ewok.pentangle.co.uk
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:47:0a:dc:d9:16:d6:63:b0:3c:7b:57:84:2a:77:83:a3:47 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ewok.pentangle.co.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:47:0a:dc:d9:16:d6:63:b0:3c:7b:57:84:2a:77:83:a3:47Serial Number (int): 372623630766786598188938910381376016720711
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e6:18:51:a5:15:ae:1e:fd:37:6c:3d:9f:05:f2:71:53:d5:bb:7d:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4f:c0:00:94:46:6a:bc:af:ed:1f:c7:dc:75:a0:bf:ee:d5:09:a2:8b
Fingerprint (sha256): 07:b6:25:fc:f2:2e:35:a4:9a:cf:60:22:87:70:61:f7:91:a1:3b:4a:34:1a:7e:6c:d7:ed:ad:db:0c:2b:18:db
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ewok.pentangle.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ewok.pentangle.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ewok.pentangle.co.uk
Other certificates including the domain name pentangle.co.uk
(limited to 100 certificates)
trade-cyrus.pentangle.co.uk
cyrus-test.pentangle.co.uk
portal.pentangle.co.uk
ewok.pentangle.co.uk
fr.ranieri.agency
www.feet-first.org
www.actusevent.com
www.ppgardendesign.co.uk
www.flamboyantandco.pentangle.co.uk
allsop-durn-dearlove.pentangle.co.uk
www.meridian-finance.co.uk
oms-test.pentangle.co.uk
www.cyrusaudio.com
womens-dev.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.pb-solutions.co.uk
www.andrew-murray.co.uk
remoteapp.pentangle.co.uk
wills-trusts-test.pentangle.co.uk
lotusbiscuits.pentangle.co.uk
www.feet-first.org
brownsgarage.pentangle.co.uk
ewok.pentangle.co.uk
www.franklinrae.com
www.countax.co.uk
racemakers.silverstone.co.uk
event-admin.pentangle.co.uk
www.astonmartinautodetailer.com
www.palmerbuildingservices.co.uk
www.ifpayroll.co.uk
www.feet-first.org
innocent.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.archivistgallery.com
hh.pentangle.co.uk
collaborative-it.pentangle.co.uk
silverstone.pentangle.co.uk
movietech.pentangle.co.uk
portal.pentangle.co.uk
racemakers.silverstone.co.uk
racemakers.silverstone.co.uk
event-admin.pentangle.co.uk
devmyadmin.pentangle.co.uk
the-practice.pentangle.co.uk
www.oxfordprivatecare.co.uk
ariens.pentangle.co.uk
www.carlimits.com
www.alphabetsigns.uk.com
natep-beta.pentangle.co.uk
ariens-api.pentangle.co.uk
board.womenspioneer.co.uk
keytaltd.pentangle.co.uk
www.feet-first.org
www.shineondetail.co.uk
ewok.pentangle.co.uk
business-insurance.pentangle.co.uk
acspacesetters.pentangle.co.uk
acspacesetters.pentangle.co.uk
natep-beta.pentangle.co.uk
ariens.pentangle.co.uk
ewok.pentangle.co.uk
business-insurance.pentangle.co.uk
natep-beta.pentangle.co.uk
brownsgarage.pentangle.co.uk
dealers.countax.co.uk
www.opendoorsthame.org.uk
attic.pentangle.co.uk
www.shineondetail.co.uk
webshop.ariens.no
ariens-analytics.pentangle.co.uk
oxfordprivatecare.pentangle.co.uk
ariens-api.pentangle.co.uk
stretchapp.pentangle.co.uk
www.addvantagestrategy.com
ariens.pentangle.co.uk
daviddurn.pentangle.co.uk
www.palmerbuildingsolutions.com
www.archivistgallery.com
www.addvantagestrategy.com
ebaileyconsulting.pentangle.co.uk
alphabetsigns.uk.com
duckrace.pentangle.co.uk
www.alunr.com
addlaw.co.uk
ariens.pentangle.co.uk
www.fluforum.co.uk
wtdfm-dev.pentangle.co.uk
www.shineondetail.co.uk
www.pentangle.co.uk
ewok.pentangle.co.uk
www.pentangle.co.uk
sirportly.pentangle.co.uk
mbm.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.shineondetail.co.uk
antispam.pentangle.co.uk
ariens-api-dev.pentangle.co.uk
www.raniericommunications.com
danhub.pentangle.co.uk
www.countax.com
cyrus-test.pentangle.co.uk
portal.pentangle.co.uk
ewok.pentangle.co.uk
fr.ranieri.agency
www.feet-first.org
www.actusevent.com
www.ppgardendesign.co.uk
www.flamboyantandco.pentangle.co.uk
allsop-durn-dearlove.pentangle.co.uk
www.meridian-finance.co.uk
oms-test.pentangle.co.uk
www.cyrusaudio.com
womens-dev.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.pb-solutions.co.uk
www.andrew-murray.co.uk
remoteapp.pentangle.co.uk
wills-trusts-test.pentangle.co.uk
lotusbiscuits.pentangle.co.uk
www.feet-first.org
brownsgarage.pentangle.co.uk
ewok.pentangle.co.uk
www.franklinrae.com
www.countax.co.uk
racemakers.silverstone.co.uk
event-admin.pentangle.co.uk
www.astonmartinautodetailer.com
www.palmerbuildingservices.co.uk
www.ifpayroll.co.uk
www.feet-first.org
innocent.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.archivistgallery.com
hh.pentangle.co.uk
collaborative-it.pentangle.co.uk
silverstone.pentangle.co.uk
movietech.pentangle.co.uk
portal.pentangle.co.uk
racemakers.silverstone.co.uk
racemakers.silverstone.co.uk
event-admin.pentangle.co.uk
devmyadmin.pentangle.co.uk
the-practice.pentangle.co.uk
www.oxfordprivatecare.co.uk
ariens.pentangle.co.uk
www.carlimits.com
www.alphabetsigns.uk.com
natep-beta.pentangle.co.uk
ariens-api.pentangle.co.uk
board.womenspioneer.co.uk
keytaltd.pentangle.co.uk
www.feet-first.org
www.shineondetail.co.uk
ewok.pentangle.co.uk
business-insurance.pentangle.co.uk
acspacesetters.pentangle.co.uk
acspacesetters.pentangle.co.uk
natep-beta.pentangle.co.uk
ariens.pentangle.co.uk
ewok.pentangle.co.uk
business-insurance.pentangle.co.uk
natep-beta.pentangle.co.uk
brownsgarage.pentangle.co.uk
dealers.countax.co.uk
www.opendoorsthame.org.uk
attic.pentangle.co.uk
www.shineondetail.co.uk
webshop.ariens.no
ariens-analytics.pentangle.co.uk
oxfordprivatecare.pentangle.co.uk
ariens-api.pentangle.co.uk
stretchapp.pentangle.co.uk
www.addvantagestrategy.com
ariens.pentangle.co.uk
daviddurn.pentangle.co.uk
www.palmerbuildingsolutions.com
www.archivistgallery.com
www.addvantagestrategy.com
ebaileyconsulting.pentangle.co.uk
alphabetsigns.uk.com
duckrace.pentangle.co.uk
www.alunr.com
addlaw.co.uk
ariens.pentangle.co.uk
www.fluforum.co.uk
wtdfm-dev.pentangle.co.uk
www.shineondetail.co.uk
www.pentangle.co.uk
ewok.pentangle.co.uk
www.pentangle.co.uk
sirportly.pentangle.co.uk
mbm.pentangle.co.uk
wtdfm-dev.pentangle.co.uk
www.shineondetail.co.uk
antispam.pentangle.co.uk
ariens-api-dev.pentangle.co.uk
www.raniericommunications.com
danhub.pentangle.co.uk
www.countax.com
Certificate
The complete raw certificate details for ewok.pentangle.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISBEcK3NkW1mOwPHtXhCp3g6NHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTUyMzM1NTZaFw0y MDAxMTMyMzM1NTZaMB8xHTAbBgNVBAMTFGV3b2sucGVudGFuZ2xlLmNvLnVrMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPcKCC/Vjo+YQ1LjQOELt51L 5L2tY+Rr30P+PJIGCxVsE1EZb9xV23cXRK0p/MuIsn984WOMlGF6oNioe15lBX/a 6dgdWKIHaUjPwnzom4hucC5aQHrbrn52sInz5jix1SMDinoVyalCstPGP5nCXSQY fqywEG3eQsuXyVN+3Q5D+E0vbt+f78ArhTPSbHMVqBJtLHHO1jGNqros6GLzPbOG UPiqhx95rrMdJdJQZhxN/gK114Wxl/MH1olM87Qr27YygMZFtwoaPrUkIbQg2Lll wZkZhjkkdli2DDjUQG6iNhk3oZdVWkh96ABcYrDoEscnhWPWQq/w0/Nw1h0pOQID AQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTmGFGlFa4e/TdsPZ8F 8nFT1bt9gTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j cnlwdC5vcmcvMB8GA1UdEQQYMBaCFGV3b2sucGVudGFuZ2xlLmNvLnVrMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFt0f4l9QAABAMA RzBFAiEA31cimqRu7mtmFdQF9dOSsFwGtQggZh8s8VOVa35BpCcCIGMsl78LS4tj EA9h6KgE2FmvhokyOFX47j3gmVaUq52SAHUAsh4FzIuizYogTodm+Su5iiUgZ2va +nDnsklTLe+LkF4AAAFt0f4l5AAABAMARjBEAiByi3GQY94mlBDKilASZ9kdcQ86 2MO+ty7p2LvEMLj1mwIgGwCOa8nvWE7U6KkklmNF6f3Kow36GxVmxOES08nzcEQw DQYJKoZIhvcNAQELBQADggEBADU6OpqBjKIDSYcV0o96ghvALRwMMOtrK/HEqw+4 mF7W4MNrdH3YxMzof4fTchbt9UM8FxkLVGluUnPSYmN0bLVutQuk+0YBdUZp18AQ l/G0Un+ZNgY5Z1t+rVJQzkhyYAIF+VedU56FWfqDo6CsNx4aQyBofzXGKE4fYXWD 9ckMU0veKjeX3g9OgJnJgRJ178yVkS0Xa5Ghcp+vlAEtiiUkO5dsczmEYMqPx87J Em+HRIHuZR1tAE8Z1tFnnUg2XAKdLufoTxe2/Jg8ZhfbqTIra+urdKczJfH6lmfL TMCsrXCAbWGVP/RBzYdOKKiFQqisAzd61CPyawWd5IVyjhc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPcKCC/Vjo+YQ1LjQOEL t51L5L2tY+Rr30P+PJIGCxVsE1EZb9xV23cXRK0p/MuIsn984WOMlGF6oNioe15l BX/a6dgdWKIHaUjPwnzom4hucC5aQHrbrn52sInz5jix1SMDinoVyalCstPGP5nC XSQYfqywEG3eQsuXyVN+3Q5D+E0vbt+f78ArhTPSbHMVqBJtLHHO1jGNqros6GLz PbOGUPiqhx95rrMdJdJQZhxN/gK114Wxl/MH1olM87Qr27YygMZFtwoaPrUkIbQg 2LllwZkZhjkkdli2DDjUQG6iNhk3oZdVWkh96ABcYrDoEscnhWPWQq/w0/Nw1h0p OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 372623630766786598188938910381376016720711 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 23:35:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 23:35:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ewok.pentangle.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21329854797892679580968384933350706748207039833330763443566974637170549572473427896996920835050550055301225654907660754454172380919267739229032393121766612713542198326133093592918206407933331368511741239486234674739196230087319823678018461945184262488143650788618723963614918134105398146621408451966841978026864452690088518353953095301559320569517380923084462225127150137432012813251958560650164739916528950019078138867085711491869029626893882445174465482472177240417075777758467393582005025649503328710278932889604343340943934787612758580262844095147222923097077757489594576158960096915994326760182635476146980727097 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e61851a515ae1efd376c3d9f05f27153d5bb7d81 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewok.pentangle.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd1fe25f50000040300473045022100df57229aa46eee6b6615d405f5d392b05c06b50820661f2cf153956b7e41a4270220632c97bf0b4b8b63100f61e8a804d859af8689323855f8ee3de0995694ab9d92007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dd1fe25e400000403004630440220728b719063de269410ca8a501267d91d710f3ad8c3beb72ee9d8bbc430b8f59b02201b008e6bc9ef584ed4e8a924966345e9fdcaa30dfa1b1566c4e112d3c9f37044 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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