cosmic.monumentregroup.com
Issued by R3
About this certificate
This digital certificate with serial number 03:a1:c3:ce:5d:e3:41:91:ac:d0:cb:6e:6e:c6:a3:97:3f:8e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cosmic.monumentregroup.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a1:c3:ce:5d:e3:41:91:ac:d0:cb:6e:6e:c6:a3:97:3f:8eSerial Number (int): 316382589846151927993506932171184572678030
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d5:99:27:7b:65:80:84:05:b3:41:0f:3a:94:84:3c:92:8f:3d:a1:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2f:a8:a0:98:0f:2b:49:14:cf:9b:35:38:91:0f:2c:bc:22:4c:b0:ad
Fingerprint (sha256): 05:e4:21:08:14:72:dd:4b:c8:b9:86:48:10:f5:e4:3d:1a:59:2c:c2:64:55:ea:b9:48:43:07:96:20:bc:22:78
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cosmic.monumentregroup.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cosmic.monumentregroup.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cosmic.monumentregroup.com
Other certificates including the domain name monumentregroup.com
(limited to 100 certificates)
monumentregroup.com
sdp.hja.net
servicedesk.monaghancoco.ie
cosmic.monumentregroup.com
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
itsupport.bandmwaste.com
monumentregroup.com
helpdesk.alivetravel.com
itassist.harrowschool.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
help.thereader.org.uk
servicedesk.monaghancoco.ie
pomoc.lekam.pl
servicedesk.endrich.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
monumentregroup.com
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.ambient.org.uk
servicedesk.durbinglobal.com
helpdesk.greenfood.nl
servicedesk.labbuit.it
monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
help.thereader.org.uk
servicedesk.monaghancoco.ie
helpdesk.cartrawler.com
monumentregroup.com
sd.kormotech.com
cosmic.monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
ithelpdesk.ocugroup.com
help.sch1584.ru
itassist.harrowschool.org.uk
itservice.roxcel.com
servicedesk.endrich.com
servicedesk.ambient.org.uk
helpdesk.cysec.gov.cy
servicedesk.lumanity.com
itsupport.actibel.be
helpdesk.greenfood.nl
servicedesk.durbinglobal.com
servicedesk.monaghancoco.ie
itdesk.solargis.com
helpdesk.vandenbraembussche.be
helpdesk.nauit.lt
support.sysco.uk.com
helpdesk.trinity.croydon.sch.uk
helpdesk.adc.ro
help.idowa.de
servicedesk.cplaromas.com
servicedesk.cplaromas.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdesk.trinity.croydon.sch.uk
monumentregroup.com
helpdesk.aldaholding.com
servicedesk.lumanity.com
servicedesk.monaghancoco.ie
www.monumentregroup.com
helpdesk.alivetravel.com
helpdesk.alivetravel.com
helpdesk.szallas.hu
itdesk.solargis.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
www.monumentregroup.com
support.sysco.uk.com
servicedesk.durbinglobal.com
service.myspock.work
servicedesk.monaghancoco.ie
help.idowa.de
helpdesk.adc.ro
helpdesk.porvairfiltration.com
servicedesk.cplaromas.com
sdpondemand.monumentregroup.com
demo.servicedeskplus.nl
servicedesk.phmg.com
demo.servicedeskplus.nl
servicedesk.endrich.com
itsupport.actibel.be
servicedesk.monaghancoco.ie
servicedesk.moredun.ac.uk
helpdesk.greenfood.nl
sdp.hja.net
servicedesk.monaghancoco.ie
cosmic.monumentregroup.com
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
itsupport.bandmwaste.com
monumentregroup.com
helpdesk.alivetravel.com
itassist.harrowschool.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
help.thereader.org.uk
servicedesk.monaghancoco.ie
pomoc.lekam.pl
servicedesk.endrich.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
monumentregroup.com
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.ambient.org.uk
servicedesk.durbinglobal.com
helpdesk.greenfood.nl
servicedesk.labbuit.it
monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
help.thereader.org.uk
servicedesk.monaghancoco.ie
helpdesk.cartrawler.com
monumentregroup.com
sd.kormotech.com
cosmic.monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
ithelpdesk.ocugroup.com
help.sch1584.ru
itassist.harrowschool.org.uk
itservice.roxcel.com
servicedesk.endrich.com
servicedesk.ambient.org.uk
helpdesk.cysec.gov.cy
servicedesk.lumanity.com
itsupport.actibel.be
helpdesk.greenfood.nl
servicedesk.durbinglobal.com
servicedesk.monaghancoco.ie
itdesk.solargis.com
helpdesk.vandenbraembussche.be
helpdesk.nauit.lt
support.sysco.uk.com
helpdesk.trinity.croydon.sch.uk
helpdesk.adc.ro
help.idowa.de
servicedesk.cplaromas.com
servicedesk.cplaromas.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdesk.trinity.croydon.sch.uk
monumentregroup.com
helpdesk.aldaholding.com
servicedesk.lumanity.com
servicedesk.monaghancoco.ie
www.monumentregroup.com
helpdesk.alivetravel.com
helpdesk.alivetravel.com
helpdesk.szallas.hu
itdesk.solargis.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
www.monumentregroup.com
support.sysco.uk.com
servicedesk.durbinglobal.com
service.myspock.work
servicedesk.monaghancoco.ie
help.idowa.de
helpdesk.adc.ro
helpdesk.porvairfiltration.com
servicedesk.cplaromas.com
sdpondemand.monumentregroup.com
demo.servicedeskplus.nl
servicedesk.phmg.com
demo.servicedeskplus.nl
servicedesk.endrich.com
itsupport.actibel.be
servicedesk.monaghancoco.ie
servicedesk.moredun.ac.uk
helpdesk.greenfood.nl
Certificate
The complete raw certificate details for cosmic.monumentregroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISA6HDzl3jQZGs0Mtubsajlz+OMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDMwMTM3MDdaFw0yNDAzMDIwMTM3MDZaMCUxIzAhBgNVBAMT GmNvc21pYy5tb251bWVudHJlZ3JvdXAuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEArOK+JN1R13SVOEPLQ7BTNeCq4q5lfcdnRA0FidulMMYDIAKg ZlFLL4JhMMNrd3c4zMIrHZXZ0jEXXSOqXk7+aczhDMFE2AnbX2MdK5dq3+Ne1/qL bbXoAwYybvsI+7X/qT+Ckv/pr1q4nWrt3ftciKfHIsRsb7lFci8+eGrMCqqmtCTx FoCpZzkG0c7RNp90z+lbxDGvsc/XcNz5iSt1gv9MMbKdtZUvM40vMkChY4NT3Kd9 /wC0/KKcmYzR0CXuJk1P3nZDh5LXIBkI99QPUyZh1m0WCWCXkRlz03M7QuPDasw9 XjM0b9hcZzv9FSw/TXBAeh94dw2gnh5k7Lc1So5A7JgY57T73qhfg8+JhCr4foFW eCqBV53TM0SvEIJckQV8ynmY/PLp/ay78D20L+OZcRGH19Nz7tLG7v2Pyh2m2PZQ 8boloePuhoOxh3oG0d3UcjHRBTJW/LFXaLD4JUwu4JquFUqR1AUneovK1MZfYruc AreJ7O7b+ucgczLg2lO579c4EC+gynaVuhHBfID3c3ZbJNdM1yUUOVK0hOVShcnm XG34+JLfapnmDe5A3CP+ZExn42cvWmlZpulGLOBVXt/AFL/SJ0KRsYAsjsT0ucEk 1fSaMLBcrj8YkxbcoAsmBlmRW3/Vz3QaQA/K9qt0Q44zMCG5eOUyKG9CpBECAwEA AaOCASkwggElMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU1Zkne2WAhAWzQQ86lIQ8 ko89oZgwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wJQYDVR0RBB4wHIIaY29zbWlj Lm1vbnVtZW50cmVncm91cC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAFETqq5Zp51OqtrtqMlK 0TkvJ1N7MDFNTqejNhgXN0LnjsAgZnmChJ7kAtWGUQ5GpS6rAXK8TfI2frg5Rdac x/tu6X/juCtFAmE15JpU/J9SZJqFrpGOglpvonWflD6OsvA9ePtjlS/THKOfOTNi 5zsryM8y0TUnD7Vuu5wkp4hkGeb9wrMHJEV5tQLKy2pMyQ0eEsnyU5KAcqCOqc56 39g67abQHQ1HSyEgdERiKH64Y/luwsoDMJyW6yThGN9Rb7y8tfLOxelGAl94K6i1 ffX95Zh5gQPDd1Y2lSAcBFsVpbQlGFae9R6dmfMgUPILr9026ngO/gpP8gdIvrcf /fE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArOK+JN1R13SVOEPLQ7BT NeCq4q5lfcdnRA0FidulMMYDIAKgZlFLL4JhMMNrd3c4zMIrHZXZ0jEXXSOqXk7+ aczhDMFE2AnbX2MdK5dq3+Ne1/qLbbXoAwYybvsI+7X/qT+Ckv/pr1q4nWrt3ftc iKfHIsRsb7lFci8+eGrMCqqmtCTxFoCpZzkG0c7RNp90z+lbxDGvsc/XcNz5iSt1 gv9MMbKdtZUvM40vMkChY4NT3Kd9/wC0/KKcmYzR0CXuJk1P3nZDh5LXIBkI99QP UyZh1m0WCWCXkRlz03M7QuPDasw9XjM0b9hcZzv9FSw/TXBAeh94dw2gnh5k7Lc1 So5A7JgY57T73qhfg8+JhCr4foFWeCqBV53TM0SvEIJckQV8ynmY/PLp/ay78D20 L+OZcRGH19Nz7tLG7v2Pyh2m2PZQ8boloePuhoOxh3oG0d3UcjHRBTJW/LFXaLD4 JUwu4JquFUqR1AUneovK1MZfYrucAreJ7O7b+ucgczLg2lO579c4EC+gynaVuhHB fID3c3ZbJNdM1yUUOVK0hOVShcnmXG34+JLfapnmDe5A3CP+ZExn42cvWmlZpulG LOBVXt/AFL/SJ0KRsYAsjsT0ucEk1fSaMLBcrj8YkxbcoAsmBlmRW3/Vz3QaQA/K 9qt0Q44zMCG5eOUyKG9CpBECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316382589846151927993506932171184572678030 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 01:37:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 01:37:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cosmic.monumentregroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705312177023825382381468804733651375167736463685397434404831202454091668559522354604947449445658281977357682590651353381740140015339584582420061470497004031722693233337192254726362112539843401611556427794743896601926689414954347027359170555297746923248585370069899824237129039294792637003609398592625369241478641299742490756113094368992443406274281915221177362895119289181844303591910508958065920807571902921827592349959859583977199380107544686008536995281203484696635749138765726202924203381041906516325101216538931344985309086210801892969925059710445142291244108558454591438803985173865880747813794432492516043289919043488171354918723110737482127882968231014143331843495501767489465140564331278594786481413993363210457054191566438006142321090327641828712457119733552443000560260169932785104160780381393940992919961636651760830293128318158540228278493762326634208476858340607244390109565184414932495779576077935194154488605945573554975983670379896084127196396189703218677016253665440361636327380654825486395606282946458962115243699030412323239416543666548760170108366642198571093983607508548716314127342049984448451277109815060448556119336861680005090543970249433640110496034673948888733386123332085967024428832259478025779307258897 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d599277b65808405b3410f3a94843c928f3da198 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmic.monumentregroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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