www.nuffield.qanext.fridayengineering.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:09:70:f9:31:12:18:94:b6:1f:5c:26:aa:02:46:f4:25:df was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.nuffield.qanext.fridayengineering.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:09:70:f9:31:12:18:94:b6:1f:5c:26:aa:02:46:f4:25:dfSerial Number (int): 264549566510286656786381613685875416507871
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cf:a7:46:13:b8:c0:67:12:05:7e:93:70:21:c2:74:0a:c8:10:f1:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 31:59:75:01:4c:55:6b:14:ca:76:04:2f:4a:a6:ed:eb:5f:d6:1b:5a
Fingerprint (sha256): 0a:e8:ce:c6:93:6b:e3:5c:7d:e7:72:29:3a:87:28:a9:7d:ea:57:90:2e:50:1d:5a:a8:b9:d2:82:08:76:18:1a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate www.nuffield.qanext.fridayengineering.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.nuffield.qanext.fridayengineering.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.nuffield.qanext.fridayengineering.net
Other certificates including the domain name fridayengineering.net
(limited to 100 certificates)
www.nuffield.demo.fridayengineering.net
ssl377569.cloudflaressl.com
www.nuffield.ci.fridayengineering.net
sni147912.cloudflaressl.com
cms.nuffield.hospitalevents-qa.fridayengineering.net
ssl377567.cloudflaressl.com
puppet.tools.fridayengineering.net
payments.nuffield.qanext.fridayengineering.net
gympass.nuffield.qa.fridayengineering.net
clientreporting.fridayengineering.net
xmobile-hsbc.demo.fridayengineering.net
cms.nuffield.ops.fridayengineering.net
uicentre-mvp.testing.fridayengineering.net
tablet.nuffield.qa.fridayengineering.net
ssl377568.cloudflaressl.com
book.nuffield.uat.fridayengineering.net
payments.nuffield.uat.fridayengineering.net
ssl377567.cloudflaressl.com
ssl377569.cloudflaressl.com
nl.cmb.tealium.qa.fridayengineering.net
docker.tools.fridayengineering.net
payments.nuffield.devnext.fridayengineering.net
sni10404.cloudflaressl.com
prospects-nuffield-gyms-ci.fridayengineering.net
ssl377567.cloudflaressl.com
sni147912.cloudflaressl.com
ssl377567.cloudflaressl.com
fr.privatebank.testing.fridayengineering.net
qa.aetna.webstubs.tools.fridayengineering.net
fridaywebsite.dev.fridayengineering.net
www.nuffield.dev.fridayengineering.net
ssl377568.cloudflaressl.com
ssl377568.cloudflaressl.com
ssl377568.cloudflaressl.com
www.vhealth.aetna.dev.fridayengineering.net
ssl514287.cloudflaressl.com
gympass.nuffield.uat.fridayengineering.net
book.nuffield.dev.fridayengineering.net
ssl377569.cloudflaressl.com
physio-booking.nuffield.uat.fridayengineering.net
api-a-hsbc.staging.fridayengineering.net
book.nuffield.qanext.fridayengineering.net
web1.cmbpws.81.qa.fridayengineering.net
fridaywebsite.uat.fridayengineering.net
ssl514288.cloudflaressl.com
cms.nuffield.testing.fridayengineering.net
ssl377567.cloudflaressl.com
www.nuffield.qanext.fridayengineering.net
www.masthaven.testing.fridayengineering.net
library-a-hsbc.demo.fridayengineering.net
de.privatebank.testing.fridayengineering.net
cms.nuffield.dev.fridayengineering.net
love-staging.redcross.org.uk
library-a-hsbc.staging.fridayengineering.net
octopus.tools.fridayengineering.net
ssl377569.cloudflaressl.com
dashboard-a-hsbc.testing.fridayengineering.net
webstubs.tools.fridayengineering.net
ssl377569.cloudflaressl.com
physio-booking.nuffield.uat.fridayengineering.net
collector-a-hsbc.testing.fridayengineering.net
ssl377569.cloudflaressl.com
auth.masthaven.ci.fridayengineering.net
collector-a-hsbc.staging.fridayengineering.net
payments.nuffield.uat.fridayengineering.net
dashboard-a-hsbc.staging.fridayengineering.net
ssl377569.cloudflaressl.com
network.cmbpws.hsbc.testing.fridayengineering.net
ssl377568.cloudflaressl.com
www.nuffield.classbooking-dev.fridayengineering.net
de.privatebank.ci.fridayengineering.net
authoring.rcslt.uat.fridayengineering.net
sni10404.cloudflaressl.com
serverless.fridayengineering.net
ssl377567.cloudflaressl.com
cg2015-gc-hsbc.demo.fridayengineering.net
authoring.rcslt.uat.fridayengineering.net
*.wearefriday.com
book.nuffield.devnext.fridayengineering.net
ssl377569.cloudflaressl.com
spectre.tools.fridayengineering.net
fr.privatebank.testing.fridayengineering.net
www.masthaven.prototype.fridayengineering.net
ssl377567.cloudflaressl.com
acl-a-hsbc.demo.fridayengineering.net
git.wearefriday.com
gympass.nuffield.dev.fridayengineering.net
www.nuffield.uat.fridayengineering.net
fridaywebsite.dev.fridayengineering.net
id-a-hsbc.staging.fridayengineering.net
cms.nuffield.qanext.fridayengineering.net
authoring.rcslt.uat.fridayengineering.net
sni10404.cloudflaressl.com
sni10404.cloudflaressl.com
octopus.tools.fridayengineering.net
uicentre-admin-dce-hsbc-testing.fridayengineering.net
ssl377569.cloudflaressl.com
fr.privatebank.testing.fridayengineering.net
webstubs.tools.fridayengineering.net
www.nuffield.aws.fridayengineering.net
ssl377569.cloudflaressl.com
www.nuffield.ci.fridayengineering.net
sni147912.cloudflaressl.com
cms.nuffield.hospitalevents-qa.fridayengineering.net
ssl377567.cloudflaressl.com
puppet.tools.fridayengineering.net
payments.nuffield.qanext.fridayengineering.net
gympass.nuffield.qa.fridayengineering.net
clientreporting.fridayengineering.net
xmobile-hsbc.demo.fridayengineering.net
cms.nuffield.ops.fridayengineering.net
uicentre-mvp.testing.fridayengineering.net
tablet.nuffield.qa.fridayengineering.net
ssl377568.cloudflaressl.com
book.nuffield.uat.fridayengineering.net
payments.nuffield.uat.fridayengineering.net
ssl377567.cloudflaressl.com
ssl377569.cloudflaressl.com
nl.cmb.tealium.qa.fridayengineering.net
docker.tools.fridayengineering.net
payments.nuffield.devnext.fridayengineering.net
sni10404.cloudflaressl.com
prospects-nuffield-gyms-ci.fridayengineering.net
ssl377567.cloudflaressl.com
sni147912.cloudflaressl.com
ssl377567.cloudflaressl.com
fr.privatebank.testing.fridayengineering.net
qa.aetna.webstubs.tools.fridayengineering.net
fridaywebsite.dev.fridayengineering.net
www.nuffield.dev.fridayengineering.net
ssl377568.cloudflaressl.com
ssl377568.cloudflaressl.com
ssl377568.cloudflaressl.com
www.vhealth.aetna.dev.fridayengineering.net
ssl514287.cloudflaressl.com
gympass.nuffield.uat.fridayengineering.net
book.nuffield.dev.fridayengineering.net
ssl377569.cloudflaressl.com
physio-booking.nuffield.uat.fridayengineering.net
api-a-hsbc.staging.fridayengineering.net
book.nuffield.qanext.fridayengineering.net
web1.cmbpws.81.qa.fridayengineering.net
fridaywebsite.uat.fridayengineering.net
ssl514288.cloudflaressl.com
cms.nuffield.testing.fridayengineering.net
ssl377567.cloudflaressl.com
www.nuffield.qanext.fridayengineering.net
www.masthaven.testing.fridayengineering.net
library-a-hsbc.demo.fridayengineering.net
de.privatebank.testing.fridayengineering.net
cms.nuffield.dev.fridayengineering.net
love-staging.redcross.org.uk
library-a-hsbc.staging.fridayengineering.net
octopus.tools.fridayengineering.net
ssl377569.cloudflaressl.com
dashboard-a-hsbc.testing.fridayengineering.net
webstubs.tools.fridayengineering.net
ssl377569.cloudflaressl.com
physio-booking.nuffield.uat.fridayengineering.net
collector-a-hsbc.testing.fridayengineering.net
ssl377569.cloudflaressl.com
auth.masthaven.ci.fridayengineering.net
collector-a-hsbc.staging.fridayengineering.net
payments.nuffield.uat.fridayengineering.net
dashboard-a-hsbc.staging.fridayengineering.net
ssl377569.cloudflaressl.com
network.cmbpws.hsbc.testing.fridayengineering.net
ssl377568.cloudflaressl.com
www.nuffield.classbooking-dev.fridayengineering.net
de.privatebank.ci.fridayengineering.net
authoring.rcslt.uat.fridayengineering.net
sni10404.cloudflaressl.com
serverless.fridayengineering.net
ssl377567.cloudflaressl.com
cg2015-gc-hsbc.demo.fridayengineering.net
authoring.rcslt.uat.fridayengineering.net
*.wearefriday.com
book.nuffield.devnext.fridayengineering.net
ssl377569.cloudflaressl.com
spectre.tools.fridayengineering.net
fr.privatebank.testing.fridayengineering.net
www.masthaven.prototype.fridayengineering.net
ssl377567.cloudflaressl.com
acl-a-hsbc.demo.fridayengineering.net
git.wearefriday.com
gympass.nuffield.dev.fridayengineering.net
www.nuffield.uat.fridayengineering.net
fridaywebsite.dev.fridayengineering.net
id-a-hsbc.staging.fridayengineering.net
cms.nuffield.qanext.fridayengineering.net
authoring.rcslt.uat.fridayengineering.net
sni10404.cloudflaressl.com
sni10404.cloudflaressl.com
octopus.tools.fridayengineering.net
uicentre-admin-dce-hsbc-testing.fridayengineering.net
ssl377569.cloudflaressl.com
fr.privatebank.testing.fridayengineering.net
webstubs.tools.fridayengineering.net
www.nuffield.aws.fridayengineering.net
Certificate
The complete raw certificate details for www.nuffield.qanext.fridayengineering.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgISAwlw+TESGJS2H1wmqgJG9CXfMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA4MTYwMjQ1MDBaFw0x NjExMTQwMjQ1MDBaMDQxMjAwBgNVBAMTKXd3dy5udWZmaWVsZC5xYW5leHQuZnJp ZGF5ZW5naW5lZXJpbmcubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAsIqZARaQXQjgE/5XYPKCNUVQD7a224t1hto21LBc2UG7XMDYwfLcUZZqZZwU 0gvLZVY5ZSNeFNFmlXbuWKwqPsDc2XYhk9tFR4MbpRrr0RX06cxNM5U+O7tr/SWg VOJVRm0rFQvtbEOF5tg94iD1HugwYCRedueOSh4D9MqENANQMDdYZbppi9lCbsnM UTo1uvf/Bj6T77ONJR5Mq5STbBsek9XWPJmxuc6ysmLW4+UyAtRC2iCU9V50Gtqy rviIRC0/mhlPOCPwURKmG442LswpcpgEajoRBJYfftat1j7Dof33Xb3urHxeo6yr Et/FQgzqWT5OPdyes/4jA6+WEBTogbSRkvatGUqY5zsLvUudRCd0ZPAXv9qCMNed 4tuh8Y3aJMth6KEbWMyqe0Ux0nSGeNaiw4UASLqs8iY2M20Tn1GUI7Zm2TuStge0 izbnFj8Kp/SD91Nc7kRZmhl59JQdR6vdNkenRxtRheL0qCtJAIlSUiaSlRWEw3si wUTNS4vlIiOj/b0AfZWZqzNt82aWBS9uU23pHRI4nfylB+laVPRWnmELjHWEjFOF 12DH8+fM62HPpGrTt+thJUIGeOP1E8lupT5CIrmzNTFThXIeY5Bczo9GiYq6V5hs ZlrURHMJw2AfoeCpjL9rP2VAPHszr8tRwGd8WBD+6LLlJuECAwEAAaOCAiowggIm MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUz6dGE7jAZxIFfpNwIcJ0CsgQ8RYwHwYD VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8G CCsGAQUFBzABhiNodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w NAYDVR0RBC0wK4Ipd3d3Lm51ZmZpZWxkLnFhbmV4dC5mcmlkYXllbmdpbmVlcmlu Zy5uZXQwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHW MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYB BQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1 cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdp dGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNl bmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAloSegByJ qrVG0llZLTwTxLwODZ2xBOjWinErj6jyQ8hfOKlsegcSQNdfOhTiXq96LAseXsRF 9Es59LugnANVte5Xl3yacQEyXsyBpltV9Rhzzukoo5dto27at4qiQAHLqXl6i0Fo ahJh4TbtOZxwBx2AoyG4/EHOrfcwk8vXLhr4iY29UlEybD8PPn/Ay8nuNv2547tK tpM6HjTmjeQq4jv3fdylzHkvxGMKN8kGpRcFcsf61HMQztsSnoRIyTu2FyILUY7h Mgf4Te5fmX5h2t8djre1tgncBFFHlK/1dtb1ulAGHnSmLfy59RTBJJAXsLnqWHxO rmFGf9cjQsAojw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsIqZARaQXQjgE/5XYPKC NUVQD7a224t1hto21LBc2UG7XMDYwfLcUZZqZZwU0gvLZVY5ZSNeFNFmlXbuWKwq PsDc2XYhk9tFR4MbpRrr0RX06cxNM5U+O7tr/SWgVOJVRm0rFQvtbEOF5tg94iD1 HugwYCRedueOSh4D9MqENANQMDdYZbppi9lCbsnMUTo1uvf/Bj6T77ONJR5Mq5ST bBsek9XWPJmxuc6ysmLW4+UyAtRC2iCU9V50GtqyrviIRC0/mhlPOCPwURKmG442 LswpcpgEajoRBJYfftat1j7Dof33Xb3urHxeo6yrEt/FQgzqWT5OPdyes/4jA6+W EBTogbSRkvatGUqY5zsLvUudRCd0ZPAXv9qCMNed4tuh8Y3aJMth6KEbWMyqe0Ux 0nSGeNaiw4UASLqs8iY2M20Tn1GUI7Zm2TuStge0izbnFj8Kp/SD91Nc7kRZmhl5 9JQdR6vdNkenRxtRheL0qCtJAIlSUiaSlRWEw3siwUTNS4vlIiOj/b0AfZWZqzNt 82aWBS9uU23pHRI4nfylB+laVPRWnmELjHWEjFOF12DH8+fM62HPpGrTt+thJUIG eOP1E8lupT5CIrmzNTFThXIeY5Bczo9GiYq6V5hsZlrURHMJw2AfoeCpjL9rP2VA PHszr8tRwGd8WBD+6LLlJuECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 264549566510286656786381613685875416507871 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-16 02:45:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-14 02:45:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nuffield.qanext.fridayengineering.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720226063682085338839716234685633668699743104024817309417129828982317341723928426173341616308789638901182439434423845050248524323674828328118888359542327166363564614931634724479591587733886585055960995238006423637443421874528370094853329079989476189559769438204812816360730974704835937705720307344988471792294912289107303295489887811597566634013749835274188611459021743986779975460316936533652318528724631372218867649663386424683947418509594142542723252417647263516018749167672215954577216457461557902431949633069703465455310826030318057605179172717197509808403780478577606074952107695860238879020496271162508751733913746951895096471264964588961070325600214037634701415543824288447461182890125711872344576223216973013636605271242609021366087077211924397929155204657155081643343242356037433815938536548475506765036063793649602123999633875001763105943064218204919081976786739786845999993917826417743659291358279260733223894231635538547905736808994089381106861945800904632985497961269135968838082271101504487227530707651438663004582683824384377167631319678308201954736763888718991898937567940139743850103643624822873602689383148157062121615357035580652581288440622635714399535331071712170331589271900666061001157687508505295799372293857 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cfa74613b8c06712057e937021c2740ac810f116 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuffield.qanext.fridayengineering.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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