ncdcr.gov
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:a0:f0:ec:4c:69:c3:b3:89:ae:63:7c:f1:23:4a:ee:a6:9d was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ncdcr.gov
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a0:f0:ec:4c:69:c3:b3:89:ae:63:7c:f1:23:4a:ee:a6:9dSerial Number (int): 403214564085280788335795473556958964786845
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ce:c7:e1:c0:1f:6a:a3:9e:4c:a9:7d:9b:06:9e:a3:fc:27:71:44:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b6:43:2c:57:67:40:3e:d7:16:32:6c:da:65:59:ee:4f:c3:21:26:f3
Fingerprint (sha256): 07:ee:ef:9a:4b:74:ac:8d:9d:2a:9f:fc:7b:63:88:41:fe:29:e7:36:b5:b9:33:ba:1e:48:6c:4b:5b:11:b6:85
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ncdcr.gov
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ncdcr.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dncr.nc.gov
ncculture.com
ncculture.org
ncdcr.gov
www.dncr.nc.gov
www.ncculture.com
ncculture.com
ncculture.org
ncdcr.gov
www.dncr.nc.gov
www.ncculture.com
Other certificates including the domain name ncdcr.gov
(limited to 100 certificates)
Ead.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
files.nc.gov
ncdcr.gov
files.nc.gov
www.museumofthecapefear.ncdcr.gov
capitalareavisitorservices.ncdcr.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
www.archives.ncdcr.gov
files.nc.gov
www.archives.ncdcr.gov
files.nc.gov
www.archaeology.ncdcr.gov
ncdcr.gov
www.archaeology.ncdcr.gov
ncdcr.gov
files.nc.gov
hpo.ncdcr.gov
files.nc.gov
roanokeisland.com
files.nc.gov
files.nc.gov
files.nc.gov
roanokeisland.com
files.nc.gov
files.nc.gov
ncdcr.gov
www.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.museumofthecapefear.ncdcr.gov
www.aplus-schools.ncdcr.gov
roanokeisland.com
files.nc.gov
files.nc.gov
hpo.ncdcr.gov
statelibrary2.ncdcr.gov
files.nc.gov
Ead.archives.ncdcr.gov
capitalareavisitorservices.ncdcr.gov
files.nc.gov
files.nc.gov
ncdcr.gov
files.nc.gov
files.nc.gov
roanokeisland.com
files.nc.gov
www.museumofthecapefear.ncdcr.gov
files.nc.gov
dncr.nc.gov
www.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
www.ncsbe.gov
Ead.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
files.nc.gov
Ead.archives.ncdcr.gov
capitalareavisitorservices.ncdcr.gov
files.nc.gov
www.museumofthecapefear.ncdcr.gov
www.ncsbe.gov
roanokeisland.com
www.archaeology.ncdcr.gov
files.nc.gov
dncr.nc.gov
www.aplus-schools.ncdcr.gov
ncdcr.gov
files.nc.gov
roanokeisland.com
ncdcr.gov
www.aplus-schools.ncdcr.gov
ncdcr.gov
ncdcr.gov
capitalareavisitorservices.ncdcr.gov
www.archaeology.ncdcr.gov
www.aplus-schools.ncdcr.gov
files.nc.gov
www.archaeology.ncdcr.gov
archaeology.ncdcr.gov
digital.ncdcr.gov
www.archives.ncdcr.gov
www.ncdcr.gov
Ead.archives.ncdcr.gov
files.nc.gov
files.nc.gov
ncdcr.gov
www.aplus-schools.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
files.nc.gov
ncdcr.gov
files.nc.gov
www.museumofthecapefear.ncdcr.gov
capitalareavisitorservices.ncdcr.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
www.archives.ncdcr.gov
files.nc.gov
www.archives.ncdcr.gov
files.nc.gov
www.archaeology.ncdcr.gov
ncdcr.gov
www.archaeology.ncdcr.gov
ncdcr.gov
files.nc.gov
hpo.ncdcr.gov
files.nc.gov
roanokeisland.com
files.nc.gov
files.nc.gov
files.nc.gov
roanokeisland.com
files.nc.gov
files.nc.gov
ncdcr.gov
www.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.museumofthecapefear.ncdcr.gov
www.aplus-schools.ncdcr.gov
roanokeisland.com
files.nc.gov
files.nc.gov
hpo.ncdcr.gov
statelibrary2.ncdcr.gov
files.nc.gov
Ead.archives.ncdcr.gov
capitalareavisitorservices.ncdcr.gov
files.nc.gov
files.nc.gov
ncdcr.gov
files.nc.gov
files.nc.gov
roanokeisland.com
files.nc.gov
www.museumofthecapefear.ncdcr.gov
files.nc.gov
dncr.nc.gov
www.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
www.ncsbe.gov
Ead.archives.ncdcr.gov
files.nc.gov
files.nc.gov
files.nc.gov
www.archaeology.ncdcr.gov
files.nc.gov
Ead.archives.ncdcr.gov
capitalareavisitorservices.ncdcr.gov
files.nc.gov
www.museumofthecapefear.ncdcr.gov
www.ncsbe.gov
roanokeisland.com
www.archaeology.ncdcr.gov
files.nc.gov
dncr.nc.gov
www.aplus-schools.ncdcr.gov
ncdcr.gov
files.nc.gov
roanokeisland.com
ncdcr.gov
www.aplus-schools.ncdcr.gov
ncdcr.gov
ncdcr.gov
capitalareavisitorservices.ncdcr.gov
www.archaeology.ncdcr.gov
www.aplus-schools.ncdcr.gov
files.nc.gov
www.archaeology.ncdcr.gov
archaeology.ncdcr.gov
digital.ncdcr.gov
www.archives.ncdcr.gov
www.ncdcr.gov
Ead.archives.ncdcr.gov
files.nc.gov
files.nc.gov
ncdcr.gov
www.aplus-schools.ncdcr.gov
files.nc.gov
Certificate
The complete raw certificate details for ncdcr.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISBKDw7Expw7OJrmN88SNK7qadMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTMwMzI5NTlaFw0y MDAyMTEwMzI5NTlaMBQxEjAQBgNVBAMTCW5jZGNyLmdvdjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMUM89MNeeESWHGTVENyFMfDc/7bOMpGBmamHfFG ieUDoCcEN8ehbn0ZGAlS1Z+0m9bXHDEklS6+D5NWKcg+vNOc3EBdJNZEOFQQhwei O8JXC9qSohR2t2UdTbLtBnaRd9ZW4MBcmzsWwYuOnvGQ+KK6Tuh+Rn9A97brJdvD hCQUmpn0Xqa2U/+uuvE5xhMAHQQ6rHU9A4WMBYLV4JB8M0JqI44yFdwv5HS19T1T RiNyv4BrfHpb/NRmAFdSUWKUaBKBYANxtjBNx8mU9IyAVSTjO8s6dpY3nRjRJhk0 Jg90akPn2ZVvf70gGsAse4XQI0JgX6aFXFgoACrCq6NzuO8CAwEAAaOCAq4wggKq MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUzsfhwB9qo55MqX2bBp6j/CdxRIYwHwYD VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzBj BgNVHREEXDBaggtkbmNyLm5jLmdvdoINbmNjdWx0dXJlLmNvbYINbmNjdWx0dXJl Lm9yZ4IJbmNkY3IuZ292gg93d3cuZG5jci5uYy5nb3aCEXd3dy5uY2N1bHR1cmUu Y29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIE AgSB9gSB8wDxAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFu YwZ8DAAABAMARzBFAiBhyl4wi44bkqRQv52qQX+tYD0uJfp6praX01d4vMpeJwIh APUipkOruDbwCGWmJxdb4xeOYUC5LLwO1BXKBz+ZX3FwAHcAB7dcG+V9aP/xsMYd IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFuYwZ8LAAABAMASDBGAiEArD6Mm09BWIhB Elan0fTk9bnS01fK7EzxnoU/3T9YyxMCIQDTzibdGaaTZ+KW2hMIYM5RCj+Cxx/1 nv2lSxFVeQnvjTANBgkqhkiG9w0BAQsFAAOCAQEAexCRUq1Rz9nJ9W1ruJC+zkjC kNOAyMwGiB6uRydfr3B6j+bUMFtt8WmwBS3/cgywz9gj/zs9FVh8m8rHDkVJsCmI ukt5pugJBXs48duM/PNOcPdKp+zPSZORMdg7dIlXLsyAGEFXtZNyTKtFjQ+UBkeL SB7bLilVQxP0HFeCLwlfnAhvflSNV3qQspvd20g0SzWTDJ5h4ZaMK9T8/LSORr4E S5L2nHWj0fehYbI9HkkvFKyoM007syK7Y+ar0mIihhMHTsYae4wqQ6wHAAPK7ULX 9Mx8SQQc/0yKr7EZLxeLFGdWB32syt8+LBSvtdeh39qLI4TR+MbobGxN4K69JQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQzz0w154RJYcZNUQ3IU x8Nz/ts4ykYGZqYd8UaJ5QOgJwQ3x6FufRkYCVLVn7Sb1tccMSSVLr4Pk1YpyD68 05zcQF0k1kQ4VBCHB6I7wlcL2pKiFHa3ZR1Nsu0GdpF31lbgwFybOxbBi46e8ZD4 orpO6H5Gf0D3tusl28OEJBSamfReprZT/6668TnGEwAdBDqsdT0DhYwFgtXgkHwz QmojjjIV3C/kdLX1PVNGI3K/gGt8elv81GYAV1JRYpRoEoFgA3G2ME3HyZT0jIBV JOM7yzp2ljedGNEmGTQmD3RqQ+fZlW9/vSAawCx7hdAjQmBfpoVcWCgAKsKro3O4 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 403214564085280788335795473556958964786845 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 03:29:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 03:29:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ncdcr.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24875333164112172849816578051134914957954841558996778197051349354813358503220973367837335138806089316519193838040491515068921112906878138755794513224278000706372542991748099125942655891195316065254131730039471164252323551839961073096353746069848846886239477724058955735530926541022772783458615498066061998450340811923662596994863632185396447009012002465792696347993479350613264547377633128657513527864081229609400560813755404720866548804017387570093581342499082242364087360548025852814457455682006172952996448349233792195202956006170098808551140880950921883415256993564819181383198040132960172842568352082292754331887 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cec7e1c01f6aa39e4ca97d9b069ea3fc27714486 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dncr.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncculture.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncdcr.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dncr.nc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncculture.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e63067c0c0000040300473045022061ca5e308b8e1b92a450bf9daa417fad603d2e25fa7aa6b697d35778bcca5e27022100f522a643abb836f00865a627175be3178e6140b92cbc0ed415ca073f995f717000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e63067c2c0000040300483046022100ac3e8c9b4f415888411256a7d1f4e4f5b9d2d357caec4cf19e853fdd3f58cb13022100d3ce26dd19a69367e296da130860ce510a3f82c71ff59efda54b11557909ef8d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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