qa.cube.ubuntu.com
Issued by R3
About this certificate
This digital certificate with serial number 03:bc:cf:28:95:b0:6a:55:7b:32:6c:4a:e9:50:b3:36:50:e6 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=qa.cube.ubuntu.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bc:cf:28:95:b0:6a:55:7b:32:6c:4a:e9:50:b3:36:50:e6Serial Number (int): 325585303699475086347908718293959488983270
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d1:75:e3:33:02:c2:78:4c:29:95:dd:c3:65:3a:61:e5:9c:10:b0:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 14:3b:af:81:4b:42:c4:10:51:fe:fe:2c:f7:d3:19:78:83:79:1f:09
Fingerprint (sha256): 08:9a:74:b3:ca:3a:ce:88:59:a1:98:43:58:4e:b8:e1:d3:2d:5f:1e:c9:2c:b6:5f:58:75:fa:fd:5c:a2:92:59
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate qa.cube.ubuntu.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qa.cube.ubuntu.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
qa-cms.cube.ubuntu.com
qa.cube.ubuntu.com
qa.cube.ubuntu.com
Other certificates including the domain name ubuntu.com
(limited to 100 certificates)
changelogs.ubuntu.com
old-releases.ubuntu.com
usshop.ubuntu.com
lists.ubuntu.com
facebook-apps.ubuntu.com
people.ubuntu.com
buy.ubuntu.com
connectivity-check.ubuntu.com
search.apps.staging.ubuntu.com
maas.ubuntu.com
tour.ubuntu.com
myapps.developer.ubuntu.com
api.staging.snapcraft.io
manager.assets.staging.ubuntu.com
auth.esm.staging.ubuntu.com
design.ubuntu.com
jp.ubuntu.com
start.ubuntu.com
jp.staging.ubuntu.com
staging.ubuntu.com
docs.ubuntu.com
fridge.ubuntu.com
hr.archive.ubuntu.com
upload.apps.staging.ubuntu.com
assets.ubuntu.com
daisy.staging.ubuntu.com
webstats.ubuntu.com
juju.ubuntu.com
old-releases.ubuntu.com
certification.staging.ubuntu.com
assets.ubuntu.com
daisy.ubuntu.com
*.ubuntu.com
phone.docs.ubuntu.com
cn.ubuntu.com
assertions.ubuntu.com
docs.ubuntu.com
redirect.ubuntuforums.org
code-review.phablet.ubuntu.com
ask.ubuntu.com
discourse.ubuntu.com
upload.apps.staging.ubuntu.com
design.staging.ubuntu.com
keyserver.ubuntu.com
insights.ubuntu.com
ubuntu.grad.hr
developer.ubuntu.com
cloud-images.ubuntu.com
phone.docs.ubuntu.com
lists.ubuntu.com
jp.ubuntu.com
help.ubuntu.com
buy.ubuntu.com
merges.ubuntu.com
support.one.ubuntu.com
people.ubuntu.com
assets.ubuntu.com
*.staging.ubuntu.com
brainstorm.ubuntu.com
font.ubuntu.com
assets.ubuntu.com
pages.ubuntu.com
system-image.ubuntu.com
apps.ubuntu.com
ubuntu.com
login.staging.ubuntu.com
cdimage.ubuntu.com
certification.ubuntu.com
people.ubuntu.com
assertions.staging.ubuntu.com
fr.archive.ubuntu.com
qa.cube.ubuntu.com
releases.ubuntu.com
docs.ubuntu.com
bileto.ubuntu.com
keyserver.ubuntu.com
errors.staging.ubuntu.com
login-lp.staging.ubuntu.com
keyserver.ubuntu.com
brainstorm.ubuntu.com
kernel.ubuntu.com
hyperscale.ubuntu.com
fridge.ubuntu.com
buy.ubuntu.com
odm.ubuntu.com
start.ubuntu.com
assertions.ubuntu.com
errors.ubuntu.com
patches.ubuntu.com
discourse.ubuntu.com
daisy.ubuntu.com
support.one.ubuntu.com
certification.staging.ubuntu.com
summit.ubuntu.com
api.snapcraft.io
phone.docs.ubuntu.com
geoname-lookup.ubuntu.com
hockeypuck.ubuntu.com
start.ubuntu.com
try.cloud.staging.ubuntu.com
old-releases.ubuntu.com
usshop.ubuntu.com
lists.ubuntu.com
facebook-apps.ubuntu.com
people.ubuntu.com
buy.ubuntu.com
connectivity-check.ubuntu.com
search.apps.staging.ubuntu.com
maas.ubuntu.com
tour.ubuntu.com
myapps.developer.ubuntu.com
api.staging.snapcraft.io
manager.assets.staging.ubuntu.com
auth.esm.staging.ubuntu.com
design.ubuntu.com
jp.ubuntu.com
start.ubuntu.com
jp.staging.ubuntu.com
staging.ubuntu.com
docs.ubuntu.com
fridge.ubuntu.com
hr.archive.ubuntu.com
upload.apps.staging.ubuntu.com
assets.ubuntu.com
daisy.staging.ubuntu.com
webstats.ubuntu.com
juju.ubuntu.com
old-releases.ubuntu.com
certification.staging.ubuntu.com
assets.ubuntu.com
daisy.ubuntu.com
*.ubuntu.com
phone.docs.ubuntu.com
cn.ubuntu.com
assertions.ubuntu.com
docs.ubuntu.com
redirect.ubuntuforums.org
code-review.phablet.ubuntu.com
ask.ubuntu.com
discourse.ubuntu.com
upload.apps.staging.ubuntu.com
design.staging.ubuntu.com
keyserver.ubuntu.com
insights.ubuntu.com
ubuntu.grad.hr
developer.ubuntu.com
cloud-images.ubuntu.com
phone.docs.ubuntu.com
lists.ubuntu.com
jp.ubuntu.com
help.ubuntu.com
buy.ubuntu.com
merges.ubuntu.com
support.one.ubuntu.com
people.ubuntu.com
assets.ubuntu.com
*.staging.ubuntu.com
brainstorm.ubuntu.com
font.ubuntu.com
assets.ubuntu.com
pages.ubuntu.com
system-image.ubuntu.com
apps.ubuntu.com
ubuntu.com
login.staging.ubuntu.com
cdimage.ubuntu.com
certification.ubuntu.com
people.ubuntu.com
assertions.staging.ubuntu.com
fr.archive.ubuntu.com
qa.cube.ubuntu.com
releases.ubuntu.com
docs.ubuntu.com
bileto.ubuntu.com
keyserver.ubuntu.com
errors.staging.ubuntu.com
login-lp.staging.ubuntu.com
keyserver.ubuntu.com
brainstorm.ubuntu.com
kernel.ubuntu.com
hyperscale.ubuntu.com
fridge.ubuntu.com
buy.ubuntu.com
odm.ubuntu.com
start.ubuntu.com
assertions.ubuntu.com
errors.ubuntu.com
patches.ubuntu.com
discourse.ubuntu.com
daisy.ubuntu.com
support.one.ubuntu.com
certification.staging.ubuntu.com
summit.ubuntu.com
api.snapcraft.io
phone.docs.ubuntu.com
geoname-lookup.ubuntu.com
hockeypuck.ubuntu.com
start.ubuntu.com
try.cloud.staging.ubuntu.com
Certificate
The complete raw certificate details for qa.cube.ubuntu.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIETzCCAzegAwIBAgISA7zPKJWwalV7MmxK6VCzNlDmMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA2MDkwNzQ1MTdaFw0yMTA5MDcwNzQ1MTZaMB0xGzAZBgNVBAMT EnFhLmN1YmUudWJ1bnR1LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJ0sS+aZwGaqOtnHFHvKrZqz4WuU0N+pLFKVCpCR/feU9d5w42q011KwHaw Y63EwKajCTMrlmdKJLvA/ydd4ol4vRFUr71lWtOmyLbjQgWVoC3zRILrgoQkJav8 7n2Wnb4hbrPbbMv26ggXVCP1LcVNyJot7OMzlTevezbx9qjlF1uzXJoEwrPrw85s ce7HybMuTDPZNEQcfwnKNK2oTRTv6zmV/fMiLGsnnujsxI61KH9gYyQ9Bw1xSYZe RbyvtWc6wyi/LjZmcN212VKtdDeK1aUnH+fLgu/ODZi/HOKVwvOv5B2a08x/GwKE LV+i6V6b/miCp/O206q2ZDnHANMCAwEAAaOCAXIwggFuMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQU0XXjMwLCeEwpld3DZTph5ZwQsFcwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wNQYDVR0RBC4wLIIWcWEtY21zLmN1YmUudWJ1bnR1LmNvbYIScWEuY3Vi ZS51YnVudHUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisG AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiunowyZwyjrgjKhg2 xhN91hgkINa89RFKbVi6iPmQyV5Wu8sCs+lDIZ1MAR2VZ0b38hp0SYcR0JOd+d0j EZKJAQ5mW0S5SLURn3pPRTa+digCjX0vIjAg56P07DrYgvbQ4vEMtEU6c3xqozYC JFKzAI4O+V1KOMWnkStupLlywvD03RMBo2f7YCEcfWCojXfAgqR8ZiGafTSV1wfA t7+/zjItLOePvosnJ/eI8tvuW60trD40O9C0njmTAvsBipRn3Swa1ouhfO+m1YOM YriNGIxhcoh7VY/mZSGEjneEgYrrEVuZiuiAtkmV9sJ9gpXIlHH7YVTDeJN3UmDj +hvI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nSxL5pnAZqo62ccUe8q tmrPha5TQ36ksUpUKkJH995T13nDjarTXUrAdrBjrcTApqMJMyuWZ0oku8D/J13i iXi9EVSvvWVa06bItuNCBZWgLfNEguuChCQlq/zufZadviFus9tsy/bqCBdUI/Ut xU3Imi3s4zOVN697NvH2qOUXW7NcmgTCs+vDzmxx7sfJsy5MM9k0RBx/Cco0rahN FO/rOZX98yIsayee6OzEjrUof2BjJD0HDXFJhl5FvK+1ZzrDKL8uNmZw3bXZUq10 N4rVpScf58uC784NmL8c4pXC86/kHZrTzH8bAoQtX6LpXpv+aIKn87bTqrZkOccA 0wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325585303699475086347908718293959488983270 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-09 07:45:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-07 07:45:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.cube.ubuntu.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26567587078123645142400523514349402754975187496729953093282220130974359529082867149054715524154622556960144046778725828450819430353369548744251376316371076929881506559744128471214644022657322742733911576316711311080465142427078741092694703028159757212704351666284374670585182715694897044589910938442776807767859149332528949577400185080785767753948502768206642023461236810848279396102691508805370727156039918837656294723351418742258122168649175055074596875735888541951448610278344014471043545358858580082532000588979174165215159166804827815300792898407131143478363441505111011410588773190755949952230621762643122651347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d175e33302c2784c2995ddc3653a61e59c10b057 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cms.cube.ubuntu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.cube.ubuntu.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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