webserver.srcf.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e7:b3:f0:1c:7f:4d:69:59:9c:24:d2:21:25:2a:c2:c1:35 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=webserver.srcf.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e7:b3:f0:1c:7f:4d:69:59:9c:24:d2:21:25:2a:c2:c1:35Serial Number (int): 340181263094502476547488469728975011365173
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ac:d7:f0:e7:45:86:9d:35:de:39:33:c0:e9:fb:01:19:2e:7b:3d:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c5:0f:8b:c7:b0:ef:d3:b5:4c:20:10:08:ac:55:d1:dd:5b:85:4f:66
Fingerprint (sha256): 0b:03:77:59:8e:bb:44:23:ec:bb:fe:1b:fb:09:16:1c:c8:00:10:df:89:8a:89:73:88:c5:04:be:f5:53:76:de
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate webserver.srcf.net
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webserver.srcf.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cambridgerag.org.uk
camrag.soc.srcf.net
webserver.srcf.net
www.cambridgerag.org.uk
camrag.soc.srcf.net
webserver.srcf.net
www.cambridgerag.org.uk
Other certificates including the domain name srcf.net
(limited to 100 certificates)
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
winnie.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webmail.pip.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
seismograph.srcf.net
webserver.srcf.net
webmail.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
peterhousebc.org
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
winnie.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
status.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webmail.pip.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
manatee-gw.malc.org.uk
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
seismograph.srcf.net
webserver.srcf.net
webmail.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
peterhousebc.org
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
lists.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
webserver.srcf.net
Certificate
The complete raw certificate details for webserver.srcf.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgISA+ez8Bx/TWlZnCTSISUqwsE1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MDEwNDIxNTdaFw0x ODEwMzAwNDIxNTdaMB0xGzAZBgNVBAMTEndlYnNlcnZlci5zcmNmLm5ldDCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKLkQcxn0O7YiViq90lU2325B+vI MoqpwmV/HlxqXi+sgBxoMPlQIQyQejhd93oEediRSKft0q9tn5hZKayvl4PMjRGx nl3PmhN01wJhEiBlYl5+k7n8Vw3G9J9NpE1tuVNZsH+gU9RuAdx+vJwJ0+JcBH6H eL70B5jEmcAy77KW5uiCrTEx/AECxAzJTvZPtrGnP4d95zPYdBxh596UbFITGCuj 4Qgs4VUjMG6TqGZtmusSOqrpv5j29hd3GeQZ3xCZGxUk50OFYoMcuKeR3ZTnsKpK f61XY+6YUF+Dfnebo02gufxW2cbc7Bq91dpMjZOui2rjmFYLYITrlzjEH9ftwNuO pPreSM6MoXzHaO2a+s/QArjSCNU2mHgRozvqF/Ej6iNL0lhg9x7X7biJEguHCiyE XKeVuROHpGi9ISr1THuIQ47hJ7AoDW9x+GPZd3I18cEaCGuCLjDHUD7zwgYIYEbg rI/Glp7sW63dQ5gYCBn5YO1HedSx9iCb5tZvmmR2fT2IsZ9mi13w48tkEGCgWSU4 NTpQQsVkm8BT+PX1ClueoKK7rR0RhXdQkL1tm9uwx/IEA3S5Dx3SdwvYpOiU4aTY FJ2C+OwzsEMOQmxgy684THHvHvSNytNKRarEos9uZFeSyi+biCy0isPX/s3HzL8I CZ2IiD8fDRW4G9j9AgMBAAGjggNeMIIDWjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FKzX8OdFhp013jkzwOn7ARkuez02MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wYAYDVR0RBFkwV4ITY2FtYnJpZGdlcmFn Lm9yZy51a4ITY2FtcmFnLnNvYy5zcmNmLm5ldIISd2Vic2VydmVyLnNyY2YubmV0 ghd3d3cuY2FtYnJpZGdlcmFnLm9yZy51azCB/gYDVR0gBIH2MIHzMAgGBmeBDAEC ATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUg bWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBv bmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZv dW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHcAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6Oq HQcT0wwAAAFk8++DAQAABAMASDBGAiEA6ld+7WNbTNUMjPXIgQTskZtUANCFa++i BJ+2ilsT9fcCIQDvqqF4IwilWOp4rsSoN3vjn/e8K/mPUUmVA3PAYlNU5gB2ACk8 UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZPPvhN4AAAQDAEcwRQIg cVWo41BMNoMc5NqmjTmVHqZ1HDXE0jKbz5VoGY7zQPoCIQD6e+MNGnjR1MQbvuE0 T3EJ/HZy8sPOZo2YpymzAh1UhDANBgkqhkiG9w0BAQsFAAOCAQEAETAai+AwT+T4 GrQKQD96eBn/T9KBPk1zYUaSQ+KHlofRUTY3CYIDAfb4zn6LrMfIT+lKuFT+8cog FUOzDVmsiHXqwWQCiGQf/KLBsP8bGIBQFcpVqdoxWmnY/e0V9twUdZ4fA5zUC2UO +KuXvgey8pV1+lSAwpTH+7qFNdAoLKDcfDLbUdRzZy1Vgr1cal4dMigD6ygK+hR8 5LYSk6FPrqYUywOHTXRfb+c+oFEgtxCryvoOEQJDHnevaxgAAnBg+h2b9wk3PmFK /hymM8J6rzvQ1oHiVqt2rUoLjtHwt3GfBB/W6Yi2fsqm+1F9rhJigSIdD7ARQs3F pCf8UVjH4w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAouRBzGfQ7tiJWKr3SVTb fbkH68gyiqnCZX8eXGpeL6yAHGgw+VAhDJB6OF33egR52JFIp+3Sr22fmFkprK+X g8yNEbGeXc+aE3TXAmESIGViXn6TufxXDcb0n02kTW25U1mwf6BT1G4B3H68nAnT 4lwEfod4vvQHmMSZwDLvspbm6IKtMTH8AQLEDMlO9k+2sac/h33nM9h0HGHn3pRs UhMYK6PhCCzhVSMwbpOoZm2a6xI6qum/mPb2F3cZ5BnfEJkbFSTnQ4Vigxy4p5Hd lOewqkp/rVdj7phQX4N+d5ujTaC5/FbZxtzsGr3V2kyNk66LauOYVgtghOuXOMQf 1+3A246k+t5IzoyhfMdo7Zr6z9ACuNII1TaYeBGjO+oX8SPqI0vSWGD3HtftuIkS C4cKLIRcp5W5E4ekaL0hKvVMe4hDjuEnsCgNb3H4Y9l3cjXxwRoIa4IuMMdQPvPC BghgRuCsj8aWnuxbrd1DmBgIGflg7Ud51LH2IJvm1m+aZHZ9PYixn2aLXfDjy2QQ YKBZJTg1OlBCxWSbwFP49fUKW56gorutHRGFd1CQvW2b27DH8gQDdLkPHdJ3C9ik 6JThpNgUnYL47DOwQw5CbGDLrzhMce8e9I3K00pFqsSiz25kV5LKL5uILLSKw9f+ zcfMvwgJnYiIPx8NFbgb2P0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340181263094502476547488469728975011365173 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-01 04:21:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 04:21:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webserver.srcf.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664539867999600936869140175949480366571686191602820570427322744608830075355656236478900818836724090525871015352486994124780674684026884408672061130569790564582755455627257597707786355232223592675129132098143990384878007767939618717623710611744842218186921941379465119221338511789835017395898231648374043258586041474334398220821699819791719338675541029812782246601037962671384527170843489569297007763551198368778115167643627690069253358184967531212487069854041021867636895302896846516187987599244876233155526247038253035257279426078654826818396903747054624541869166476487875291977003432080230141890220155408824372300506178451641848644224444202933892050513318737071185266163392752125330036816409847543517968175539730305185063146031402585512429211757897482264244118147315456142888122246398473241732671508304978806320265950992899938171621287530807621100095180704872753620721648274515595309089952309514480246924599086077835030240409729645668546740530867804528390370410950943317061822985737910703886906605813980348026504658607508009802865487734231869454954545606980611035937536068587186184447366535310736179825644033949360526557325057245534899221790765462814278396223409176197781328717492894398925029592993764570175376220764718739217963261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) acd7f0e745869d35de3933c0e9fb01192e7b3d36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgerag.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camrag.soc.srcf.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webserver.srcf.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgerag.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164f3ef83010000040300483046022100ea577eed635b4cd50c8cf5c88104ec919b5400d0856befa2049fb68a5b13f5f7022100efaaa1782308a558ea78aec4a8377be39ff7bc2bf98f5149950373c0625354e6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164f3ef84de000004030047304502207155a8e3504c36831ce4daa68d39951ea6751c35c4d2329bcf9568198ef340fa022100fa7be30d1a78d1d4c41bbee1344f7109fc7672f2c3ce668d98a729b3021d5484 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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