dsg.kmi.open.ac.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d3:c7:c1:a7:be:49:e4:04:0b:09:1f:24:4b:13:df:08:22 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dsg.kmi.open.ac.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d3:c7:c1:a7:be:49:e4:04:0b:09:1f:24:4b:13:df:08:22Serial Number (int): 333401959102292273958519957334186344253474
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a5:8f:7c:fe:48:8b:b2:c4:38:49:44:d6:e4:79:bd:10:c6:fd:de:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1b:d8:5d:d1:a7:e0:d0:7e:8f:be:c9:23:93:b6:c5:f1:40:4f:1c:1b
Fingerprint (sha256): 02:69:41:a3:0b:86:bf:96:b9:6b:a7:37:fe:aa:04:c0:bf:4a:c1:5d:69:f5:08:31:d3:63:55:07:b2:73:de:95
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dsg.kmi.open.ac.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dsg.kmi.open.ac.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dsg.kmi.open.ac.uk
Other certificates including the domain name open.ac.uk
(limited to 100 certificates)
filetransfer.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
xai.kmi.open.ac.uk
blog.cohere.open.ac.uk
*.alumni.open.ac.uk
kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
dsg.kmi.open.ac.uk
sas-va-test.open.ac.uk
people.kmi.open.ac.uk
internationalfunders.open.ac.uk
technologies.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
weblab.open.ac.uk
events.kmi.open.ac.uk
dev-ext.kmi.open.ac.uk
dsg.kmi.open.ac.uk
livestream01-podcast.open.ac.uk
forge.kmi.open.ac.uk
www3.open.ac.uk
hr-myvw-acct.open.ac.uk
impact.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
impact.kmi.open.ac.uk
learn7-internal.open.ac.uk
maptesting.kmi.open.ac.uk
skm.kmi.open.ac.uk
msds-acct.open.ac.uk
arvr.kmi.open.ac.uk
blog.cohere.open.ac.uk
internationalfunders-systest.open.ac.uk
css2.open.ac.uk
iserve.kmi.open.ac.uk
hasta.open.ac.uk
www-jime.open.ac.uk
valencia.open.ac.uk
healthwellbeing.kmi.open.ac.uk
connections.kmi.open.ac.uk
osl.open.ac.uk
bigdata.kmi.open.ac.uk
dc-live-c.open.ac.uk
e1p-internal-sandbox.mrooms.net
directaccess-nls-acct.open.ac.uk
healthwellbeing.kmi.open.ac.uk
learn7syst-internal.open.ac.uk
instituteofcoding.open.ac.uk
news.kmi.open.ac.uk
instituteofcoding.open.ac.uk
instituteofcoding.open.ac.uk
oubs-business-exchange.kmi.open.ac.uk
intranet6.open.ac.uk
e1p-internal-sandbox.mrooms.net
*.figshare.com
knowledgemakers.kmi.open.ac.uk
msds-acct.open.ac.uk
live.kmi.open.ac.uk
oubs-business-exchange.kmi.open.ac.uk
www.open.ac.uk
cso.kmi.open.ac.uk
pt-anywhere.kmi.open.ac.uk
50.open.ac.uk
healthwellbeing.kmi.open.ac.uk
led.kmi.open.ac.uk
development.moodlerooms.com
rdswebgwlivea.open.ac.uk
www-dev.open.ac.uk
applaud.open.ac.uk
css2-acct.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
exec-ed.open.ac.uk
skg.kmi.open.ac.uk
mac-mgmt-live.open.ac.uk
www-acct.open.ac.uk
learn4.open.ac.uk
blockchain.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
greendata.kmi.open.ac.uk
project-rbz.kmi.open.ac.uk
kmi.open.ac.uk
acqua.kmi.open.ac.uk
dev-ext.kmi.open.ac.uk
blockchain7.kmi.open.ac.uk
evolution-megalab.open.ac.uk
e1p-internal-sandbox.mrooms.net
peermiles-project.kmi.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
soa-admin-acct.open.ac.uk
live.kmi.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
intranet6.open.ac.uk
e1p-internal-sandbox.mrooms.net
exec-ed.open.ac.uk
e1p-internal-sandbox.mrooms.net
blockchain.kmi.open.ac.uk
people.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
dsg.kmi.open.ac.uk
css2.open.ac.uk
library-analytics.open.ac.uk
iet.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
xai.kmi.open.ac.uk
blog.cohere.open.ac.uk
*.alumni.open.ac.uk
kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
dsg.kmi.open.ac.uk
sas-va-test.open.ac.uk
people.kmi.open.ac.uk
internationalfunders.open.ac.uk
technologies.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
weblab.open.ac.uk
events.kmi.open.ac.uk
dev-ext.kmi.open.ac.uk
dsg.kmi.open.ac.uk
livestream01-podcast.open.ac.uk
forge.kmi.open.ac.uk
www3.open.ac.uk
hr-myvw-acct.open.ac.uk
impact.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
impact.kmi.open.ac.uk
learn7-internal.open.ac.uk
maptesting.kmi.open.ac.uk
skm.kmi.open.ac.uk
msds-acct.open.ac.uk
arvr.kmi.open.ac.uk
blog.cohere.open.ac.uk
internationalfunders-systest.open.ac.uk
css2.open.ac.uk
iserve.kmi.open.ac.uk
hasta.open.ac.uk
www-jime.open.ac.uk
valencia.open.ac.uk
healthwellbeing.kmi.open.ac.uk
connections.kmi.open.ac.uk
osl.open.ac.uk
bigdata.kmi.open.ac.uk
dc-live-c.open.ac.uk
e1p-internal-sandbox.mrooms.net
directaccess-nls-acct.open.ac.uk
healthwellbeing.kmi.open.ac.uk
learn7syst-internal.open.ac.uk
instituteofcoding.open.ac.uk
news.kmi.open.ac.uk
instituteofcoding.open.ac.uk
instituteofcoding.open.ac.uk
oubs-business-exchange.kmi.open.ac.uk
intranet6.open.ac.uk
e1p-internal-sandbox.mrooms.net
*.figshare.com
knowledgemakers.kmi.open.ac.uk
msds-acct.open.ac.uk
live.kmi.open.ac.uk
oubs-business-exchange.kmi.open.ac.uk
www.open.ac.uk
cso.kmi.open.ac.uk
pt-anywhere.kmi.open.ac.uk
50.open.ac.uk
healthwellbeing.kmi.open.ac.uk
led.kmi.open.ac.uk
development.moodlerooms.com
rdswebgwlivea.open.ac.uk
www-dev.open.ac.uk
applaud.open.ac.uk
css2-acct.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
exec-ed.open.ac.uk
skg.kmi.open.ac.uk
mac-mgmt-live.open.ac.uk
www-acct.open.ac.uk
learn4.open.ac.uk
blockchain.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
greendata.kmi.open.ac.uk
project-rbz.kmi.open.ac.uk
kmi.open.ac.uk
acqua.kmi.open.ac.uk
dev-ext.kmi.open.ac.uk
blockchain7.kmi.open.ac.uk
evolution-megalab.open.ac.uk
e1p-internal-sandbox.mrooms.net
peermiles-project.kmi.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
soa-admin-acct.open.ac.uk
live.kmi.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
intranet6.open.ac.uk
e1p-internal-sandbox.mrooms.net
exec-ed.open.ac.uk
e1p-internal-sandbox.mrooms.net
blockchain.kmi.open.ac.uk
people.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
dsg.kmi.open.ac.uk
css2.open.ac.uk
library-analytics.open.ac.uk
iet.open.ac.uk
Certificate
The complete raw certificate details for dsg.kmi.open.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISA9PHwae+SeQECwkfJEsT3wgiMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTMyMjIzMjBaFw0x OTA3MTIyMjIzMjBaMB0xGzAZBgNVBAMTEmRzZy5rbWkub3Blbi5hYy51azCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBVqFNHNQlvqBw+vLFwiDjExyn4 2NYYsJnXJtb5j1aibK3+jU1sm065CgU5dKPzHLsEiGhSSsRdT/+II989Zjysa8qR RRb7uiivlKa+5VJQ1X5vDmGjN6BE5wvf10MSaRtb1KreOvai6p+eQLW945GAAaAg 5eXPGy7ER3xOa3fCZp/QK9lkmXqHtNp5SB4paSlrGzFa4t9nS2D8i74YDsLCYe3v hXpVsr3BhNhvgqYLk5q/bYsmKA2qAT5hadQ9Owf7dWYmWtIWLtg1DFzt8c5cFpyJ pW7zqO9qYQn+HQn1n/Yv1Sz24C66YlXweGmW4IEf799MjmssA+AWex3T+8cCAwEA AaOCAmYwggJiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUpY98/kiLssQ4SUTW5Hm9 EMb93m0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAdBgNVHREEFjAUghJkc2cua21pLm9wZW4uYWMudWswTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDi aUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWoZAzC4AAAEAwBGMEQC ICWuImSqJZOi4L5+LKg1oaQwUMotql73OPY92LBQIC1/AiBORNTiGo1JwfaJThWV l0Q0NPSidCNvlqrfRSJaWokHeAB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM 9OVFR/R4AAABahkDMrAAAAQDAEcwRQIgQbFo5UJcTBmPZqPPaRhD+jyaYTylpz8j WRLYe44Bw8cCIQCeHEzwAyCRRBDbpd6ShGmRnAfwUwy5HIMGeWnyhGR/ezANBgkq hkiG9w0BAQsFAAOCAQEADXbTQPOb1ZvNPPATRdbKCC54i2/8qCKjHOOrOvSTTRKh mLMnniMQc/SbeNxaOTzBkAb+7vYwQIs2aQsFDC6fyHPwBnmZ7HnWkjhM58UJ+iWa 6+wO5+9j9cvGAg98EzJoV0j/s1ZJ6+5sk7MizK7aimyEWchWZ9k380fuk62rivze IN3uq8GEqEnZuXnmt7n2r0Hs1bG52/xaLsxaL6aKKdu9kZps9DwG5IagvhQbRxVV BnibFDeGDEaR1erPA+gibwDCoTbv2LUZGbAKAhuDXLXJ7WsLa8LOt1MtTQI16qRp gKkC2QekcGzgoSdEuDnQTfOkBKPwek1brRvStNAZpQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFWoU0c1CW+oHD68sXCI OMTHKfjY1hiwmdcm1vmPVqJsrf6NTWybTrkKBTl0o/McuwSIaFJKxF1P/4gj3z1m PKxrypFFFvu6KK+Upr7lUlDVfm8OYaM3oETnC9/XQxJpG1vUqt469qLqn55Atb3j kYABoCDl5c8bLsRHfE5rd8Jmn9Ar2WSZeoe02nlIHilpKWsbMVri32dLYPyLvhgO wsJh7e+FelWyvcGE2G+CpguTmr9tiyYoDaoBPmFp1D07B/t1ZiZa0hYu2DUMXO3x zlwWnImlbvOo72phCf4dCfWf9i/VLPbgLrpiVfB4aZbggR/v30yOaywD4BZ7HdP7 xwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333401959102292273958519957334186344253474 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 22:23:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 22:23:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dsg.kmi.open.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22260180971775395003823836242349300876006024328919789135702731272560227729131972188270571254886856141208640556839510208198854656301056763369725879354686411871089955633922666214237866132659568662307193317549769413500987892643905391219414077477303345920563302745724053533942009185802787451363378851923335901531111119090981177928497554406118649478925832554418691041967735623809371479757411713875661049963466804644596524983101712539897769624744033918394016290237843954920285225113592492915406132891517556468031182450573756850979000451195679353970473076554738719499110751368433459282071931329752787996594271544741173918663 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a58f7cfe488bb2c4384944d6e479bd10c6fdde6d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsg.kmi.open.ac.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a190330b80000040300463044022025ae2264aa2593a2e0be7e2ca835a1a43050ca2daa5ef738f63dd8b050202d7f02204e44d4e21a8d49c1f6894e159597443434f4a274236f96aadf45225a5a890778007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a190332b00000040300473045022041b168e5425c4c198f66a3cf691843fa3c9a613ca5a73f235912d87b8e01c3c70221009e1c4cf00320914410dba5de928469919c07f0530cb91c83067969f284647f7b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000d76d340f39bd59bcd3cf01345d6ca082e788b6ffca822a31ce3ab3af4934d12a198b3279e231073f49b78dc5a393cc19006feeef630408b36690b050c2e9fc873f0067999ec79d692384ce7c509fa259aebec0ee7ef63f5cbc6020f7c1332685748ffb35649ebee6c93b322ccaeda8a6c8459c85667d937f347ee93adab8afcde20ddeeabc184a849d9b979e6b7b9f6af41ecd5b1b9dbfc5a2ecc5a2fa68a29dbbd919a6cf43c06e486a0be141b47155506789b1437860c4691d5eacf03e8226f00c2a136efd8b51919b00a021b835cb5c9ed6b0b6bc2ceb7532d4d0235eaa46980a902d907a4706ce0a12744b839d04df3a404a3f07a4d5bad1bd2b4d019a5