webserver.srcf.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e9:e0:b1:97:55:44:f2:dc:ee:84:ee:ad:43:33:90:4d:16 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=webserver.srcf.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e9:e0:b1:97:55:44:f2:dc:ee:84:ee:ad:43:33:90:4d:16Serial Number (int): 340921318464858766296010115739799216213270
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4b:99:5a:d2:fb:ed:72:d2:a3:89:a1:58:c7:e5:41:7b:fa:83:5b:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1d:fd:4f:b2:67:5c:fd:93:75:04:d4:c3:a6:f2:1f:ad:8d:d5:09:f5
Fingerprint (sha256): 01:e9:02:91:77:7f:83:b1:df:7c:9b:9e:3a:e2:bd:5e:95:d4:0f:e6:04:02:06:af:db:54:73:0e:eb:46:94:3e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate webserver.srcf.net
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webserver.srcf.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
judo.soc.ucam.org
webserver.srcf.net
www.judo.soc.ucam.org
webserver.srcf.net
www.judo.soc.ucam.org
Other certificates including the domain name srcf.net
(limited to 100 certificates)
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
winnie.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webmail.pip.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
seismograph.srcf.net
webserver.srcf.net
webmail.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
peterhousebc.org
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
winnie.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webmail.pip.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
seismograph.srcf.net
webserver.srcf.net
webmail.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
peterhousebc.org
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
Certificate
The complete raw certificate details for webserver.srcf.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgISA+ngsZdVRPLc7oTurUMzkE0WMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDExMjA5MThaFw0y MDA1MzAxMjA5MThaMB0xGzAZBgNVBAMTEndlYnNlcnZlci5zcmNmLm5ldDCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALbKJUm5mRmR5v7sOIeyWiymPwRX 7a7ewkD48JFcAY+RpvrIIIwjaW7UeD5ddeFO/1b4Qk3MWfdXE3Ihl/DzeREWgfXE T1VMlLzM/SxEKtbjM3QOa312006yqj/E8ez3aviTXyJlWrcWwvddEfnF7uTIMKO9 89pl8sC7jJrfBR1dwwTWlyXrs1h8rzhEXhbHLBgJW3guLnvFrWYJb8CELvY5JXiJ 3Tr2P95mdJBfKyqcKc44dCwH9HSdchoCXWRsotzUlxDCoJSXXAj0yHVcclcL+ZEb 8uzHf5S3zNL4qPNkB/fCSYzRJYTkneci+nXFWw+e+tHdGo79hGfn5ILx/CMarLwP 5LsDgK414uao4Y1uFa0CJC5htFJhxxNi8+IsZY2QRlsmkMvLWaYTy3so0CnO/tQn q4aV95GjbK39iXGdGYba4VG0Y0KA5PHZ3zqylGnt1Vq2+AYK3Majlh9TfLxX+Vkf VHSOtdG/ZH0MbpFrFDZYPp/wqLUsPqYv3PIQvC4olSzY5bXAarhSkJNlTISbCwfB KEBM4ChhAvh8id7DdFYL3w/Wu5PBD9VIkyF89dEDc/9Yb/owY5w1TGhXZ9Wrhhaz IBkzWGcssGjuXAsoBpNs6hha8lp3FFnkhznb7WqWq7PODDq5J6CCP95aeiirzp8q jAXN4GHMhyrGU4spAgMBAAGjggKQMIICjDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FEuZWtL77XLSo4mhWMflQXv6g1vHMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wRwYDVR0RBEAwPoIRanVkby5zb2MudWNh bS5vcmeCEndlYnNlcnZlci5zcmNmLm5ldIIVd3d3Lmp1ZG8uc29jLnVjYW0ub3Jn MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFwljcZ mwAABAMARzBFAiBGHBYKX0aRQ2fFTxjOOIhZW+JxaKYozQ6ZjxUQsRUeXwIhAL5d GNH7r7jKNyf3exehsTVJT6Nm7Vqg8FvZ+HuZFb8sAHUAB7dcG+V9aP/xsMYdIxXH uuZXfFeUt2ruvGE6GmnTohwAAAFwljcZlwAABAMARjBEAiB/Z8kwlZMZ40ak03hl /TeLj+GB+mol5c9csv47C7KYxgIgVBqztqLpcSh85mWsA6inEYrSHgGjnFWybN12 8cRz6xswDQYJKoZIhvcNAQELBQADggEBAFmirsDWAgY67OxjyytlBrg1eq/j3epc ui7fUDJ5FLdciQV1ybNB0u8u6kKvNKylqOfs7hfkru1maczLzGh0AhOoH4Rd84yf 1z9F4s4q3MH+VtnWhex1H8gtNOIFF7Lp9ShjzLcQCtbkEQwZM1zi6ZPgXiAMdSe1 Km36rCoryNBLsqEgVd+VXz2P9ZuuHYMjtRRaAaCmi0uRbHYFZwclZaoz13yYQINx 5i1qQPzaf+DVow3RrmkqnGDUQylef80uwGUj6UeLKbCPkDUFA8fr3ZmR6XikWooG 7ilixPsoKxkiaN2xdRhYI2PYUZJG7Uhz/blEfrN0cHlPAWiF2iLTU0I= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtsolSbmZGZHm/uw4h7Ja LKY/BFftrt7CQPjwkVwBj5Gm+sggjCNpbtR4Pl114U7/VvhCTcxZ91cTciGX8PN5 ERaB9cRPVUyUvMz9LEQq1uMzdA5rfXbTTrKqP8Tx7Pdq+JNfImVatxbC910R+cXu 5Mgwo73z2mXywLuMmt8FHV3DBNaXJeuzWHyvOEReFscsGAlbeC4ue8WtZglvwIQu 9jkleIndOvY/3mZ0kF8rKpwpzjh0LAf0dJ1yGgJdZGyi3NSXEMKglJdcCPTIdVxy Vwv5kRvy7Md/lLfM0vio82QH98JJjNElhOSd5yL6dcVbD5760d0ajv2EZ+fkgvH8 IxqsvA/kuwOArjXi5qjhjW4VrQIkLmG0UmHHE2Lz4ixljZBGWyaQy8tZphPLeyjQ Kc7+1CerhpX3kaNsrf2JcZ0ZhtrhUbRjQoDk8dnfOrKUae3VWrb4BgrcxqOWH1N8 vFf5WR9UdI610b9kfQxukWsUNlg+n/CotSw+pi/c8hC8LiiVLNjltcBquFKQk2VM hJsLB8EoQEzgKGEC+HyJ3sN0VgvfD9a7k8EP1UiTIXz10QNz/1hv+jBjnDVMaFdn 1auGFrMgGTNYZyywaO5cCygGk2zqGFryWncUWeSHOdvtapars84MOrknoII/3lp6 KKvOnyqMBc3gYcyHKsZTiykCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340921318464858766296010115739799216213270 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 12:09:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 12:09:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webserver.srcf.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745716635720323742557941718925050299142202247244625187597876062621661930646354333110453055281058107241914288351438374583282385012799409570879947896084391839983616076890379358873107253096669945284226344601477031707525997531465679123104427090546342230082003901742659386534920357451557539420455826842941862002009246443966569078209469314750085346780810349186954423803542287963764172687152896235050612318680781263840023687689699665991226244269490295627262878269758871609629861885445005070697950354431055402171850029435667331486959689392695612359870066345032620641906023546891498468288991122723033907789001812711414963275010978817829124567899511379801003017623539635370478163273246648417935490601298079066929375129496675626392376340634212782972287494737848449963475375158058229011889608261810814480964624424411219038272970120471330406499665170183241593187578772139401133380908965489851887181200629946273616033864499439301174380596953870786325941743531027844108986817884146089220974533524557186216921402174727946990192057778375031156254390722390780663720259092584138240589010790412643851496372625762052622673028994381522285407365202573217547302409607370006725916564650818111098106136561778801373029804859437743108073967927942588354037779241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4b995ad2fbed72d2a389a158c7e5417bfa835bc7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judo.soc.ucam.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webserver.srcf.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judo.soc.ucam.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001709637199b00000403004730450220461c160a5f46914367c54f18ce3888595be27168a628cd0e998f1510b1151e5f022100be5d18d1fbafb8ca3727f77b17a1b135494fa366ed5aa0f05bd9f87b9915bf2c00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017096371997000004030046304402207f67c930959319e346a4d37865fd378b8fe181fa6a25e5cf5cb2fe3b0bb298c60220541ab3b6a2e971287ce665ac03a8a7118ad21e01a39c55b26cdd76f1c473eb1b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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