarynews.com
local.theshaunavonstandard.com
local.thetfordandbrandontimes.co.uk
local.uintacountyherald.com
local.calgaryherald.com
local.guymondailyherald.com
local.hamhigh.co.uk
local.dglobe.com
secure-metroland.adperfect.com
local.spenboroughguardian.co.uk
local.moorefieldexaminer.com
local.saltwire.com
local.blueridgenow.com
impactousa.wanderful.ownlocal.com
peterborough.mykawartha.com
minto.southwesternontario.ca
local.thetfordandbrandontimes.co.uk
local.tahoedailytribune.com
kawarthalakes.mykawartha.com
local.argusobserver.com
secure-metroland.adperfect.com
yorkregion-com.us-midwest-1.townnews-staging.com
admin.adforge.com
local.torringtontelegram.com
local.fdlreporter.com
local.gettysburgtimes.com
local.theledger.com
muskegonshopping.mlive.com
local.mysuburbanlife.com
shopping.silive.com
local.suffolkfreepress.co.uk
cdn-le5.arkadiumhosted.com
mm.local.kentonline.co.uk
yorkregion.com
yorkregion.com
yorkregion.com
eastyorkbeach.toronto.com
kalamazooshopping.mlive.com
local.kentnews.co.uk
local.flamboroughreview.com
local.theameryfreepress.com
local.panolawatchman.com
local.yourdailyjournal.com
local.thefirsthundredmiles.com
admin.adforge.com
local.thegazette.com
eastern-courier.origami.neighbourly.co.nz
local.dissexpress.co.uk
local.bensonnews-sun.com
local.mexicoledger.com
local.summitdaily.com
local.101highlandlakes.com
local.wahpetondailynews.com
local.ripongazette.co.uk
local.daily-chronicle.com
get.yorkregion.com
local.newstribune.info
peterborough.mykawartha.com
*.yorkregion.com
local.airgunshooting.co.uk
local.southwesternontario.ca
markham.yorkregion.com
the-nelson-leader.origami.neighbourly.co.nz
flintshopping.mlive.com
western-leader.origami.neighbourly.co.nz
local.newportnewstimes.com
local.clintonnc.com
portperry.durhamregion.com
local.bridemagazine.co.uk
tomball.communityimpact.com
local.lutontoday.co.uk
georgina.yorkregion.com
admin.adforge.com
s.yorkregion.com
local.ottawasun.com
local.sachem.ca
newhomes.yorkregion.com
local.northjersey.com
local.hertsad.co.uk
local.brechinadvertiser.co.uk
local.banbridgeleader.co.uk
s.yorkregion.com
local.brookingsregister.com
local.hutchnews.com
*.yorkregion.com
local.kent-life.co.uk
local.clevelandcountyherald.com
km.local.kentonline.co.uk
local.bemidjipioneer.com
local.cambstimes.co.uk
local.northamptonchron.co.uk
local.wisbechstandard.co.uk
local.moodycountyenterprise.com
*.yorkregion.com
local.pontiacdailyleader.com
local.thefirsthundredmiles.com
parrysoundnorth.parrysound.com
s.yorkregion.com
local.eastlondonadvertiser.co.uk
local.militarynews.com
local.theshaunavonstandard.com
local.thetfordandbrandontimes.co.uk
local.uintacountyherald.com
local.calgaryherald.com
local.guymondailyherald.com
local.hamhigh.co.uk
local.dglobe.com
secure-metroland.adperfect.com
local.spenboroughguardian.co.uk
local.moorefieldexaminer.com
local.saltwire.com
local.blueridgenow.com
impactousa.wanderful.ownlocal.com
peterborough.mykawartha.com
minto.southwesternontario.ca
local.thetfordandbrandontimes.co.uk
local.tahoedailytribune.com
kawarthalakes.mykawartha.com
local.argusobserver.com
secure-metroland.adperfect.com
yorkregion-com.us-midwest-1.townnews-staging.com
admin.adforge.com
local.torringtontelegram.com
local.fdlreporter.com
local.gettysburgtimes.com
local.theledger.com
muskegonshopping.mlive.com
local.mysuburbanlife.com
shopping.silive.com
local.suffolkfreepress.co.uk
cdn-le5.arkadiumhosted.com
mm.local.kentonline.co.uk
yorkregion.com
Certificate
The complete raw certificate details for yorkregion.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISA2F5rKXsb1nbUl+7P1rxfy2xMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAzMDgwMjA3MzlaFw0yMzA2MDYwMjA3MzhaMBkxFzAVBgNVBAMT DnlvcmtyZWdpb24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 2wVl2m5c6KqnjeyGIblO5hpfPu+3WTDxG5MH0+tvXbygxxQ6Rxu/d1TkZUQ6/OCJ 7csLnvCkFMJjNBosN5SjT8T+ct7vbY1aM3qoyMHIPTM1T6pUNxpjv/HjX4i4grI3 LyKdCiQPErJO1kK0dHzwTSULsfA0hCNao4pYRGgxKnWkB2xQYYSrvjx+t6iwBbal qNbErdkiWTV43I9A1PEfpaPnecaigLoHJWjXul2OeMppQZNsEL9SQ+zsWmUgORHj lYq5X7XLgoPDOPx+fSHYkW/JHH9LrKHT3eL1sg6LSa+KRoeMd5qf635l3SdQOu2G VMpfhyIGHgeaMM3dP+1RpwIDAQABo4ICSjCCAkYwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQ3yqTyG9GznbpXWPQP96Y6nGO5EDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzAZBgNVHREEEjAQgg55b3JrcmVnaW9uLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ALc++yTfnE26dfI5 xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhr8wTdgAAAQDAEgwRgIhANTgkk61RN9n syhMffTJwM9UTpww03teKn03/wyuPeATAiEA+5q/wlzNnsxNRVfgCLWGO+T4e6hl lqVEh0fzLdOYQp0AdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAA AYa/ME39AAAEAwBHMEUCIQCVUhQjeFXOCev+h+AxZow4TAJiJThdbCiXZGNXFMPi /wIgfmA2kYSykOuHQKW/HZ0U9NgawRW/bfPj5ZgSvjOgONcwDQYJKoZIhvcNAQEL BQADggEBAGj7h/t0Q09HhZmRSbQh5tTqAsdexLm1cvhYzicuZMEycMr2QSksVS4I erLQaKJPG+0OnivMOts+iJLKe1FUs1ff7h3Ozclil7M4UM/hiK/Dps1MUmO//xr6 FxOAQf8/xPZGbdJQuAD1ytS2gZ5Hc/Yr3n8p+3qRqt6EJAX6hIh9Kww4FLK2UJeK bYX/2an6GinwIIIUky4eQDSAoT1C4dQXzeCpu80UPf3QapQeQaeJKK+1cfHhPPkM CrG0lmKrkbw3g0LIfMhKWwxIUKc2Byvfe+GZaJw/itP6avGQdcVgGn1dlFjSUIoA glXvqmWi/sjLh8wbhCI/TIukxDw4k0U= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wVl2m5c6KqnjeyGIblO 5hpfPu+3WTDxG5MH0+tvXbygxxQ6Rxu/d1TkZUQ6/OCJ7csLnvCkFMJjNBosN5Sj T8T+ct7vbY1aM3qoyMHIPTM1T6pUNxpjv/HjX4i4grI3LyKdCiQPErJO1kK0dHzw TSULsfA0hCNao4pYRGgxKnWkB2xQYYSrvjx+t6iwBbalqNbErdkiWTV43I9A1PEf paPnecaigLoHJWjXul2OeMppQZNsEL9SQ+zsWmUgORHjlYq5X7XLgoPDOPx+fSHY kW/JHH9LrKHT3eL1sg6LSa+KRoeMd5qf635l3SdQOu2GVMpfhyIGHgeaMM3dP+1R pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294505980414491306128890412895550448807345 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 02:07:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 02:07:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yorkregion.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27648850573631758097721692461326460365396184119650954546935882240028940758648918530405791018473896996684156054179329406011762293400584449118475092243599097402778808417124985042808887709430342418769849869680438729357120224874464347475275469577409248261354783592634493308833658242293119617723914524126426914176447936885081929535454881223660076743316150378003896617744640470725250091999822261845658328789693189922953791843544381862656216745091265722606127155394854375861630886900031948480586717224569869768141855360703876299153840711152807308795910699726706661394647033508488241733407723057605246247433056532997019095463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 37caa4f21bd1b39dba5758f40ff7a63a9c63b910 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkregion.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186bf304dd80000040300483046022100d4e0924eb544df67b3284c7df4c9c0cf544e9c30d37b5e2a7d37ff0cae3de013022100fb9abfc25ccd9ecc4d4557e008b5863be4f87ba86596a5448747f32dd398429d007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186bf304dfd0000040300473045022100955214237855ce09ebfe87e031668c384c026225385d6c289764635714c3e2ff02207e60369184b290eb8740a5bf1d9d14f4d81ac115bf6df3e3e59812be33a038d7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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