sso.uat.kog.ky.gov
Issued by R3
About this certificate
This digital certificate with serial number 03:24:dc:8a:ab:0c:26:11:a6:1a:c7:0e:c4:5f:3b:a5:a3:22 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sso.uat.kog.ky.gov
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:24:dc:8a:ab:0c:26:11:a6:1a:c7:0e:c4:5f:3b:a5:a3:22Serial Number (int): 273880173169728245863930513364360836260642
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 98:85:d3:25:ec:0d:ea:e4:87:a4:af:74:a3:97:6d:fd:d1:3a:59:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 32:2e:50:53:63:b5:62:70:6c:92:bc:1c:65:6b:b7:ba:a4:1b:36:ab
Fingerprint (sha256): 02:11:67:2b:19:28:de:66:46:a2:17:d6:23:2e:7b:39:15:eb:8c:77:9e:2e:64:05:b3:5b:ea:5f:5d:9f:5e:9c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sso.uat.kog.ky.gov
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sso.uat.kog.ky.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sso.uat.kog.ky.gov
Other certificates including the domain name ky.gov
(limited to 100 certificates)
uat2.citizenconnect.ky.gov
justware.dpa.ky.gov
lessonbank.kyae.ky.gov
test.Kppps.kpeds.ky.gov
safeschools.ky.gov
mycgt.ky.gov
focusassisttest.ky.gov
FMWebWorks.ky.gov
staging.988.ky.gov
notify.education.ky.gov
oaa-adc.education.ky.gov
teds.ky.gov
cot1vp-apsx001.eas.ds.ky.gov
entrustapitest4.ky.gov
kspportal.ky.gov
trn3.kyplans.ky.gov
dfiweb.ky.gov
Kyeasxlyncpool01.eas.ds.ky.gov
refund.ky.gov
stu1.kyplans.ky.gov
brandenburg.ky.gov
cloud.chfsmail.ky.gov
cemcsapp.ky.gov
search.jeffersondeeds.com
vdi.ky.gov
impact.ky.gov
tls.automattic.com
trn2.kyplans.ky.gov
dev.pmis.ky.gov
test.precon.business.kytc.ky.gov
letrs.ky.gov
dev.kog.externalsync.ky.gov
lessonbank.kyae.ky.gov
muat.trs.ky.gov
portal.chfs.ky.gov
KYCHFSPCH01.KY.GOV
hbc.ky.gov
test.epayments.dor.ky.gov
cgt.ky.gov
kentuckyasm.kytc.ky.gov
www.ekos.ky.gov
safesleepky.com
ThinkKentucky.ky.gov
sso.mykentuckycareercenter.ky.gov
search.jeffersondeeds.com
uat4.kyagent.ky.gov
COT1VP-WS002.eas.ds.ky.gov
jeffersonpva.ky.gov
kyprdesxsctax1.eas.ds.ky.gov
test.justware.dpa.ky.gov
sso.uat.kog.ky.gov
uat2.kyagent.ky.gov
Abcdev.ky.gov
elsweb.kyboels.ky.gov
vdi.ky.gov
api.uat.dwc.ky.gov
intranet.education.ky.gov
mysite.ky.gov
hands.chfs.ky.gov
stlp.education.ky.gov
*.ky.gov
partnership.jcurve.xyz
trn4.kywaiver.chfsinet.ky.gov
*.kyret.ky.gov
kares.ky.gov
sp13cspnp.chfs.ky.gov
staging.nedssphinms.chfs.ky.gov
test.kaers.ky.gov
trn1.kyagent.ky.gov
onestop.portal.ky.gov
kohs.ky.gov
uat4.kyshop.ky.gov
perf.issuerportal.kynect.ky.gov
stu2.kyagent.ky.gov
cdcb2.ky.gov
trn4.kyplans.ky.gov
5702143428263936-fe2.pantheonsite.io
opsupport.education.ky.gov
training.ehands.chfs.ky.gov
sut-sst.ky.gov
impact.ky.gov
uat.webapps.chfs.ky.gov
media.education.ky.gov
epg.ky.gov
prdweb.chfs.ky.gov
uat.naicwebsrvgw.chfs.ky.gov
opengisdata.ky.gov
uat2.kyplans.ky.gov
PROD.KOG.SalesforceSSP.ky.gov
kchild.chfs.ky.gov
uat2.benefind.ky.gov
uat1.kyshop.ky.gov
uat3.kyshopping.ky.gov
epg.ky.gov
trn4.kyshop.ky.gov
perf.klocs.ky.gov
web1.ky.gov
kyfaces.ky.gov
kylmi.ky.gov
stu4.kywaiver.ky.gov
justware.dpa.ky.gov
lessonbank.kyae.ky.gov
test.Kppps.kpeds.ky.gov
safeschools.ky.gov
mycgt.ky.gov
focusassisttest.ky.gov
FMWebWorks.ky.gov
staging.988.ky.gov
notify.education.ky.gov
oaa-adc.education.ky.gov
teds.ky.gov
cot1vp-apsx001.eas.ds.ky.gov
entrustapitest4.ky.gov
kspportal.ky.gov
trn3.kyplans.ky.gov
dfiweb.ky.gov
Kyeasxlyncpool01.eas.ds.ky.gov
refund.ky.gov
stu1.kyplans.ky.gov
brandenburg.ky.gov
cloud.chfsmail.ky.gov
cemcsapp.ky.gov
search.jeffersondeeds.com
vdi.ky.gov
impact.ky.gov
tls.automattic.com
trn2.kyplans.ky.gov
dev.pmis.ky.gov
test.precon.business.kytc.ky.gov
letrs.ky.gov
dev.kog.externalsync.ky.gov
lessonbank.kyae.ky.gov
muat.trs.ky.gov
portal.chfs.ky.gov
KYCHFSPCH01.KY.GOV
hbc.ky.gov
test.epayments.dor.ky.gov
cgt.ky.gov
kentuckyasm.kytc.ky.gov
www.ekos.ky.gov
safesleepky.com
ThinkKentucky.ky.gov
sso.mykentuckycareercenter.ky.gov
search.jeffersondeeds.com
uat4.kyagent.ky.gov
COT1VP-WS002.eas.ds.ky.gov
jeffersonpva.ky.gov
kyprdesxsctax1.eas.ds.ky.gov
test.justware.dpa.ky.gov
sso.uat.kog.ky.gov
uat2.kyagent.ky.gov
Abcdev.ky.gov
elsweb.kyboels.ky.gov
vdi.ky.gov
api.uat.dwc.ky.gov
intranet.education.ky.gov
mysite.ky.gov
hands.chfs.ky.gov
stlp.education.ky.gov
*.ky.gov
partnership.jcurve.xyz
trn4.kywaiver.chfsinet.ky.gov
*.kyret.ky.gov
kares.ky.gov
sp13cspnp.chfs.ky.gov
staging.nedssphinms.chfs.ky.gov
test.kaers.ky.gov
trn1.kyagent.ky.gov
onestop.portal.ky.gov
kohs.ky.gov
uat4.kyshop.ky.gov
perf.issuerportal.kynect.ky.gov
stu2.kyagent.ky.gov
cdcb2.ky.gov
trn4.kyplans.ky.gov
5702143428263936-fe2.pantheonsite.io
opsupport.education.ky.gov
training.ehands.chfs.ky.gov
sut-sst.ky.gov
impact.ky.gov
uat.webapps.chfs.ky.gov
media.education.ky.gov
epg.ky.gov
prdweb.chfs.ky.gov
uat.naicwebsrvgw.chfs.ky.gov
opengisdata.ky.gov
uat2.kyplans.ky.gov
PROD.KOG.SalesforceSSP.ky.gov
kchild.chfs.ky.gov
uat2.benefind.ky.gov
uat1.kyshop.ky.gov
uat3.kyshopping.ky.gov
epg.ky.gov
trn4.kyshop.ky.gov
perf.klocs.ky.gov
web1.ky.gov
kyfaces.ky.gov
kylmi.ky.gov
stu4.kywaiver.ky.gov
Certificate
The complete raw certificate details for sso.uat.kog.ky.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAyTciqsMJhGmGscOxF87paMiMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MDkxOTA5NDNaFw0yMzA4MDcxOTA5NDJaMB0xGzAZBgNVBAMT EnNzby51YXQua29nLmt5LmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOB5yJuiWt+btPZOdVPOjs3wXEBsvidcDQWgxC6QJiAHGQaIUSF82MuhuxGG 9dLwghzMF1EFsOvnNtzVNADhrm5TOCT3MZE7qJsSQy1jMUMRm0wqnLZf+fye3sfd /GBCj0S2ejYJXJFIdefMGPpFTxDg6PS7pbu5PqD/QR4jpQ944RPtX4qIBtsSGuD0 +9D/K+oYpJj1bxbXm9PspYwN4fiYlfOlUPanKOZTO9KcxvSBuO1a6Rbw869JEc+r 7Khh24OHTTzQMjdZUMopR79wAhkY39Uhr9N5FOv7JM+ehDSqUQWewExrihuaSogD SXUa+UD2v9Opj07C3vVFf0GSAx0CAwEAAaOCAk4wggJKMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUmIXTJewN6uSHpK90o5dt/dE6WRwwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wHQYDVR0RBBYwFIISc3NvLnVhdC5rb2cua3kuZ292MEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAejKM VNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGIAiJSGwAABAMASDBGAiEA 2QpvFnV1snCXbaHryJ1a5Ugr9J2oNXHtg3KmqIUk8XsCIQDm6cDuAE92R+1JtK8b 0pgE8UXTZU5KoNDBuotWJkfHFQB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nh d31tBr1uAAABiAIiUfYAAAQDAEcwRQIhAOnruV8RO9hq+fSwpW48RAbeufoe3HhD UlkQ/3BZYkUGAiANMjoBHOyjn33RiG2hmDdbjkcSnSp7iwElI9hFpmhZlDANBgkq hkiG9w0BAQsFAAOCAQEAVc/vqKThTxDEUZLIRJpzIc6VER/fXrHZOKaH0//eSA/U EUX+lCJtgTLOhrgZh05Onvnlk5LmPyud0FaxA8kifSUP1gmrD/FRUOfxW5GedP28 2v3H89a/ZHx8C3epp9OUctLEJ0ok5LIZUYDFsCai0kdj1EBAgcbry212S/bGlhNd QNzkNZtuMYHtljWxp9dlU71zZbr0VjUZALABvpsGdC2RMa6gli07cMqVfXO9D46K dLiSSRb0VeYA79nwYWSjFRw4ew5QsgHFB9iHDmsrqA9y+wJaqGN0KBp6FfKoslMq 7PMDsBgCJYteFZSntYwHp6bq4qhLkUkczZn6k1MutA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HnIm6Ja35u09k51U86O zfBcQGy+J1wNBaDELpAmIAcZBohRIXzYy6G7EYb10vCCHMwXUQWw6+c23NU0AOGu blM4JPcxkTuomxJDLWMxQxGbTCqctl/5/J7ex938YEKPRLZ6NglckUh158wY+kVP EODo9Lulu7k+oP9BHiOlD3jhE+1fiogG2xIa4PT70P8r6hikmPVvFteb0+yljA3h +JiV86VQ9qco5lM70pzG9IG47VrpFvDzr0kRz6vsqGHbg4dNPNAyN1lQyilHv3AC GRjf1SGv03kU6/skz56ENKpRBZ7ATGuKG5pKiANJdRr5QPa/06mPTsLe9UV/QZID HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273880173169728245863930513364360836260642 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 19:09:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-07 19:09:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso.uat.kog.ky.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28337434056014468347335192839973790624675630855269593522478703790835671606369443980127671425415098014926961452500670571600813941905953875745837780643655659618776525908561319532707700395543815247063445971815097200946382131967729291616547999188500831929092918218860596571932800609866998374814195687253646833891956656546308454016757245632636832556994780459601183037774175155370736963825525955731969423821482873962642310990855166463786500356170120247486409892431800629844175310778479159159128953976188732703506612427563082744721793538784227915766605090580200904765655408503985193334415153061597606361673872412886378349341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9885d325ec0deae487a4af74a3976dfdd13a591c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.uat.kog.ky.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001880222521b0000040300483046022100d90a6f167575b270976da1ebc89d5ae5482bf49da83571ed8372a6a88524f17b022100e6e9c0ee004f7647ed49b4af1bd29804f145d3654e4aa0d0c1ba8b562647c715007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188022251f60000040300473045022100e9ebb95f113bd86af9f4b0a56e3c4406deb9fa1edc7843525910ff705962450602200d323a011ceca39f7dd1886da198375b8e47129d2a7b8b012523d845a6685994 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0055cfefa8a4e14f10c45192c8449a7321ce95111fdf5eb1d938a687d3ffde480fd41145fe94226d8132ce86b819874e4e9ef9e59392e63f2b9dd056b103c9227d250fd609ab0ff15150e7f15b919e74fdbcdafdc7f3d6bf647c7c0b77a9a7d39472d2c4274a24e4b2195180c5b026a2d24763d4404081c6ebcb6d764bf6c696135d40dce4359b6e3181ed9635b1a7d76553bd7365baf456351900b001be9b06742d9131aea0962d3b70ca957d73bd0f8e8a74b8924916f455e600efd9f06164a3151c387b0e50b201c507d8870e6b2ba80f72fb025aa86374281a7a15f2a8b2532aecf303b01802258b5e1594a7b58c07a7a6eae2a84b91491ccd99fa93532eb4