exhibits.usask.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d3:fa:22:67:0b:ce:91:c6:4a:6d:1a:b4:a0:2f:77:a2:70 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=exhibits.usask.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d3:fa:22:67:0b:ce:91:c6:4a:6d:1a:b4:a0:2f:77:a2:70Serial Number (int): 333468922842661803989456549527473733739120
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2a:fe:78:88:f8:0b:f8:82:8e:b4:f8:a5:47:24:00:e1:e5:a3:2b:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d3:ae:46:c4:b6:1c:95:34:6a:f9:ed:7c:4e:81:d9:94:86:04:14:77
Fingerprint (sha256): 05:c4:15:f0:d2:21:03:5e:98:d2:01:e2:62:2b:89:0a:30:d8:d9:6e:8a:c0:5d:1a:5f:59:51:5b:d2:28:35:b7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate exhibits.usask.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for exhibits.usask.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
exhibits.usask.ca
Other certificates including the domain name usask.ca
(limited to 100 certificates)
somtam.usask.ca
biglab.ca
asweb.usask.ca
cbme.usask.ca
ssrl.usask.ca
sesd.usask.ca
harvest-test.usask.ca
papyrus.usask.ca
booking.cs.usask.ca
static.huskies.usask.ca
drc.usask.ca
ccx1.usask.ca
svn.cs.usask.ca
medicine.usask.ca
moodle-hs.usask.ca
perspectiveppm.usask.ca
engr.usask.ca
cpassalestest.usask.ca
lib-ulc-test.usask.ca
*.test.usask.ca
booking.cs.usask.ca
iportal.usask.ca
intervac.usask.ca
eightball.usask.ca
moodle-hs.usask.ca
oemmw.usask.ca
exhibits.usask.ca
shop.usask.ca
excalibur.usask.ca
gwf-nutrient.usask.ca
m.working.usask.ca
dinewithustest.usask.ca
huskies.usask.ca
svn.cs.usask.ca
sesdweb.usask.ca
gisserver1.usask.ca
iportal.usask.ca
exhibits.usask.ca
winnowing.usask.ca
huskies.usask.ca
math.usask.ca
git.cs.usask.ca
candle.usask.ca
wcvm-hmicrv0.usask.ca
asportal.usask.ca
papyrus.usask.ca
xrm2018.usask.ca
gisserver1.usask.ca
libanswers.usask.ca
library.usask.ca
anita.usask.ca
shoptest.usask.ca
math.usask.ca
knowpulse.usask.ca
journals.usask.ca
chp3.usask.ca
mail.usask.ca
dsm.sess.usask.ca
www.edwards.usask.ca
sesdchannels.usask.ca
dinewithusdev.usask.ca
simcity.usask.ca
students.edwards.usask.ca
www.edwards.usask.ca
papyrus.usask.ca
borris.usask.ca
edx.engr.usask.ca
mytotalrewards.usask.ca
booking.cs.usask.ca
accusyn.usask.ca
*.cyber.usask.ca
borris.usask.ca
static.huskies.usask.ca
mydataplants.usask.ca
huskies.usask.ca
cst.cs.usask.ca
www.edwards.usask.ca
asweb.usask.ca
defiant.usask.ca
simcity.usask.ca
amigo.usask.ca
sksoilgis1.usask.ca
touch.usask.ca
touch.usask.ca
gis1test.usask.ca
ganita.usask.ca
journals.usask.ca
sundog.usask.ca
defiant.usask.ca
drc.usask.ca
medicine.usask.ca
gistest.usask.ca
winnowing.usask.ca
mytotalrewards-auth.usask.ca
asdev.usask.ca
moodle.cs.usask.ca
leadershipconference.usask.ca
static.huskies.usask.ca
shirpaccess.usask.ca
store.usask.ca
biglab.ca
asweb.usask.ca
cbme.usask.ca
ssrl.usask.ca
sesd.usask.ca
harvest-test.usask.ca
papyrus.usask.ca
booking.cs.usask.ca
static.huskies.usask.ca
drc.usask.ca
ccx1.usask.ca
svn.cs.usask.ca
medicine.usask.ca
moodle-hs.usask.ca
perspectiveppm.usask.ca
engr.usask.ca
cpassalestest.usask.ca
lib-ulc-test.usask.ca
*.test.usask.ca
booking.cs.usask.ca
iportal.usask.ca
intervac.usask.ca
eightball.usask.ca
moodle-hs.usask.ca
oemmw.usask.ca
exhibits.usask.ca
shop.usask.ca
excalibur.usask.ca
gwf-nutrient.usask.ca
m.working.usask.ca
dinewithustest.usask.ca
huskies.usask.ca
svn.cs.usask.ca
sesdweb.usask.ca
gisserver1.usask.ca
iportal.usask.ca
exhibits.usask.ca
winnowing.usask.ca
huskies.usask.ca
math.usask.ca
git.cs.usask.ca
candle.usask.ca
wcvm-hmicrv0.usask.ca
asportal.usask.ca
papyrus.usask.ca
xrm2018.usask.ca
gisserver1.usask.ca
libanswers.usask.ca
library.usask.ca
anita.usask.ca
shoptest.usask.ca
math.usask.ca
knowpulse.usask.ca
journals.usask.ca
chp3.usask.ca
mail.usask.ca
dsm.sess.usask.ca
www.edwards.usask.ca
sesdchannels.usask.ca
dinewithusdev.usask.ca
simcity.usask.ca
students.edwards.usask.ca
www.edwards.usask.ca
papyrus.usask.ca
borris.usask.ca
edx.engr.usask.ca
mytotalrewards.usask.ca
booking.cs.usask.ca
accusyn.usask.ca
*.cyber.usask.ca
borris.usask.ca
static.huskies.usask.ca
mydataplants.usask.ca
huskies.usask.ca
cst.cs.usask.ca
www.edwards.usask.ca
asweb.usask.ca
defiant.usask.ca
simcity.usask.ca
amigo.usask.ca
sksoilgis1.usask.ca
touch.usask.ca
touch.usask.ca
gis1test.usask.ca
ganita.usask.ca
journals.usask.ca
sundog.usask.ca
defiant.usask.ca
drc.usask.ca
medicine.usask.ca
gistest.usask.ca
winnowing.usask.ca
mytotalrewards-auth.usask.ca
asdev.usask.ca
moodle.cs.usask.ca
leadershipconference.usask.ca
static.huskies.usask.ca
shirpaccess.usask.ca
store.usask.ca
Certificate
The complete raw certificate details for exhibits.usask.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISA9P6ImcLzpHGSm0atKAvd6JwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTUxODIzNTVaFw0x OTEwMTMxODIzNTVaMBwxGjAYBgNVBAMTEWV4aGliaXRzLnVzYXNrLmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgf2FrhW32FuWJ/PAvDUydCm5P1j 4yfX+SKQpserTY2qFJnQHD11KveH6I/bMut50ud+2ne9Ab4kYbAvvs6a56qnf2kv xw3GvN9FLDzQCO6CMjmhurtZFvBGlAgkLmxkKtainj/AQ/yyXIeGKlHamdR2P2Gy C7HALOGnSsPDwDF4xE8jiNFaaXTBodHTi2+fqNOon6/Lr3iVs9OdFHbLYwEpLX/U mEUsoyo+DCoI1bPsbvWhk4yKraqM5g274GXXdm8ytLk35BaFY3YTo/jnwkcF206f wLu55p4Hcov4QzsOTeEcfXsF4kwoik773ykZYjuOetgMhjwAxflTqvEy4QIDAQAB o4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQq/niI+Av4go60+KVHJADh 5aMrrjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMBwGA1UdEQQVMBOCEWV4aGliaXRzLnVzYXNrLmNhMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFr9xds9wAABAMARjBEAiAl esfmtzj3sur1Cxn6PHdfXASm+sAXBpLPH/Y1MBvcCgIgYLVPiK4acP4TwRw9Dwsm NRuZAtr4mPysJvIuDTnYCKwAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdo VEvYjQAAAWv3F2zgAAAEAwBHMEUCIQD1bJajg9BCO4THOHrFHZTk84227GDExUAg 5KMSUKNUQQIgc+SWwkyAovZOt4PBWhQVZ9IsliNkjHtWY1nPoierLo0wDQYJKoZI hvcNAQELBQADggEBAEuZZIX+U4TgV4/OHYntOPxcZKaEmkOYdF5KBB824UpdDEPO AOs1OJTtV9uJtnmygKBJ5g9Yw+CZUu7V+uhaSMHzgygyoG5Zc4XhOJWXdpkMS1cu 6QGw+onnhe7ZsoapiXi7h0nYIA5BeVs0q56b8eAsUFn8V93ygxUL8eYkR53RA2/f MQv7wQaJvucEIrcnR5knuCzhtrzL7iIxfYKdJrhgOQqHO2tFxX5yR9ddJXZhX0wY FcW4ekdYhDJRssvjM0V9oZGZAOElvQGzK0rf4d36/uZFGNOjvv0Z0e1XtkRVTPna VieEHO/8JLY38nBC34PHVLbG3JbAHOeUNuNIhzQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgf2FrhW32FuWJ/PAvDU ydCm5P1j4yfX+SKQpserTY2qFJnQHD11KveH6I/bMut50ud+2ne9Ab4kYbAvvs6a 56qnf2kvxw3GvN9FLDzQCO6CMjmhurtZFvBGlAgkLmxkKtainj/AQ/yyXIeGKlHa mdR2P2GyC7HALOGnSsPDwDF4xE8jiNFaaXTBodHTi2+fqNOon6/Lr3iVs9OdFHbL YwEpLX/UmEUsoyo+DCoI1bPsbvWhk4yKraqM5g274GXXdm8ytLk35BaFY3YTo/jn wkcF206fwLu55p4Hcov4QzsOTeEcfXsF4kwoik773ykZYjuOetgMhjwAxflTqvEy 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333468922842661803989456549527473733739120 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 18:23:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 18:23:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exhibits.usask.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23989203799099350791320365186676786989128232468321760173331675708110742436589155723287449765421321683315549284412229195392300325267133994641177708058547428518979209098481397099598640226020279997751247729370636372028957130433078840948241435051387591520618840962498105038894194859439705167412253043142649714185392723350871469149081685785965617852237661726275147617233303938647181877885262256577614931715522136751642199421969761286167817872930207109297431835886729062925626178176819339972590972633714777638185212201234193148863175689501195705153604571988509173052509121259228688496233895777439271101046231861134697247457 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2afe7888f80bf8828eb4f8a5472400e1e5a32bae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhibits.usask.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bf7176cf700000403004630440220257ac7e6b738f7b2eaf50b19fa3c775f5c04a6fac0170692cf1ff635301bdc0a022060b54f88ae1a70fe13c11c3d0f0b26351b9902daf898fcac26f22e0d39d808ac00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bf7176ce00000040300473045022100f56c96a383d0423b84c7387ac51d94e4f38db6ec60c4c54020e4a31250a35441022073e496c24c80a2f64eb783c15a141567d22c9623648c7b566359cfa227ab2e8d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004b996485fe5384e0578fce1d89ed38fc5c64a6849a4398745e4a041f36e14a5d0c43ce00eb353894ed57db89b679b280a049e60f58c3e09952eed5fae85a48c1f3832832a06e597385e138959776990c4b572ee901b0fa89e785eed9b286a98978bb8749d8200e41795b34ab9e9bf1e02c5059fc57ddf283150bf1e624479dd1036fdf310bfbc10689bee70422b727479927b82ce1b6bccbee22317d829d26b860390a873b6b45c57e7247d75d2576615f4c1815c5b87a4758843251b2cbe333457da1919900e125bd01b32b4adfe1ddfafee64518d3a3befd19d1ed57b644554cf9da5627841ceffc24b637f27042df83c754b6c6dc96c01ce79436e3488734