*.istio.sandbox.k8s.centrio.com
Issued by R3
About this certificate
This digital certificate with serial number 03:3c:92:87:8f:b3:d5:81:e0:8b:02:4e:d4:c9:da:8e:c3:68 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.istio.sandbox.k8s.centrio.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3c:92:87:8f:b3:d5:81:e0:8b:02:4e:d4:c9:da:8e:c3:68Serial Number (int): 281948570972630039397987202135058505712488
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ea:63:f0:b0:df:d0:e5:d2:cc:de:68:b9:02:10:83:f5:a7:55:cf:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fd:e8:4b:8d:17:ff:a2:0c:c9:0f:f4:0a:c1:15:ef:70:eb:f7:83:0f
Fingerprint (sha256): 04:b8:17:dd:3c:db:52:6e:5a:d0:4e:ca:f7:5d:50:09:be:7e:1b:ed:22:e3:bd:c0:01:ed:4c:30:d0:34:3a:b4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.istio.sandbox.k8s.centrio.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.istio.sandbox.k8s.centrio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.istio.sandbox.k8s.centrio.com
Other certificates including the domain name centrio.com
(limited to 100 certificates)
paultest.sandbox.centrio.com
*.sandbox.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.istio.test.k8s.centrio.com
vpn2.centrio.com
*.sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
prometheus.test.k8s.centrio.com
radius.sandbox.centrio.com
proxy.sandbox.centrio.com
www.centrio.com
*.istio.sandbox.k8s.centrio.com
pong.centrio.com
prometheus.test.k8s.centrio.com
certmanager.sandbox.centrio.com
cert-test.sandbox.centrio.com
*.sandbox.k8s.centrio.com
*.sandbox.k8s.centrio.com
centrio.com
*.top.k8s.centrio.com
*.sandbox.centrio.com
*.sandbox.centrio.com
cartography.sandbox.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
*.k8s.sandbox.us-east-1.centrio.com
*.test.k8s.centrio.com
*.sandbox.k8s.centrio.com
www.centrio.com
*.sandbox.centrio.com
*.chinmaya.k8s.centrio.com
*.test.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
certmanager.sandbox.centrio.com
paultest.sandbox.centrio.com
www.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
prometheus.chinmaya.k8s.centrio.com
*.k8s.sandbox.centrio.com
proxy.sandbox.centrio.com
*.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
certmanager.sandbox.centrio.com
*.test-us-west-2.k8s.us-west-2.centrio.com
www.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
*.sandbox.centrio.com
culture-board.app-container.vpn.centrio.com
*.sandbox.k8s.centrio.com
vault-infrastructure.test.us-west-2.centrio.com
*.sandbox.k8s.centrio.com
*.top.k8s.centrio.com
*.test.k8s.centrio.com
vision.sandbox.centrio.com
*.mt.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
grafana.sandbox.k8s.centrio.com
*.test.k8s.centrio.com
centrio.com
www.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.sandbox.k8s.centrio.com
test.chan.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
prometheus.sandbox.k8s.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
www.centrio.com
proxy.sandbox.centrio.com
pdfkit.sandbox.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
tinode.co
prometheus.chinmaya.k8s.centrio.com
grafana.top.k8s.centrio.com
prometheus.test.k8s.centrio.com
prometheus.top.k8s.centrio.com
*.test.k8s.centrio.com
proxy.sandbox.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.centrio.com
pong.centrio.com
paultest1.sandbox.centrio.com
*.istio.test.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.sandbox.k8s.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
paultest.sandbox.centrio.com
gse-api.sandbox.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
blahblahblah.sandbox.centrio.com
sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.istio.test.k8s.centrio.com
vpn2.centrio.com
*.sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
prometheus.test.k8s.centrio.com
radius.sandbox.centrio.com
proxy.sandbox.centrio.com
www.centrio.com
*.istio.sandbox.k8s.centrio.com
pong.centrio.com
prometheus.test.k8s.centrio.com
certmanager.sandbox.centrio.com
cert-test.sandbox.centrio.com
*.sandbox.k8s.centrio.com
*.sandbox.k8s.centrio.com
centrio.com
*.top.k8s.centrio.com
*.sandbox.centrio.com
*.sandbox.centrio.com
cartography.sandbox.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
*.k8s.sandbox.us-east-1.centrio.com
*.test.k8s.centrio.com
*.sandbox.k8s.centrio.com
www.centrio.com
*.sandbox.centrio.com
*.chinmaya.k8s.centrio.com
*.test.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
certmanager.sandbox.centrio.com
paultest.sandbox.centrio.com
www.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
prometheus.chinmaya.k8s.centrio.com
*.k8s.sandbox.centrio.com
proxy.sandbox.centrio.com
*.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
certmanager.sandbox.centrio.com
*.test-us-west-2.k8s.us-west-2.centrio.com
www.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
*.sandbox.centrio.com
culture-board.app-container.vpn.centrio.com
*.sandbox.k8s.centrio.com
vault-infrastructure.test.us-west-2.centrio.com
*.sandbox.k8s.centrio.com
*.top.k8s.centrio.com
*.test.k8s.centrio.com
vision.sandbox.centrio.com
*.mt.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
grafana.sandbox.k8s.centrio.com
*.test.k8s.centrio.com
centrio.com
www.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.sandbox.k8s.centrio.com
test.chan.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
prometheus.sandbox.k8s.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
www.centrio.com
proxy.sandbox.centrio.com
pdfkit.sandbox.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
tinode.co
prometheus.chinmaya.k8s.centrio.com
grafana.top.k8s.centrio.com
prometheus.test.k8s.centrio.com
prometheus.top.k8s.centrio.com
*.test.k8s.centrio.com
proxy.sandbox.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.centrio.com
pong.centrio.com
paultest1.sandbox.centrio.com
*.istio.test.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.sandbox.k8s.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
paultest.sandbox.centrio.com
gse-api.sandbox.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
blahblahblah.sandbox.centrio.com
sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
Certificate
The complete raw certificate details for *.istio.sandbox.k8s.centrio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEUTCCAzmgAwIBAgISAzySh4+z1YHgiwJO1MnajsNoMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjAyMDcyMjMyMzJaFw0yMjA1MDgyMjMyMzFaMCoxKDAmBgNVBAMM HyouaXN0aW8uc2FuZGJveC5rOHMuY2VudHJpby5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCjenmelOq6/7wvfrLqrGuywmlcIWBZ9daPbN/jOF35 YHrGSiWGjS9NAgX5VF9ycT3bvwzmRJChW4tINjSr/r29W4vMAOXkVmyDrMiDEmmi /lMfu20sJxeJZnpBlli7gsWcZ9D+U2agDXlEy1GvqKdogOqWIq8g91+wDuNAHGcI dFfFXwiz7EReE6weXnTPOzy1tboRCsziq6/S78IEzOdeEF8ztVHlL9QU8rRSwWEK uMwpvGuNHtUhjkCfQZeGUMZE8BbJFhDkUsSQ1hhgF/YMUATVLHfZvYFA6ApAQuo3 W9pc7oufgBAnhImEOd1bj1DVJ40rWJ5bwjK83YqjpFb9AgMBAAGjggFnMIIBYzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFOpj8LDf0OXSzN5ouQIQg/WnVc/0MB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMCoGA1UdEQQjMCGCHyouaXN0aW8uc2FuZGJveC5r OHMuY2VudHJpby5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYK KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAJGO8BmsDEcofkFe CKt4AV/eTRlnjbV/59S8mQfkWj/UjkKlW246jBB+js530KWSDKsmIjKJNqySFL4b t0QnSjPROfR75SsOD5Wg/a/NX24B+/+eJBYexjwu66hP2PNB1YvliDWLw++8t4aq 51KTM3Ioyr2AmNiEkg92VhWi9g0N9HXmp7UWb8BGQWwNawCochLVvGwy26lnu+LR 6MezRJWJprzj9hKuOCc4GcfB6IiEGLHGC5vON8Px+iC0aRNdcS6rSYwrq8Tto0qc lKwruZ6oQjh/y2F8TtAwC3T5dC+a689nyn6G0rTUrBTc63g9kOL0tm/cDi72k9lB ZiujiO8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3p5npTquv+8L36y6qxr ssJpXCFgWfXWj2zf4zhd+WB6xkolho0vTQIF+VRfcnE9278M5kSQoVuLSDY0q/69 vVuLzADl5FZsg6zIgxJpov5TH7ttLCcXiWZ6QZZYu4LFnGfQ/lNmoA15RMtRr6in aIDqliKvIPdfsA7jQBxnCHRXxV8Is+xEXhOsHl50zzs8tbW6EQrM4quv0u/CBMzn XhBfM7VR5S/UFPK0UsFhCrjMKbxrjR7VIY5An0GXhlDGRPAWyRYQ5FLEkNYYYBf2 DFAE1Sx32b2BQOgKQELqN1vaXO6Ln4AQJ4SJhDndW49Q1SeNK1ieW8IyvN2Ko6RW /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 281948570972630039397987202135058505712488 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-07 22:32:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-08 22:32:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.istio.sandbox.k8s.centrio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20637238420392160964948103204842600919587550240407398836029147476193607362463122166505605562587772330191958489421388251449433611792689403816067783373546473047547959525949237131308934385873398731446412153866748032661797498967262813347168709722374459190735742697094050119256835163046003252029379775901399435003290371927273909977348419069462179986912923171409846029006493926378867013657894581306006621789417661553473700679530946066239443794649961142528125938027696049544290880664181020800597867127137298282662835402003081451359390452626110747766726092568665467856861883193059353054383884251104216379419607547434542323453 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ea63f0b0dfd0e5d2ccde68b9021083f5a755cff4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istio.sandbox.k8s.centrio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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