172-220-186-061.res.spectrum.com
Issued by R3
About this certificate
This digital certificate with serial number 04:91:4a:97:68:bb:86:7d:cf:ae:2d:0c:a7:de:68:e5:bc:09 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=172-220-186-061.res.spectrum.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:91:4a:97:68:bb:86:7d:cf:ae:2d:0c:a7:de:68:e5:bc:09Serial Number (int): 397889235963318674579979214780353441283081
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 11:c5:df:4f:82:69:6e:9d:8c:e5:a1:30:eb:e1:ca:15:d9:ab:0d:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 1b:a9:1e:d3:32:42:33:01:d5:02:c0:67:b8:23:d2:eb:8f:ad:da:9c
Fingerprint (sha256): 09:20:ac:a5:82:bd:11:84:50:3c:27:ca:62:01:6c:16:df:af:53:38:cd:81:75:66:73:dd:74:f4:a9:c9:a6:b6
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 172-220-186-061.res.spectrum.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 172-220-186-061.res.spectrum.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
172-220-186-061.res.spectrum.com
Other certificates including the domain name spectrum.com
(limited to 100 certificates)
172-220-186-061.res.spectrum.com
images.enterprise.spectrum.com
075-135-205-231.res.spectrum.com
clt.shaken.spectrum.com
szervizek.carglass.hu
newsroom.spectrum.com
spectrumenterprise.com
035-130-104-239.res.spectrum.com
improvements.spectrum.com
173-042-002-021.biz.spectrum.com
mail.pelletron.com
047-049-040-002.biz.spectrum.com
chtr-cos-icoms1t.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
plans.spectrum.com
notices.spectrum.com
050-089-217-187.res.spectrum.com
reportspam.spectrum.com
096-035-155-045.biz.spectrum.com
*.email.spectrum.com
sanalytics.enterprise.spectrum.com
buy.spectrummobile.com
jobs.spectrum.com
174-045-022-013.res.spectrum.com
mail.pelletron.com
spectrumtvchoice.com
responsibility.spectrum.com
174-045-013-188.res.spectrum.com
embed-answers.cority.com.pagescdn.com
050-091-130-043.res.spectrum.com
plans.spectrum.com
newsroom.spectrum.com
spectrumtvchoice.com
notices-wg.spectrum.com
newsroom.spectrum.com
*.plans.spectrum.com
stores.spectrum.com
communityimpact.spectrum.com
172-220-186-061.res.spectrum.com
mail.pelletron.com
096-033-089-086.res.spectrum.com
espanol.charter.com
047-049-040-002.biz.spectrum.com
app.enterprise.spectrum.com
068-190-112-250.res.spectrum.com
jobs.spectrum.com
024-231-231-058.biz.spectrum.com
jobs.marugame-seimen.com
commn.spectrum.com
wireless-provisioning.den.ims.spectrum.com
spectrumenterprise.com
aus.shaken.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
050-088-060-101.res.spectrum.com
076-053-027-154.inf.spectrum.com
espanol.charter.com
174-086-051-040.res.spectrum.com
corporate.charter.com
035-130-104-239.biz.spectrum.com
leapfrog-ssl-8.gcs-web.com
plans.spectrum.com
elqapp.spectrum.com
newsroom.spectrum.com
www.charter-retailportal.com
answers.alpinebank.com.pagescdn.com
edge-vod.spectrum.net
075-135-209-035.res.spectrum.com
communityimpact.spectrum.com
official.spectrum.com
corporate.charter.com
espanol.charter.com
improvements.spectrum.com
172-220-186-061.res.spectrum.com
web08.pushing7.com
leapfrog-ssl-8.gcs-web.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
035-130-104-239.biz.spectrum.com
mail.pelletron.com
184-167-056-046.res.spectrum.com
espanol.timewarnercable.com
commn.spectrum.com
096-040-025-044.res.spectrum.com
wireless-provisioning.den.ims.spectrum.com
jobs.spectrum.com
san4.yext-cdn.com
official.spectrum.com
den.shaken.spectrum.com
buy.spectrummobile.com
buy.spectrummobile.com
72.174.234.30
star.aiprx.spectrum.com
info.spectrum.com
channelpartners.spectrum.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
172-220-186-061.res.spectrum.com
addapp-enterprise.aiprx.spectrum.com
images.enterprise.spectrum.com
075-135-205-231.res.spectrum.com
clt.shaken.spectrum.com
szervizek.carglass.hu
newsroom.spectrum.com
spectrumenterprise.com
035-130-104-239.res.spectrum.com
improvements.spectrum.com
173-042-002-021.biz.spectrum.com
mail.pelletron.com
047-049-040-002.biz.spectrum.com
chtr-cos-icoms1t.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
plans.spectrum.com
notices.spectrum.com
050-089-217-187.res.spectrum.com
reportspam.spectrum.com
096-035-155-045.biz.spectrum.com
*.email.spectrum.com
sanalytics.enterprise.spectrum.com
buy.spectrummobile.com
jobs.spectrum.com
174-045-022-013.res.spectrum.com
mail.pelletron.com
spectrumtvchoice.com
responsibility.spectrum.com
174-045-013-188.res.spectrum.com
embed-answers.cority.com.pagescdn.com
050-091-130-043.res.spectrum.com
plans.spectrum.com
newsroom.spectrum.com
spectrumtvchoice.com
notices-wg.spectrum.com
newsroom.spectrum.com
*.plans.spectrum.com
stores.spectrum.com
communityimpact.spectrum.com
172-220-186-061.res.spectrum.com
mail.pelletron.com
096-033-089-086.res.spectrum.com
espanol.charter.com
047-049-040-002.biz.spectrum.com
app.enterprise.spectrum.com
068-190-112-250.res.spectrum.com
jobs.spectrum.com
024-231-231-058.biz.spectrum.com
jobs.marugame-seimen.com
commn.spectrum.com
wireless-provisioning.den.ims.spectrum.com
spectrumenterprise.com
aus.shaken.spectrum.com
clrp.spectrum.com
173-042-002-021.biz.spectrum.com
050-088-060-101.res.spectrum.com
076-053-027-154.inf.spectrum.com
espanol.charter.com
174-086-051-040.res.spectrum.com
corporate.charter.com
035-130-104-239.biz.spectrum.com
leapfrog-ssl-8.gcs-web.com
plans.spectrum.com
elqapp.spectrum.com
newsroom.spectrum.com
www.charter-retailportal.com
answers.alpinebank.com.pagescdn.com
edge-vod.spectrum.net
075-135-209-035.res.spectrum.com
communityimpact.spectrum.com
official.spectrum.com
corporate.charter.com
espanol.charter.com
improvements.spectrum.com
172-220-186-061.res.spectrum.com
web08.pushing7.com
leapfrog-ssl-8.gcs-web.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
035-130-104-239.biz.spectrum.com
mail.pelletron.com
184-167-056-046.res.spectrum.com
espanol.timewarnercable.com
commn.spectrum.com
096-040-025-044.res.spectrum.com
wireless-provisioning.den.ims.spectrum.com
jobs.spectrum.com
san4.yext-cdn.com
official.spectrum.com
den.shaken.spectrum.com
buy.spectrummobile.com
buy.spectrummobile.com
72.174.234.30
star.aiprx.spectrum.com
info.spectrum.com
channelpartners.spectrum.com
spectrumtvchoice.com
173-042-002-021.biz.spectrum.com
172-220-186-061.res.spectrum.com
addapp-enterprise.aiprx.spectrum.com
Certificate
The complete raw certificate details for 172-220-186-061.res.spectrum.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEUzCCAzugAwIBAgISBJFKl2i7hn3Pri0Mp95o5bwJMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA3MDkwNjA3NDBaFw0yMjEwMDcwNjA3MzlaMCsxKTAnBgNVBAMT IDE3Mi0yMjAtMTg2LTA2MS5yZXMuc3BlY3RydW0uY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAsPKgDi1ckONPD8m6R3pyS4agIp2LnYOEssQuQ2x/ MtzdwiaTNuSvcMz/kOKAVz6SDsJTgD6Ec3XzDKAYlA48LrMOFS4uRyQ2rejy8Gg6 2Z8JfDGFjR+mX5mTlp0OC9a/Ycn7RhimoGiqNuJtO6VYhybSzjDWvpFEXak5GqNn 8LavdBb0cHznH4r5XJBQJiCegbdHIIrBLpVa+lyW/Yddnd8fNHxELP1oMUWDtq3x c+4mQJRbkmJb9uaLenqvDb8ZGHll7NxemBLZF7e2VINeD7BFRxVPd2O8V1NZ+iJ/ hZB2UzzflvXXifd/SuZNbnavySqG/PL1JNvQ6rrfV/UL4wIDAQABo4IBaDCCAWQw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQRxd9PgmlunYzloTDr4coV2asNVzAfBgNV HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0 cDovL3IzLmkubGVuY3Iub3JnLzArBgNVHREEJDAigiAxNzItMjIwLTE4Ni0wNjEu cmVzLnNwZWN0cnVtLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKZUNawmYdbU O6dz1/ulXW5GDdgj3HA4oJfLHCw99BGjWpPGWOJnQjLXCbXI4sxzvJTIs5f51BM2 /6M+ulLDaOU4XrJ5UwFYWqK0gnwtb3y2oljUGR2ZHl/Y4rJw//xGnJNKX1dvGQgt jjYXEIKt0r/HL62yKofccq/XYa2p8Ouk+wTvk7OuYgXu/QF72+pXWp9FeZ1z+67n PI8Ot9hmtSlOaSgTreINDgBpJmn5Ewl6nbTepKUKQZsjcFtpzgVxXoNQ0O9L4C6n CQ8L7a8ClG04zrjQfeSMk+RL3KCt5kTdjaqOpPdBWKkvWFaAiEzfl7iZkt81RUsJ QdsPhSF7qA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPKgDi1ckONPD8m6R3py S4agIp2LnYOEssQuQ2x/MtzdwiaTNuSvcMz/kOKAVz6SDsJTgD6Ec3XzDKAYlA48 LrMOFS4uRyQ2rejy8Gg62Z8JfDGFjR+mX5mTlp0OC9a/Ycn7RhimoGiqNuJtO6VY hybSzjDWvpFEXak5GqNn8LavdBb0cHznH4r5XJBQJiCegbdHIIrBLpVa+lyW/Ydd nd8fNHxELP1oMUWDtq3xc+4mQJRbkmJb9uaLenqvDb8ZGHll7NxemBLZF7e2VINe D7BFRxVPd2O8V1NZ+iJ/hZB2UzzflvXXifd/SuZNbnavySqG/PL1JNvQ6rrfV/UL 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 397889235963318674579979214780353441283081 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-09 06:07:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-07 06:07:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '172-220-186-061.res.spectrum.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22337584627351003239782158458838761580471719585214142018832967322731353891127406863508407676680873955787709261288508306703444206944618203805906067050502433447619127678684832499775763019329718880619337493374058820664273126245371052681995694633715230250069938534850810581573489172501631983395822779637051310539445902079590230140697334966549330103042238736044167440308695664510665317091954458661994966852660075245432340865528934651121258960566846825267898317146347387843973680248511716742471479935874335899299725431064097458745816437914216297667503806014366691245738808339905039488878617821587373538289434159881739635683 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 11c5df4f82696e9d8ce5a130ebe1ca15d9ab0d57 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '172-220-186-061.res.spectrum.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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