tufts.edu
Issued by R3
About this certificate
This digital certificate with serial number 04:63:c7:0f:ca:3f:62:fa:df:98:0c:f9:be:20:fc:6a:8d:f8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tufts.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:63:c7:0f:ca:3f:62:fa:df:98:0c:f9:be:20:fc:6a:8d:f8Serial Number (int): 382401696409896717744838009854664435731960
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 94:61:d6:4d:4d:00:7d:6b:f5:9a:eb:41:81:ae:67:7e:59:e2:14:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 46:bc:b0:ec:d4:23:19:f8:b2:15:7d:29:91:ca:64:26:26:11:f1:5c
Fingerprint (sha256): 02:bf:37:e0:8e:f2:4b:54:2f:8e:15:88:63:34:45:8a:82:55:a0:b9:79:b5:de:79:e7:ae:d5:b4:0c:af:f0:6a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate tufts.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tufts.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tufts.edu
Other certificates including the domain name tufts.edu
(limited to 100 certificates)
amtrust.kinnser.com
statuspage.io
sfunder1cert.net
filemaker.it.tufts.edu
tcu.tufts.edu
*.hr.tufts.edu
*.studentservices.tufts.edu
us.prod.campusgroups.com
csdd.tufts.edu
artgalleries.tufts.edu
statuspage.io
statuspage.io
spamblocker.uit.tufts.edu
grad.tufts.edu
csdd.tufts.edu
statuspage.io
cluster3.technolutions.net
www.net.tufts.edu
hrss.uit.tufts.edu
us.prod.campusgroups.com
conferences.tufts.edu
sis.uit.tufts.edu
amtrust.kinnser.com
tuftsjournal.tufts.edu
5674368789118976-fe3.pantheonsite.io
exchange.tufts.edu
uconnectlabs.com
issquaredown.com
trustees.tufts.edu
webdav.ase.tufts.edu
support10.cdnetworks.net
it.tufts.edu
statuspage.io
amtrust.kinnser.com
dental150.tufts.edu
webcenter2.studentservices.tufts.edu
cluster3.technolutions.net
sisweb-prod-01.uit.tufts.edu
*.it.tufts.edu
support10.cdnetworks.net
5649202965118976-fe1.pantheonsite.io
cluster2.technolutions.net
researchstorage.uit.tufts.edu
devtutorfinder.studentservices.tufts.edu
support10.cdnetworks.net
5692592335355904-fe2.pantheonsite.io
tcu.tufts.edu
us.prod.campusgroups.com
sfunder19cert.net
mbg.hnrc.tufts.edu
ereqtest.uit.tufts.edu
view.e.tufts.edu
tufts.edu
waddc05.tufts.ad.tufts.edu
tcu.tufts.edu
gradase.admissions.tufts.edu
www.tcu.tufts.edu
support10.cdnetworks.net
support10.cdnetworks.net
statuspage.io
statuspage.io
conferences.tufts.edu
fis.uit.tufts.edu
www.tcu.tufts.edu
statuspage.io
info.gordon.tufts.edu
wfinauditprd01.tufts.ad.tufts.edu
statuspage.io
tusc.tufts.edu
sso365.tufts.edu
support10.cdnetworks.net
uconnectlabs.com
yakamafish-star.net
n002.offcampuspartners.com
tac.admissions.tufts.edu
n002.offcampuspartners.com
statuspage.io
www.nutritionletter.tufts.edu
uconnectlabs.com
support10.cdnetworks.net
admissions.tufts.edu
offcampushousing.fau.edu
5649202965118976-fe1.pantheonsite.io
gradhlthsci.admissions.tufts.edu
*.tufts.edu
hrss.uit.tufts.edu
eventrsvp.tufts.edu
*.it.tufts.edu
streetfilms.org
us.prod.campusgroups.com
5649202965118976-fe1.pantheonsite.io
statuspage.io
*.perseus.tufts.edu
irb.viceprovost.tufts.edu
cds2.cvent.com
*.atech.tufts.edu
5673497447628800-fe2.pantheonsite.io
n002.offcampuspartners.com
tufts.edu
ugrad.admissions.tufts.edu
statuspage.io
sfunder1cert.net
filemaker.it.tufts.edu
tcu.tufts.edu
*.hr.tufts.edu
*.studentservices.tufts.edu
us.prod.campusgroups.com
csdd.tufts.edu
artgalleries.tufts.edu
statuspage.io
statuspage.io
spamblocker.uit.tufts.edu
grad.tufts.edu
csdd.tufts.edu
statuspage.io
cluster3.technolutions.net
www.net.tufts.edu
hrss.uit.tufts.edu
us.prod.campusgroups.com
conferences.tufts.edu
sis.uit.tufts.edu
amtrust.kinnser.com
tuftsjournal.tufts.edu
5674368789118976-fe3.pantheonsite.io
exchange.tufts.edu
uconnectlabs.com
issquaredown.com
trustees.tufts.edu
webdav.ase.tufts.edu
support10.cdnetworks.net
it.tufts.edu
statuspage.io
amtrust.kinnser.com
dental150.tufts.edu
webcenter2.studentservices.tufts.edu
cluster3.technolutions.net
sisweb-prod-01.uit.tufts.edu
*.it.tufts.edu
support10.cdnetworks.net
5649202965118976-fe1.pantheonsite.io
cluster2.technolutions.net
researchstorage.uit.tufts.edu
devtutorfinder.studentservices.tufts.edu
support10.cdnetworks.net
5692592335355904-fe2.pantheonsite.io
tcu.tufts.edu
us.prod.campusgroups.com
sfunder19cert.net
mbg.hnrc.tufts.edu
ereqtest.uit.tufts.edu
view.e.tufts.edu
tufts.edu
waddc05.tufts.ad.tufts.edu
tcu.tufts.edu
gradase.admissions.tufts.edu
www.tcu.tufts.edu
support10.cdnetworks.net
support10.cdnetworks.net
statuspage.io
statuspage.io
conferences.tufts.edu
fis.uit.tufts.edu
www.tcu.tufts.edu
statuspage.io
info.gordon.tufts.edu
wfinauditprd01.tufts.ad.tufts.edu
statuspage.io
tusc.tufts.edu
sso365.tufts.edu
support10.cdnetworks.net
uconnectlabs.com
yakamafish-star.net
n002.offcampuspartners.com
tac.admissions.tufts.edu
n002.offcampuspartners.com
statuspage.io
www.nutritionletter.tufts.edu
uconnectlabs.com
support10.cdnetworks.net
admissions.tufts.edu
offcampushousing.fau.edu
5649202965118976-fe1.pantheonsite.io
gradhlthsci.admissions.tufts.edu
*.tufts.edu
hrss.uit.tufts.edu
eventrsvp.tufts.edu
*.it.tufts.edu
streetfilms.org
us.prod.campusgroups.com
5649202965118976-fe1.pantheonsite.io
statuspage.io
*.perseus.tufts.edu
irb.viceprovost.tufts.edu
cds2.cvent.com
*.atech.tufts.edu
5673497447628800-fe2.pantheonsite.io
n002.offcampuspartners.com
tufts.edu
ugrad.admissions.tufts.edu
Certificate
The complete raw certificate details for tufts.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISBGPHD8o/YvrfmAz5viD8ao34MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MjkwNDA5MThaFw0yMzA4MjcwNDA5MTdaMBQxEjAQBgNVBAMT CXR1ZnRzLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5Trrkl +CyO80jFRTSUlReiJKyIkaHsElPqwLo8GzbgLhiAEp7em1quK1XLtIMmeJ8Whf2u 1dX7sm+w69Un7cU0D1mGqdbIa+gjYN+c64q8s8Jem+7AeoUO3hvCzN0Ag7vmD4Ea bEMGmDtkF9Y1665lXQ6d8esfHC7YNCSGJnE8nLSZkXKJJq4DdgmhmDRe9qoVcnBy K+S8lvf5EL2YQzhYh2+BTVeH4SI1f0hnufro/D0UKxBCQLw1dj1JaIdUaPd9dH+F XyZ8nRgiXD9epk+5R31wQ0mFfTzaBPc8t98CIAFeZsWN8arhJMC4IgxYun5mueEV uzq1hJdEwEcayK8CAwEAAaOCAkUwggJBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU lGHWTU0AfWv1mutBga5nflniFEAwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wFAYD VR0RBA0wC4IJdHVmdHMuZWR1MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAtz77JN+cTbp18jnFulj0bF38Qs96 nzXEnh0JgSXttJkAAAGIZekpCQAABAMASDBGAiEAtp8beV2uVanNUboIAFMuYzkK V409VcWz5c1m2CbJiQwCIQDYN63y+IMt22QXwuU+6CbTQTYCKUoZcYhohEJ+g3v3 dQB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiGXpKR8AAAQD AEcwRQIhALua1KVSEZDE6PVf/hp4OBiT84j4cXwyUo6cyr9xar8+AiB8ltQsG4gp eEElf50VVsdpp3ml6tULY+VLdqJcHPJcdjANBgkqhkiG9w0BAQsFAAOCAQEAIbte Ue6jrv8/c6ZvxOv34dtN/7u7h+lCwL6Q72GQ2qH0SGd6SE2/tWiRhZc68kbcxOvN pOExrsy5vFi4t1wF9OKwZoa17KEdIys688Zgnu1gfms/wVKPlcXcaT97+h+qAnS/ /Xo4uUqzflxeLohTlZGkShcR4noQxloyh/bK4ho+gRQuDMqGT0n08YaPnauo4aqU 2FFs6K8ViIePiEpCKH2VAlMpWHQxS/gjR9snTFiHIVsLkwqBeRKL2Y0xEo3lZ+0h DR3ETWd+0NwfovunzzGP4srOkvCqvCAXlxVsnZUHlfSOpTwj6ceUvBHUdpVHQYB8 m8c2v46KhUD790hYqg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlOuuSX4LI7zSMVFNJSV F6IkrIiRoewSU+rAujwbNuAuGIASnt6bWq4rVcu0gyZ4nxaF/a7V1fuyb7Dr1Sft xTQPWYap1shr6CNg35zriryzwl6b7sB6hQ7eG8LM3QCDu+YPgRpsQwaYO2QX1jXr rmVdDp3x6x8cLtg0JIYmcTyctJmRcokmrgN2CaGYNF72qhVycHIr5LyW9/kQvZhD OFiHb4FNV4fhIjV/SGe5+uj8PRQrEEJAvDV2PUloh1Ro9310f4VfJnydGCJcP16m T7lHfXBDSYV9PNoE9zy33wIgAV5mxY3xquEkwLgiDFi6fma54RW7OrWEl0TARxrI rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 382401696409896717744838009854664435731960 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 04:09:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-27 04:09:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tufts.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22006730449058515381457210023531604014941626252002082442276604622909819189975443163891388544077693595226658207673160406518933878896310729465379342395384480822028429908273528484870110320743848676972876928605335253387238309130049412161017255622664970326828859011320747851823470299381564369539589983077627350427232295072489309380967385866262699825122381588321916425886168314162794697903150964630163525987982497797225931614830596179367299340394506495372586141150376445407017476217254194606742465802409574825872962867202472247997678255531659047842086309516043963806801628970097319737493542852508438765773405488303656585391 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9461d64d4d007d6bf59aeb4181ae677e59e21440 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tufts.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018865e929090000040300483046022100b69f1b795dae55a9cd51ba0800532e63390a578d3d55c5b3e5cd66d826c9890c022100d837adf2f8832ddb6417c2e53ee826d3413602294a1971886884427e837bf7750076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018865e9291f0000040300473045022100bb9ad4a5521190c4e8f55ffe1a78381893f388f8717c32528e9ccabf716abf3e02207c96d42c1b88297841257f9d1556c769a779a5ead50b63e54b76a25c1cf25c76 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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