stewardcommunity.prod.acquia-sites.com
Issued by R3
About this certificate
This digital certificate with serial number 03:07:d5:23:a6:1b:5c:ba:bb:08:cd:0f:a7:7d:09:9d:0a:c6 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stewardcommunity.prod.acquia-sites.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:07:d5:23:a6:1b:5c:ba:bb:08:cd:0f:a7:7d:09:9d:0a:c6Serial Number (int): 264002145026267397942424152250721406618310
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 16:4e:14:b5:ca:58:f5:8c:92:ed:de:9a:25:4e:fc:59:e7:23:f9:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 38:ef:fc:6f:2f:54:f8:2c:22:b8:71:32:aa:03:0e:63:d8:6a:e2:ec
Fingerprint (sha256): 07:b8:9e:45:91:b6:49:9f:d7:4c:d9:fa:51:37:24:8f:1f:c8:b8:30:83:d1:6e:19:6e:63:df:a0:fc:60:94:e7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate stewardcommunity.prod.acquia-sites.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stewardcommunity.prod.acquia-sites.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
doctors.mystewardhealthcare.org
erwait.mystewardhealthcare.org
events.mystewardhealthcare.org
feed.mystewardhealthcare.org
personalization.mystewardhealthcare.org
stewardcommunity.prod.acquia-sites.com
erwait.mystewardhealthcare.org
events.mystewardhealthcare.org
feed.mystewardhealthcare.org
personalization.mystewardhealthcare.org
stewardcommunity.prod.acquia-sites.com
Other certificates including the domain name acquia-sites.com
(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com
Certificate
The complete raw certificate details for stewardcommunity.prod.acquia-sites.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEPzCCAyegAwIBAgISAwfVI6YbXLq7CM0Pp30JnQrGMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAxMDIxNTMxMzNaFw0yMzA0MDIxNTMxMzJaMDExLzAtBgNVBAMT JnN0ZXdhcmRjb21tdW5pdHkucHJvZC5hY3F1aWEtc2l0ZXMuY29tMFkwEwYHKoZI zj0CAQYIKoZIzj0DAQcDQgAEpL8+VHgRnuqHOU3vlFq4emhsXV4bVvmV80lhF4KU LZNvuybBZgopIBbrUcbuCnal6Yb0rkkw8SF4MXxlVgs4naOCAhkwggIVMA4GA1Ud DwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUFk4UtcpY9YyS7d6aJU78Wecj+ZQwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wgdsGA1UdEQSB0zCB0IIfZG9jdG9ycy5teXN0ZXdhcmRo ZWFsdGhjYXJlLm9yZ4IeZXJ3YWl0Lm15c3Rld2FyZGhlYWx0aGNhcmUub3Jngh5l dmVudHMubXlzdGV3YXJkaGVhbHRoY2FyZS5vcmeCHGZlZWQubXlzdGV3YXJkaGVh bHRoY2FyZS5vcmeCJ3BlcnNvbmFsaXphdGlvbi5teXN0ZXdhcmRoZWFsdGhjYXJl Lm9yZ4Imc3Rld2FyZGNvbW11bml0eS5wcm9kLmFjcXVpYS1zaXRlcy5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBACoGNf4CbI4gWKiAxFtj6IJUVdMiucYGQOYGKt1y E+NsAv+2GJaCZOAtT5VBVUDSABfzK0+hU8erruAkSknS7773oUE1aUa1M1rGhi86 hFmsFv31PMNyDlUZNBN71zVLASv6Nx8UUTshZAYZgrX0UF1WBK0CKlenHYWGHoYb R2ubqpPGa49CqjK3WKJ07GMAL3pPvYMhpVNmK86pzoE7T0/NmU4vp7kiW6bmx7ZZ /lAtU5jvr+9tzj9rGMwok8V55nSwgt/sFFA6YBh41rzyn3XDcvPU/L2g5spOnwuS Y7nA+Bh+8YKqxNJAxZBSJxv9qlC1E4ZQ7eMGW2xwhrhrQy4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpL8+VHgRnuqHOU3vlFq4emhsXV4b VvmV80lhF4KULZNvuybBZgopIBbrUcbuCnal6Yb0rkkw8SF4MXxlVgs4nQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 264002145026267397942424152250721406618310 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 15:31:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-02 15:31:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stewardcommunity.prod.acquia-sites.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004a4bf3e5478119eea87394def945ab87a686c5d5e1b56f995f349611782942d936fbb26c1660a292016eb51c6ee0a76a5e986f4ae4930f12178317c65560b389d . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 164e14b5ca58f58c92edde9a254efc59e723f994 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (211 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctors.mystewardhealthcare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erwait.mystewardhealthcare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.mystewardhealthcare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feed.mystewardhealthcare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalization.mystewardhealthcare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewardcommunity.prod.acquia-sites.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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