weinbergerlab.ucsf.edu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:14:ad:6c:72:69:ad:cd:4c:30:52:a8:80:75:98:52:5f:95 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=weinbergerlab.ucsf.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:14:ad:6c:72:69:ad:cd:4c:30:52:a8:80:75:98:52:5f:95Serial Number (int): 268373024665598462393106980609825216552853
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d6:96:4c:ed:3c:b3:dd:da:93:38:ce:5c:0f:dc:70:bb:d2:d4:9f:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d0:0e:0a:20:17:9f:9f:48:1c:50:a9:4e:4b:32:f5:0e:1a:f1:72:7c
Fingerprint (sha256): 03:90:f6:7d:68:a8:17:c2:58:cd:ad:c8:79:a6:16:32:60:57:c4:9b:dd:40:a2:80:0b:55:67:f6:47:94:f8:77
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate weinbergerlab.ucsf.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for weinbergerlab.ucsf.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
weinbergerlab.ucsf.edu
Other certificates including the domain name ucsf.edu
(limited to 100 certificates)
www.suzeelee.ucsf.edu
sni.cloudflaressl.com
*.ucsf.edu
lecturepilot.ucsf.edu
barabanlab.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
5682617542246400-fe1.pantheonsite.io
alertus.ucsf.edu
ucdc.edu
akamai-san50.exacttarget.com
5720929187397632-fe3.pantheonsite.io
sni.cloudflaressl.com
us.prod.campusgroups.com
sni.cloudflaressl.com
biochem.ucsf.edu
mdadmissions.ucsf.edu
image.serviciokia.com.ec
portfolio.ucsf.edu
5673309542809600-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.suzeelee.ucsf.edu
modbase.compbio.ucsf.edu
sni.cloudflaressl.com
5673309542809600-fe1.pantheonsite.io
menus.library.ucsf.edu
5673309542809600-fe1.pantheonsite.io
test.eis.uw.edu
incapsula.com
image.serviciokia.com.ec
nsmaclfw01.mac-internal.ucsf.edu
sni.cloudflaressl.com
gartnerdata.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
5682617542246400-fe1.pantheonsite.io
neuroscape.ucsf.edu
scalefunder.net
gmail.ucsf.edu
iris-pa-dev.ucsf.edu
shiehlab.ucsf.edu
sni.cloudflaressl.com
vx105.ucsf.edu
5673309542809600-fe1.pantheonsite.io
view.our.ucsf.edu
5684453372329984-fe2.pantheonsite.io
jdgmail.ucsf.edu
us.prod.campusgroups.com
bionano.ucsf.edu
hivinsite.ucsf.edu
weinbergerlab.ucsf.edu
sni.cloudflaressl.com
suzeelee.ucsf.edu
prospector.ucsf.edu
remote.ucsf.edu
opengut.ucsf.edu
humangenetics.ucsf.edu
na132-2.cdn.salesforce-communities.com
precisionneuro-radiology.ucsf.edu
5632490240737280-fe4.pantheonsite.io
transcare.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
moodle.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
clinicaltrials.ucsf.edu
sni.cloudflaressl.com
cwms-admin.infra.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
champagne.ucsf.edu
mydocs.ucsf.edu
sni.cloudflaressl.com
www.dermpath.ucsf.edu
sni.cloudflaressl.com
fredchanglab.ucsf.edu
sni.cloudflaressl.com
weinbergerlab.ucsf.edu
tls.automattic.com
sni.cloudflaressl.com
dermatopathology.ucsf.edu
parngti.radiology.ucsf.edu
5706316634914816-fe1.pantheonsite.io
dermatology.ucsf.edu
makeagift.ucsf.edu
prevention.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
sni.cloudflaressl.com
sni.cloudflaressl.com
wiki.wynton.ucsf.edu
rtemis.mac-internal.ucsf.edu
5682617542246400-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
bejih.com
sni.cloudflaressl.com
*.ucsf.edu
lecturepilot.ucsf.edu
barabanlab.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
5682617542246400-fe1.pantheonsite.io
alertus.ucsf.edu
ucdc.edu
akamai-san50.exacttarget.com
5720929187397632-fe3.pantheonsite.io
sni.cloudflaressl.com
us.prod.campusgroups.com
sni.cloudflaressl.com
biochem.ucsf.edu
mdadmissions.ucsf.edu
image.serviciokia.com.ec
portfolio.ucsf.edu
5673309542809600-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.suzeelee.ucsf.edu
modbase.compbio.ucsf.edu
sni.cloudflaressl.com
5673309542809600-fe1.pantheonsite.io
menus.library.ucsf.edu
5673309542809600-fe1.pantheonsite.io
test.eis.uw.edu
incapsula.com
image.serviciokia.com.ec
nsmaclfw01.mac-internal.ucsf.edu
sni.cloudflaressl.com
gartnerdata.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
5682617542246400-fe1.pantheonsite.io
neuroscape.ucsf.edu
scalefunder.net
gmail.ucsf.edu
iris-pa-dev.ucsf.edu
shiehlab.ucsf.edu
sni.cloudflaressl.com
vx105.ucsf.edu
5673309542809600-fe1.pantheonsite.io
view.our.ucsf.edu
5684453372329984-fe2.pantheonsite.io
jdgmail.ucsf.edu
us.prod.campusgroups.com
bionano.ucsf.edu
hivinsite.ucsf.edu
weinbergerlab.ucsf.edu
sni.cloudflaressl.com
suzeelee.ucsf.edu
prospector.ucsf.edu
remote.ucsf.edu
opengut.ucsf.edu
humangenetics.ucsf.edu
na132-2.cdn.salesforce-communities.com
precisionneuro-radiology.ucsf.edu
5632490240737280-fe4.pantheonsite.io
transcare.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
moodle.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
clinicaltrials.ucsf.edu
sni.cloudflaressl.com
cwms-admin.infra.ucsf.edu
dermpath.ucsf.edu
sni.cloudflaressl.com
sni.cloudflaressl.com
champagne.ucsf.edu
mydocs.ucsf.edu
sni.cloudflaressl.com
www.dermpath.ucsf.edu
sni.cloudflaressl.com
fredchanglab.ucsf.edu
sni.cloudflaressl.com
weinbergerlab.ucsf.edu
tls.automattic.com
sni.cloudflaressl.com
dermatopathology.ucsf.edu
parngti.radiology.ucsf.edu
5706316634914816-fe1.pantheonsite.io
dermatology.ucsf.edu
makeagift.ucsf.edu
prevention.ucsf.edu
sni.cloudflaressl.com
wiki.docking.org
sni.cloudflaressl.com
sni.cloudflaressl.com
wiki.wynton.ucsf.edu
rtemis.mac-internal.ucsf.edu
5682617542246400-fe1.pantheonsite.io
sni.cloudflaressl.com
sni.cloudflaressl.com
bejih.com
Certificate
The complete raw certificate details for weinbergerlab.ucsf.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAxStbHJprc1MMFKogHWYUl+VMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTgwMTE1NTJaFw0x OTEwMTYwMTE1NTJaMCExHzAdBgNVBAMTFndlaW5iZXJnZXJsYWIudWNzZi5lZHUw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwpt5rXqGzeF0wdbN0ID4m aYvRCmoApiWbtwKVGnrnB6uPwP3KvP7D9zOp3h/D7tuZW/OPK7w0EZxhh2lDw2I/ 8DBcpE6+DSAJ7KhBAnnyG6xJRswURHIk6u9a9nb1MipResoNXH+66s+L9Oxyqlkr Y/gikbeya/MDb8FOoFm0LLY5MPABGwUWW9d21Q7fsaXulF9zXNnSuWcRqm92WPhZ ikeKftwjq86w1hjy6qxWrIB7SsYkdXY5k1j051ZpFmwF3bzIF6PWYD9K51GIuCAZ 3VwxCl4ZTwJcbanc3EaQ0Hrn/gQOEZnQgBjSl/nX2nRWG4pmN46IeJMIEDsc625N AgMBAAGjggJqMIICZjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNaWTO08s93akzjO XA/ccLvS1J80MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wIQYDVR0RBBowGIIWd2VpbmJlcmdlcmxhYi51Y3NmLmVkdTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABbALdSbIA AAQDAEYwRAIgYD15HgBGju5D29FLF+TEB887y9Q9zNc3pRHI0XKeszsCIFoQKvc7 a0IXLKTE6DXe0wpDOt+dPVKyIJFEUbabxaXrAHYAKTxRllTIOWW6qlD8WAfUt2+/ WHopctykwwz05UVH9HgAAAFsAt1JoQAABAMARzBFAiA0Gq9al0e7R5qF3588Q8bF Lzp9RjvGC1tN+ymLPyFazgIhAJf4iHzylp1PLGnJtKKmqRFd86KUm9b51cRzdfcM EecrMA0GCSqGSIb3DQEBCwUAA4IBAQBAi/vIk67vr9xRFR41QnLDmeUgr+nrKdV8 gQDTy3HkoZVWm77qF+P5xgOGJDUmM7Xckn3sxbwgdBW4/tQF3c7zLS8nVhJdikTH GbnfOGXEn2ZD89UByBIqFBlloI1JMEVUZNxCHKmKy1mMk22uY2JGLXFtzC6rh9Cw 6MGA9gGrpyHJG9b273v84FbuN6ERU2V7Jf23SjKAYvzojKZH3ppFRWuygOdOcrrX Sr55lknvaeEZPFu0Gr5O/4mN0K5+vuRa67uv5gajXJJUTJMlLpGyThQBLr43jdy1 tNiCPyrBPDVpPlOLC1hNOwVCnhfvbVJeNfaM/4zvfVAaxT1/kVTQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Kbea16hs3hdMHWzdCA+ JmmL0QpqAKYlm7cClRp65werj8D9yrz+w/czqd4fw+7bmVvzjyu8NBGcYYdpQ8Ni P/AwXKROvg0gCeyoQQJ58husSUbMFERyJOrvWvZ29TIqUXrKDVx/uurPi/TscqpZ K2P4IpG3smvzA2/BTqBZtCy2OTDwARsFFlvXdtUO37Gl7pRfc1zZ0rlnEapvdlj4 WYpHin7cI6vOsNYY8uqsVqyAe0rGJHV2OZNY9OdWaRZsBd28yBej1mA/SudRiLgg Gd1cMQpeGU8CXG2p3NxGkNB65/4EDhGZ0IAY0pf519p0VhuKZjeOiHiTCBA7HOtu TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 268373024665598462393106980609825216552853 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 01:15:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 01:15:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weinbergerlab.ucsf.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30379479276715675597609983372428091645751693065341527862021638413313113745243498726585377472063178304830773727195947459208923008699414374490746719840096559888340019696311605829493744285792101852943885092758234724126753810473421985819966530494564596577769735004961139109472266751563989452602910431340535539572294105834819269419885795715458729154038390669627448274710999482427308212765861437480633158315112459027132947374606754673073696371092244715487133733709100256765423513114285060634009280121989523062426825836377988638665427570625561914687075990296916578054361701815851135098142713376190827725549193228114901823053 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d6964ced3cb3ddda9338ce5c0fdc70bbd2d49f34 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weinbergerlab.ucsf.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c02dd49b200000403004630440220603d791e00468eee43dbd14b17e4c407cf3bcbd43dccd737a511c8d1729eb33b02205a102af73b6b42172ca4c4e835ded30a433adf9d3d52b220914451b69bc5a5eb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c02dd49a100000403004730450220341aaf5a9747bb479a85df9f3c43c6c52f3a7d463bc60b5b4dfb298b3f215ace02210097f8887cf2969d4f2c69c9b4a2a6a9115df3a2949bd6f9d5c47375f70c11e72b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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