mica.missionmedia.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:dc:3e:38:02:61:00:0b:7f:40:e1:8c:64:e0:00:34:f2:a7 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mica.missionmedia.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:dc:3e:38:02:61:00:0b:7f:40:e1:8c:64:e0:00:34:f2:a7Serial Number (int): 423393967402260156153213630167271525905063
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c3:39:47:bd:7a:bf:e6:b8:c1:09:23:6e:37:d0:b8:59:27:3d:25:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6c:2a:22:80:51:53:04:ac:5e:8f:95:bb:26:cb:0d:16:18:6b:2e:ea
Fingerprint (sha256): 0b:57:5e:2f:f9:95:0a:e7:50:4f:89:53:c2:6c:4e:95:8f:90:31:54:37:bf:ee:db:72:26:ec:e0:fb:62:ce:85
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate mica.missionmedia.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mica.missionmedia.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mica.missionmedia.net
Other certificates including the domain name missionmedia.net
(limited to 100 certificates)
nasa.missionmedia.net
mica.missionmedia.net
www.herrandsacco.com
mdsci.missionmedia.net
www.fblaw.com
nasaaws.missionmedia.net
newwave.missionmedia.net
mdsci.missionmedia.net
www.japathfinder.org
newwave.missionmedia.net
www.thebwgc.org
www.phillipsfoods.com
viocity-charity.missionmedia.net
cofcogroup.missionmedia.net
newwave.missionmedia.net
bp.missionmedia.net
www.nglscoalition.org
mica2020.missionmedia.net
www.nglscoalition.org
mica.missionmedia.net
www.borail.org
www.borail.org
firstfinish.missionmedia.net
www.nglscoalition.org
fieldhockey.missionmedia.net
zoo.missionmedia.net
www.mhamd.org
*.missionmedia.net
www.phillipsfoods.com
fieldhockey.missionmedia.net
www.thebwgc.org
bp.missionmedia.net
tu.missionmedia.net
www.20secondssaves.org
www.iamcandicelauren.com
www.japathfinder.org
www.fblaw.com
www.viocitygroup.com
fieldhockey.missionmedia.net
nasa.missionmedia.net
www.borail.org
ar.missionmedia.net
www.nationalassembly.org
www.borail.org
www.nglscoalition.org
www.nglscoalition.org
tu.missionmedia.net
g-force-gomason.missionmedia.net
www.nglscoalition.org
www.wcfsymphony.org
www.nationalassembly.org
www.nglscoalition.org
www.nglscoalition.org
www.phillipsfoods.com
ar.missionmedia.net
tu.missionmedia.net
mdsci.org
caseycares.org
www.rsr-electric.com
secure1.missionmedia.net
www.thebwgc.org
viocity-charity.missionmedia.net
www.japathfinder.com
fieldhockey.missionmedia.net
www.nationalassembly.org
www.japathfinder.org
phillips.missionmedia.net
www.phillipsseafood.com
www.nglscoalition.org
nasa.missionmedia.net
www.ellingtonschool.org
cleats.hypsole.com
www.phillipsfoods.com
www.nationalassembly.org
bp.missionmedia.net
nasa.missionmedia.net
mdsci.missionmedia.net
www.keystruct.com
nasaaws.missionmedia.net
www.wcfsymphony.org
newwave.missionmedia.net
brand.towson.edu
tu.missionmedia.net
caseycares.missionmedia.net
nasa-demo.missionmedia.net
firstfinish.missionmedia.net
nasa.missionmedia.net
www.20secondssaves.org
newwave.missionmedia.net
www.japathfinder.org
marylandzoo.missionmedia.net
www.nglscoalition.org
www.rsr-electric.com
mdsci.missionmedia.net
firstfinish.missionmedia.net
g-force-gomason.missionmedia.net
nasaaws.missionmedia.net
www.rsr-electric.com
www.borail.org
www.policysource.org
mica.missionmedia.net
www.herrandsacco.com
mdsci.missionmedia.net
www.fblaw.com
nasaaws.missionmedia.net
newwave.missionmedia.net
mdsci.missionmedia.net
www.japathfinder.org
newwave.missionmedia.net
www.thebwgc.org
www.phillipsfoods.com
viocity-charity.missionmedia.net
cofcogroup.missionmedia.net
newwave.missionmedia.net
bp.missionmedia.net
www.nglscoalition.org
mica2020.missionmedia.net
www.nglscoalition.org
mica.missionmedia.net
www.borail.org
www.borail.org
firstfinish.missionmedia.net
www.nglscoalition.org
fieldhockey.missionmedia.net
zoo.missionmedia.net
www.mhamd.org
*.missionmedia.net
www.phillipsfoods.com
fieldhockey.missionmedia.net
www.thebwgc.org
bp.missionmedia.net
tu.missionmedia.net
www.20secondssaves.org
www.iamcandicelauren.com
www.japathfinder.org
www.fblaw.com
www.viocitygroup.com
fieldhockey.missionmedia.net
nasa.missionmedia.net
www.borail.org
ar.missionmedia.net
www.nationalassembly.org
www.borail.org
www.nglscoalition.org
www.nglscoalition.org
tu.missionmedia.net
g-force-gomason.missionmedia.net
www.nglscoalition.org
www.wcfsymphony.org
www.nationalassembly.org
www.nglscoalition.org
www.nglscoalition.org
www.phillipsfoods.com
ar.missionmedia.net
tu.missionmedia.net
mdsci.org
caseycares.org
www.rsr-electric.com
secure1.missionmedia.net
www.thebwgc.org
viocity-charity.missionmedia.net
www.japathfinder.com
fieldhockey.missionmedia.net
www.nationalassembly.org
www.japathfinder.org
phillips.missionmedia.net
www.phillipsseafood.com
www.nglscoalition.org
nasa.missionmedia.net
www.ellingtonschool.org
cleats.hypsole.com
www.phillipsfoods.com
www.nationalassembly.org
bp.missionmedia.net
nasa.missionmedia.net
mdsci.missionmedia.net
www.keystruct.com
nasaaws.missionmedia.net
www.wcfsymphony.org
newwave.missionmedia.net
brand.towson.edu
tu.missionmedia.net
caseycares.missionmedia.net
nasa-demo.missionmedia.net
firstfinish.missionmedia.net
nasa.missionmedia.net
www.20secondssaves.org
newwave.missionmedia.net
www.japathfinder.org
marylandzoo.missionmedia.net
www.nglscoalition.org
www.rsr-electric.com
mdsci.missionmedia.net
firstfinish.missionmedia.net
g-force-gomason.missionmedia.net
nasaaws.missionmedia.net
www.rsr-electric.com
www.borail.org
www.policysource.org
Certificate
The complete raw certificate details for mica.missionmedia.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISBNw+OAJhAAt/QOGMZOAANPKnMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjkwOTAwMjJaFw0y MDA1MjkwOTAwMjJaMCAxHjAcBgNVBAMTFW1pY2EubWlzc2lvbm1lZGlhLm5ldDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM2swz5nTt6tjRbvIP/2K8K8 TK/lkxgcf4ucHI+nn2xFX3zvH4/rniiSIN/J2W65cp1BQTXn/S2wFjMJzB8FbXoT HEPaspf8257VttW6MyTeUP6Nml+E9cgBc0JULVnJz/lJRJE7LO62Bht5+3AZyEZ6 t8vBrMKoItONuetPhuOdkcIhaLASD/aDFgHE1UaUELmDx+KViGKFIF7KHzFShpK2 qbwDkhTB/7WfADEHOcWbYaYQidzmULASckEp/dbgmWbAFGNcUMm1mb5EwnDFATH+ BhpiEQrvP8FCmSOkYBML05eWf3aR96Q5qSkA/YtZ+0ijDTMQCNFVNWoDX7CVmRkC AwEAAaOCAmwwggJoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUwzlHvXq/5rjBCSNu N9C4WSc9JZYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzAgBgNVHREEGTAXghVtaWNhLm1pc3Npb25tZWRpYS5uZXQwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0 APIAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXCQY8QMAAAE AwBIMEYCIQCPAVOGkMZMSnY08raftJgKylCTa07iokJs1wXOpY/yzwIhALZchHwp yi+FcwDKTbRvFLiu7nDltUM3lkyR5bTntA7BAHcAsh4FzIuizYogTodm+Su5iiUg Z2va+nDnsklTLe+LkF4AAAFwkGPECQAABAMASDBGAiEA4e+RVlXtSIWGKjcxihAU S8V/VGF85Q6mA2iisheWaU8CIQC8GzDUUr35vP5S65ZvNYfiF81Y5C/8ki7cTMSQ y+nLfTANBgkqhkiG9w0BAQsFAAOCAQEAAkLY0Lnbg7E+khZ/w4FnwTi5KRbQUQcD T/ad1QMovnv1DerqgpmMlEUQEf6zD+MtPva+9Q8rXSv4BXg2j3vQ+Cs5rxxwPqXn 4FnEnIGTO4KJh0JAMMFWevZsbjvQMPdA7yxXmRsOblmvTAK4um5rGZ+YVuLPMREg wS+uNApHQqbLXiPZTSZPjufeJsi3QYnny4sangZp4DAwc5hKmY2fzdPm2F75RUnM 6ZL1JAHTW78gWpqBiXUd8hXpbYuBNwCNba8kHdbE22kWp1r0QyGBrwOqeDKL3Gmz ZlVCOTxOIv2WZ3uTHFoE9anB3bLCbgLDDXkFULHmWUQimdTUpdMP3Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzazDPmdO3q2NFu8g//Yr wrxMr+WTGBx/i5wcj6efbEVffO8fj+ueKJIg38nZbrlynUFBNef9LbAWMwnMHwVt ehMcQ9qyl/zbntW21bozJN5Q/o2aX4T1yAFzQlQtWcnP+UlEkTss7rYGG3n7cBnI Rnq3y8Gswqgi042560+G452RwiFosBIP9oMWAcTVRpQQuYPH4pWIYoUgXsofMVKG krapvAOSFMH/tZ8AMQc5xZthphCJ3OZQsBJyQSn91uCZZsAUY1xQybWZvkTCcMUB Mf4GGmIRCu8/wUKZI6RgEwvTl5Z/dpH3pDmpKQD9i1n7SKMNMxAI0VU1agNfsJWZ GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 423393967402260156153213630167271525905063 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 09:00:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 09:00:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mica.missionmedia.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25964044966254754132923008919001534582324790346155119136941312169069882825891630097896070939248105662577359881350909799353963655869219368073802049752895180364475612552951149485493859309454827165669760348376293983858827136049803794165699353568087629517845744223974180583479193049319599938821536974967799230091774602134418414390581522022925914220125757072243659085949821838093415096268007101100258723595810327594222733116908408338557137773608758970033100099184433224941875735124606397824018812456627148439803889551662872412740426311145549447116224774949841216689095637203368618898971549598972309964902179161974624327961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c33947bd7abfe6b8c109236e37d0b859273d2596 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mica.missionmedia.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001709063c40c00000403004830460221008f01538690c64c4a7634f2b69fb4980aca50936b4ee2a2426cd705cea58ff2cf022100b65c847c29ca2f857300ca4db46f14b8aeee70e5b54337964c91e5b4e7b40ec1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001709063c4090000040300483046022100e1ef915655ed4885862a37318a10144bc57f54617ce50ea60368a2b21796694f022100bc1b30d452bdf9bcfe52eb966f3587e217cd58e42ffc922edc4cc490cbe9cb7d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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