www.oxitec.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e7:d7:22:1d:8d:06:43:4b:c5:5c:21:bb:c0:70:21:40:ac was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.oxitec.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e7:d7:22:1d:8d:06:43:4b:c5:5c:21:bb:c0:70:21:40:acSerial Number (int): 340228045710567459783041611116404031963308
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 68:c6:38:42:a6:9e:95:36:19:a4:e4:8c:7f:1b:f4:93:3e:a3:ba:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 66:6f:b8:3b:05:a2:b5:e3:12:a6:67:3d:ac:be:d3:67:29:3f:98:b0
Fingerprint (sha256): 0c:ef:e0:39:d5:22:90:5a:26:3d:1e:82:12:f8:84:d5:c2:be:40:c5:78:a4:22:e8:44:a8:ca:ee:81:dd:99:56
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.oxitec.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.oxitec.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.oxitec.com
Other certificates including the domain name oxitec.com
(limited to 100 certificates)
o.ssl.fastly.net
leephillips.dev
o.ssl.fastly.net
sharepoint.oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
motokandemir.net
o.ssl.fastly.net
*.oxitec.com
oxitec.com
o.ssl.fastly.net
oxitec.com
dns-vetting1.map.fastly.net
oxitec.com
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
oxitec.com
oxitec.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
oxitecgis.oxitec.com
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
*.oxitec.com
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
app.aju.ar
o.ssl.fastly.net
www.performingartslife.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
filmtech.world
*.oxitec.com
o.ssl.fastly.net
*.oxitec.com
o.ssl.fastly.net
app-link.oxitec.com
oxitec.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
lamafiatech.com
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
sharepoint.oxitec.com
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
www.oxitec.com
remote.oxitec.com
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
www.maximsupplies.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
remote.oxitec.com
o.ssl.fastly.net
leephillips.dev
o.ssl.fastly.net
sharepoint.oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
motokandemir.net
o.ssl.fastly.net
*.oxitec.com
oxitec.com
o.ssl.fastly.net
oxitec.com
dns-vetting1.map.fastly.net
oxitec.com
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
oxitec.com
oxitec.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
oxitecgis.oxitec.com
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
*.oxitec.com
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
app.aju.ar
o.ssl.fastly.net
www.performingartslife.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
filmtech.world
*.oxitec.com
o.ssl.fastly.net
*.oxitec.com
o.ssl.fastly.net
app-link.oxitec.com
oxitec.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
lamafiatech.com
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
sharepoint.oxitec.com
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
www.oxitec.com
remote.oxitec.com
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
www.maximsupplies.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
remote.oxitec.com
o.ssl.fastly.net
Certificate
The complete raw certificate details for www.oxitec.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISA+fXIh2NBkNLxVwhu8BwIUCsMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDUxMjA4NDRaFw0y MDAzMDQxMjA4NDRaMBkxFzAVBgNVBAMTDnd3dy5veGl0ZWMuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1brL9RPf7OblKKs1VBcAli0kLMnHbkll 6URTjRnidiB9WtopBhfdO0lSSOYs9VZ4ndiKQiuY08YVSUEYTU0LkFoBlBEQyGSB wu3d28mCfN6Gqbak0kQDkzzpuJ1vogsSc58ImsNdY5flDDaYt2ZSqRRo76FJMrZC Kp05Mr7MMYqA/XFrZc13uhIwhFZiGAtNLU4g9u85uxjNPgK8Wx08i///EgJDM8es +kuwXHt+4Uj7JpWzLqlNmOuqQz9x1D2wxg/oj/ZzQeqWGu9xpA24JDZKKkOc1pks oiAJYUIswXtxzI7D5w0sFSB/FRFELZvIKVdpE9Z+W4G878MUOCt+vwIDAQABo4IC YjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRoxjhCpp6VNhmk5Ix/G/STPqO6 tjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMBkGA1UdEQQSMBCCDnd3dy5veGl0ZWMuY29tMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA8JWkWfIA0YJA EC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFu1i1TPQAABAMARjBEAiBLIm8Y/EPx CIESO4nKJFYA6og3ziTMw8Wd1bTp3KuVUwIgPq83FGJc9z0aLM4DnikNYojN/gMy 0lN8aUMmNSDRR9cAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAA AW7WLVNrAAAEAwBHMEUCIQCx4CARdWeYNXyEjp7bETQb2kIg8RG1m5vl7knW2AlO vAIgF5CdEnFQcpj66vkyCkYusvrh8Wt42Eqqqb2sM+rAmOcwDQYJKoZIhvcNAQEL BQADggEBADOBYNNO9uvV9XO/AdizWN8Z4VEnS1wsws9UJplTTrB/b/mtgcpa9jv+ tRO+6vm238fsmWHfY1/m1u8gFu1qFhLYJzhWg5F4UgxyXMy+XQ5fJpfufwUVzIPM zylNW13W/u2Qwtsv1VuXjRQv9/IdlthG4nguYh6VMBFAmgEkxSF/X/wsQb4O5moR dqc7CISbt6VyVS+CZWYrSpcEDZRQm89KyS6tm6RSD0QZSribUOD8KHS6/qttArxq ESbaqraT8XzIvZY5e6Io8n2GM90S8V+hLa2sjcIHrBmZvVEUfNYfNNaIrko0FwZh C4d6PviM3X+l3hQgutSsMxQ/GAOoT8o= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1brL9RPf7OblKKs1VBcA li0kLMnHbkll6URTjRnidiB9WtopBhfdO0lSSOYs9VZ4ndiKQiuY08YVSUEYTU0L kFoBlBEQyGSBwu3d28mCfN6Gqbak0kQDkzzpuJ1vogsSc58ImsNdY5flDDaYt2ZS qRRo76FJMrZCKp05Mr7MMYqA/XFrZc13uhIwhFZiGAtNLU4g9u85uxjNPgK8Wx08 i///EgJDM8es+kuwXHt+4Uj7JpWzLqlNmOuqQz9x1D2wxg/oj/ZzQeqWGu9xpA24 JDZKKkOc1pksoiAJYUIswXtxzI7D5w0sFSB/FRFELZvIKVdpE9Z+W4G878MUOCt+ vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340228045710567459783041611116404031963308 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 12:08:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 12:08:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oxitec.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26980871847746351538850362360063460281591418963756397677513971228237949504124096571744646066249169535735275946759771427621732422893923966757682953401977651762414465926593430274074667466203706063169762274028170226404085525699044494621135051733421760237235877759527851233539579974596529603695236001967369587241970687883086750192711881504718337963539750225414631702845123584819696665576419615926246929604516717279755728478269411841542872834981624784950917676202215125334839187729915860961672121090179560122787639386892008425902306530506303706613793584166251277477195363513436575430407985800911396412026757628512822853311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 68c63842a69e953619a4e48c7f1bf4933ea3bab6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxitec.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed62d533d000004030046304402204b226f18fc43f10881123b89ca245600ea8837ce24ccc3c59dd5b4e9dcab955302203eaf3714625cf73d1a2cce039e290d6288cdfe0332d2537c6943263520d147d700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed62d536b0000040300473045022100b1e02011756798357c848e9edb11341bda4220f111b59b9be5ee49d6d8094ebc022017909d1271507298faeaf9320a462eb2fae1f16b78d84aaaa9bdac33eac098e7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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