maillist-indigo.bluestatedigital.com
Issued by R3
About this certificate
This digital certificate with serial number 03:07:cd:3f:ad:de:ff:72:3a:45:9d:df:27:21:4d:5f:09:2c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=maillist-indigo.bluestatedigital.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:07:cd:3f:ad:de:ff:72:3a:45:9d:df:27:21:4d:5f:09:2cSerial Number (int): 263991656744089874912336201178871668607276
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 26:13:cc:cd:5e:07:fe:74:e9:90:de:41:5b:de:9e:31:7f:39:cb:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0e:8d:b5:22:72:63:f3:ed:2c:b5:2e:fc:fe:ac:42:65:90:44:cb:87
Fingerprint (sha256): 02:2b:42:30:f6:d5:76:bd:91:9c:f2:7c:be:20:a6:fe:37:0b:b3:04:90:97:9d:f0:4e:0e:ca:36:32:50:f8:09
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate maillist-indigo.bluestatedigital.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for maillist-indigo.bluestatedigital.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
maillist-indigo.bluestatedigital.com
Other certificates including the domain name bluestatedigital.com
(limited to 100 certificates)
www.bluestatedigital.com
biss-main.edge.bluestate.digital
deeds-main.edge.bluestate.digital
battletx-main.edge.bluestate.digital
inslee-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
holdthehouse-main.edge.bluestate.digital
pocan-main.edge.bluestate.digital
jimhimes-main.edge.bluestate.digital
herding-main.edge.bluestate.digital
neademo-main.edge.bluestate.digital
haleystevens-main.edge.bluestate.digital
ctdems-main.edge.bluestate.digital
uchicago-main.edge.bluestate.digital
timesup-main.edge.bluestate.digital
forwardmaj-main.edge.bluestate.digital
stageplays-main.edge.bluestate.digital
madems-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
petersmi-main.edge.bluestate.digital
lebua-main.edge.bluestate.digital
northam-main.edge.bluestate.digital
*.sanssl-001.bsdtools.com
iowadems-main.edge.bluestate.digital
ccoons-main.edge.bluestate.digital
tonko-main.edge.bluestate.digital
chop-main.edge.bluestate.digital
mccready-main.edge.bluestate.digital
venturefund-main.edge.bluestate.digital
tnchk-main.edge.bluestate.digital
manning-main.edge.bluestate.digital
seiumaster-fightfor15.edge.bluestate.digital
horsford-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
betsy-main.edge.bluestate.digital
tomwolf-main.edge.bluestate.digital
*.sanssl-001.bsdtools.com
open.bluestatedigital.com
bustos-main.edge.bluestate.digital
bsykes-main.edge.bluestate.digital
latinovictory-main.edge.bluestate.digital
google-main.edge.bluestate.digital
tulsi-main.edge.bluestate.digital
repgovernors-main.edge.bluestate.digital
maillist-indigo.bluestatedigital.com
brownley-main.edge.bluestate.digital
tuc-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
vsinitiative-main.edge.bluestate.digital
guycaron-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
ourbodies-main.edge.bluestate.digital
economie-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
equalpac-main.edge.bluestate.digital
lonelywhale-main.edge.bluestate.digital
porter-main.edge.bluestate.digital
businessfwd-main.edge.bluestate.digital
bsddemo2014-main.edge.bluestate.digital
crfb-main.edge.bluestate.digital
opportunity-main.edge.bluestate.digital
*.bluestatedigital.com
court13-main.edge.bluestate.digital
status.bluestatedigital.com
papac-main.edge.bluestate.digital
berimdemo-main.edge.bluestate.digital
ffaa-main.edge.bluestate.digital
sinema-main.edge.bluestate.digital
warnerforva-main.edge.bluestate.digital
*.sanssl-fastly-001.bsdtools.com
gwindham-main.edge.bluestate.digital
toolsdev2-main.edge.bluestate.digital
mcan-main.edge.bluestate.digital
flstateparks-main.edge.bluestate.digital
electaapi-main.edge.bluestate.digital
reliefintluk-main.edge.bluestate.digital
uncf-main.edge.bluestate.digital
foadk-main.edge.bluestate.digital
rocongress-main.edge.bluestate.digital
viveritonyc-main.edge.bluestate.digital
frankel-main.edge.bluestate.digital
championfl-main.edge.bluestate.digital
demsofstate-main.edge.bluestate.digital
priorities-main.edge.bluestate.digital
chaptdemo-newbranchtest.edge.bluestate.digital
bcndp-main.edge.bluestate.digital
nmcrs-main.edge.bluestate.digital
justinnelson-main.edge.bluestate.digital
onehundred-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
equalityca-main.edge.bluestate.digital
*.sanssl-fastly-001.bsdtools.com
wmc-spark.edge.bluestate.digital
mcadams-main.edge.bluestate.digital
mobilecommons-main.edge.bluestate.digital
fwdaction-main.edge.bluestate.digital
mvarm-main.edge.bluestate.digital
aberger-main.edge.bluestate.digital
chrisg-main.edge.bluestate.digital
wmc-main.edge.bluestate.digital
biss-main.edge.bluestate.digital
deeds-main.edge.bluestate.digital
battletx-main.edge.bluestate.digital
inslee-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
holdthehouse-main.edge.bluestate.digital
pocan-main.edge.bluestate.digital
jimhimes-main.edge.bluestate.digital
herding-main.edge.bluestate.digital
neademo-main.edge.bluestate.digital
haleystevens-main.edge.bluestate.digital
ctdems-main.edge.bluestate.digital
uchicago-main.edge.bluestate.digital
timesup-main.edge.bluestate.digital
forwardmaj-main.edge.bluestate.digital
stageplays-main.edge.bluestate.digital
madems-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
petersmi-main.edge.bluestate.digital
lebua-main.edge.bluestate.digital
northam-main.edge.bluestate.digital
*.sanssl-001.bsdtools.com
iowadems-main.edge.bluestate.digital
ccoons-main.edge.bluestate.digital
tonko-main.edge.bluestate.digital
chop-main.edge.bluestate.digital
mccready-main.edge.bluestate.digital
venturefund-main.edge.bluestate.digital
tnchk-main.edge.bluestate.digital
manning-main.edge.bluestate.digital
seiumaster-fightfor15.edge.bluestate.digital
horsford-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
betsy-main.edge.bluestate.digital
tomwolf-main.edge.bluestate.digital
*.sanssl-001.bsdtools.com
open.bluestatedigital.com
bustos-main.edge.bluestate.digital
bsykes-main.edge.bluestate.digital
latinovictory-main.edge.bluestate.digital
google-main.edge.bluestate.digital
tulsi-main.edge.bluestate.digital
repgovernors-main.edge.bluestate.digital
maillist-indigo.bluestatedigital.com
brownley-main.edge.bluestate.digital
tuc-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
vsinitiative-main.edge.bluestate.digital
guycaron-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
ourbodies-main.edge.bluestate.digital
economie-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
equalpac-main.edge.bluestate.digital
lonelywhale-main.edge.bluestate.digital
porter-main.edge.bluestate.digital
businessfwd-main.edge.bluestate.digital
bsddemo2014-main.edge.bluestate.digital
crfb-main.edge.bluestate.digital
opportunity-main.edge.bluestate.digital
*.bluestatedigital.com
court13-main.edge.bluestate.digital
status.bluestatedigital.com
papac-main.edge.bluestate.digital
berimdemo-main.edge.bluestate.digital
ffaa-main.edge.bluestate.digital
sinema-main.edge.bluestate.digital
warnerforva-main.edge.bluestate.digital
*.sanssl-fastly-001.bsdtools.com
gwindham-main.edge.bluestate.digital
toolsdev2-main.edge.bluestate.digital
mcan-main.edge.bluestate.digital
flstateparks-main.edge.bluestate.digital
electaapi-main.edge.bluestate.digital
reliefintluk-main.edge.bluestate.digital
uncf-main.edge.bluestate.digital
foadk-main.edge.bluestate.digital
rocongress-main.edge.bluestate.digital
viveritonyc-main.edge.bluestate.digital
frankel-main.edge.bluestate.digital
championfl-main.edge.bluestate.digital
demsofstate-main.edge.bluestate.digital
priorities-main.edge.bluestate.digital
chaptdemo-newbranchtest.edge.bluestate.digital
bcndp-main.edge.bluestate.digital
nmcrs-main.edge.bluestate.digital
justinnelson-main.edge.bluestate.digital
onehundred-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
equalityca-main.edge.bluestate.digital
*.sanssl-fastly-001.bsdtools.com
wmc-spark.edge.bluestate.digital
mcadams-main.edge.bluestate.digital
mobilecommons-main.edge.bluestate.digital
fwdaction-main.edge.bluestate.digital
mvarm-main.edge.bluestate.digital
aberger-main.edge.bluestate.digital
chrisg-main.edge.bluestate.digital
wmc-main.edge.bluestate.digital
Certificate
The complete raw certificate details for maillist-indigo.bluestatedigital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAwfNP63e/3I6RZ3fJyFNXwksMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjUwMTUwNDRaFw0yMzEyMjQwMTUwNDNaMC8xLTArBgNVBAMT JG1haWxsaXN0LWluZGlnby5ibHVlc3RhdGVkaWdpdGFsLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAK/11Gwc8hSkTCdL2EqasOFstmNnlfr0gose U3BjcU0fbQfRF/oTXQu/85SiQBlI/WU0n2yTtux75XlTdw+YnYSBcXz9rXXwKeDs UJH+GuJ6il2czyaU5Q7Ni0DYynMLM2sSmAjMxk4YnngZu41Ili+n7gF/rArASDtH 6yfZJau+3+zaZX8CdxXClhcrzKO9a7RWQqC7e3X4CopvkgRmJ2oHzXvJpscuIqar 1rRszDt3HXCnYkYozM2RtbqUY4aIIByP70tiZFj+GzaGXRggL2sa4hKAXUuSvS6h 0D+hrq1VzOQd5LiZDATfjpp618b3J1m2GOicADtymdflW4tq8j0CAwEAAaOCAiYw ggIiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJhPMzV4H/nTpkN5BW96eMX85y40w HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wLwYDVR0RBCgwJoIkbWFpbGxpc3QtaW5k aWdvLmJsdWVzdGF0ZWRpZ2l0YWwuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvS K8E6V6NS61IAAAGKyj8NOwAABAMARzBFAiAhF3SGKz9PkdtOTM/c+Gad0jIwxX0C QC8DissC1ru+9QIhAK/3c+Go8MQescCU+88Ys53ExXJkeyQziEqPzuDsQUQWAHYA rfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGKyj8NaAAABAMARzBF AiBkFEEPQa39vBNie5TSUiZKY9I9AgnlDqicL7FITAICowIhAIH3Wz4Ysk5BpfDt dT357ia6Yu6tYNWrUDPXgx+c6zTpMA0GCSqGSIb3DQEBCwUAA4IBAQAH63thwX5z eAcjqNVfkN5n7HGcONOTXS9bsFCyp2GiwY+ULzBpN5RzwvXpwSbU+zFdYPVxl8dl pVMbQVeeBpYPLauzUZLGlc+Cl4s3uwQOExj/NiCofasPP+2LGZeGM3ZstNg1SdH7 tjLHFeh444pRVnA9zR1zko/eAY8moNd0RxGfb7Xcl0o0QLLL+qZEm27MK4DDF07G M2kgzqRX9Xkimj3D43NfC9jQOMdLDWVMT8KImn2WANQd6+0kONsW/tbMLF4Qo8bH bzFmD6IUzJu9xqxc+o08H/owpvjb8hF8rvGRyeskKsEmt10xDbjNDHeIKsmPtSfy sgBYawHzfNlA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/XUbBzyFKRMJ0vYSpqw 4Wy2Y2eV+vSCix5TcGNxTR9tB9EX+hNdC7/zlKJAGUj9ZTSfbJO27HvleVN3D5id hIFxfP2tdfAp4OxQkf4a4nqKXZzPJpTlDs2LQNjKcwszaxKYCMzGThieeBm7jUiW L6fuAX+sCsBIO0frJ9klq77f7NplfwJ3FcKWFyvMo71rtFZCoLt7dfgKim+SBGYn agfNe8mmxy4ipqvWtGzMO3cdcKdiRijMzZG1upRjhoggHI/vS2JkWP4bNoZdGCAv axriEoBdS5K9LqHQP6GurVXM5B3kuJkMBN+OmnrXxvcnWbYY6JwAO3KZ1+Vbi2ry PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263991656744089874912336201178871668607276 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 01:50:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 01:50:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maillist-indigo.bluestatedigital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22212926549002050284514280201842508005383112295076716543860080304139230312954791538218521192151646276641171821312132057322186382907608557833044633266717882159925486793295035814217429765932256501274586894185551838600871192630653836784258262551113370226315622875011745484089040586643464499099050743492573864505099283671246997769884397086860391780353004063554110072482938347723151697605680849491567586015973396283841827917163130476820767770921992844445933163852056389828001821416273072794242683658107471620900284696956025332534027970481622290746322469912862466641257099739053380014933010211544416170231702695133772968509 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2613cccd5e07fe74e990de415bde9e317f39cb8d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maillist-indigo.bluestatedigital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aca3f0d3b00000403004730450220211774862b3f4f91db4e4ccfdcf8669dd23230c57d02402f038acb02d6bbbef5022100aff773e1a8f0c41eb1c094fbcf18b39dc4c572647b2433884a8fcee0ec414416007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aca3f0d68000004030047304502206414410f41adfdbc13627b94d252264a63d23d0209e50ea89c2fb1484c0202a302210081f75b3e18b24e41a5f0ed753df9ee26ba62eead60d5ab5033d7831f9ceb34e9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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