vault1.gc.stepstone.com
Issued by R3
About this certificate
This digital certificate with serial number 04:95:00:55:9c:13:33:2f:ee:53:18:3e:02:cc:52:97:b1:c0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=vault1.gc.stepstone.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:95:00:55:9c:13:33:2f:ee:53:18:3e:02:cc:52:97:b1:c0Serial Number (int): 399151660909070868040788908163652308677056
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 49:89:78:05:59:9d:7f:8f:a7:04:67:19:6f:74:0c:7c:66:e5:d6:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 19:2f:b3:71:7f:09:d6:d2:9a:33:a6:aa:70:5f:53:9b:c2:3c:f9:4e
Fingerprint (sha256): 0d:bc:9e:fe:68:5a:64:2c:b3:a9:a8:f2:0d:60:d4:34:13:86:7e:1b:b3:ca:1f:dd:14:83:ff:ac:67:a6:83:fe
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate vault1.gc.stepstone.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vault1.gc.stepstone.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vault1.gc.stepstone.com
Other certificates including the domain name stepstone.com
(limited to 100 certificates)
support.themallschool.org.uk
stepstone.de
salarysurvey.gc.stepstone.com
career.stepstone.com
helpcenter.stepstone.com
javascript-dev-test.skylight.gc.stepstone.com
stepstone.de
www.stepstone.de
*.dw.stepstone.com
people-dev.gc.stepstone.com
support.themallschool.org.uk
*.stepstone.com
defaulthost.gc.stepstone.com
helpdesk.stepstone.com
dep.stepstone.com
goldfish-api-uat.gc.stepstone.com
*.stepstone.com
stepstone.de
*.gc.stepstone.com
3hive-dev-test.skylight.gc.stepstone.com
vault2.gc.stepstone.com
*.stepstone.com
defaulthost.gc.stepstone.com
support.themallschool.org.uk
*.gc.stepstone.com
javascript-dev-test.skylight.gc.stepstone.com
questionnaire-dev.skylight.gc.stepstone.com
www.stepstone.de
vault3.gc.stepstone.com
*.gc.stepstone.com
stepstone.de
vault1.gc.stepstone.com
*.stepstone.com
*.apollo.stepstone.com
it.support.workingsolutions.com
*.gc.stepstone.com
*.live.dw.stepstone.com
www.stepstone.de
vault2.gc.stepstone.com
stepstone.de
developer-origin.gc.stepstone.com
nagios.gc.stepstone.com
vault3.gc.stepstone.com
questionnaire-dev.skylight.gc.stepstone.com
questionnaire-dev.skylight.gc.stepstone.com
stepstone.de
developer-dev.gc.stepstone.com
fsus-4.freshservice.com
www.stepstone.de
dashboard.labs.stepstone.com
daas.stepstone.com
www.stepstone.de
3hive-dev-test.skylight.gc.stepstone.com
*.uat.dw.stepstone.com
support.sdi-infra.org
helpcenter.stepstone.com
stepstone.de
helpcenter.stepstone.com
login.recruit-preprod.stepstone.com
stepstone.de
facade-uat2.gc.stepstone.com
mocksite-uat.skylight.gc.stepstone.com
goldfish-whitelabel.gc.stepstone.com
vault1.gc.stepstone.com
*.search.stepstone.com
defaulthost.gc.stepstone.com
fsus-8.freshservice.com
dw.stepstone.com
*.gc.stepstone.com
people-dev.gc.stepstone.com
goldfish-whitelabel.gc.stepstone.com
www-preview.stepstone.com
3hive-dev-test.skylight.gc.stepstone.com
questionnaire-uat.skylight.gc.stepstone.com
helpcenter.stepstone.com
goldfish-whitelabel.gc.stepstone.com
helpcenter.stepstone.com
fsus-8.freshservice.com
support.themallschool.org.uk
stepstone.de
survey-dev-test.gc.stepstone.com
*.dev.dw.stepstone.com
helpcenter.stepstone.com
javascript-dev-test.skylight.gc.stepstone.com
developer-dev.gc.stepstone.com
salarysurvey.gc.stepstone.com
career.stepstone.com
goldfish-api-dev-test.gc.stepstone.com
helpcenter.stepstone.com
whitecloud-resourceservice-demo.gc.stepstone.com
goldfish-api.gc.stepstone.com
*.search.stepstone.com
www.stepstone.de
*.dw.stepstone.com
*.stepstone.com
developer-dev.gc.stepstone.com
questionnaire-uat.skylight.gc.stepstone.com
*.ds.daas.stepstone.com
*.gc.stepstone.com
labs.stepstone.com
stepstone.de
salarysurvey.gc.stepstone.com
career.stepstone.com
helpcenter.stepstone.com
javascript-dev-test.skylight.gc.stepstone.com
stepstone.de
www.stepstone.de
*.dw.stepstone.com
people-dev.gc.stepstone.com
support.themallschool.org.uk
*.stepstone.com
defaulthost.gc.stepstone.com
helpdesk.stepstone.com
dep.stepstone.com
goldfish-api-uat.gc.stepstone.com
*.stepstone.com
stepstone.de
*.gc.stepstone.com
3hive-dev-test.skylight.gc.stepstone.com
vault2.gc.stepstone.com
*.stepstone.com
defaulthost.gc.stepstone.com
support.themallschool.org.uk
*.gc.stepstone.com
javascript-dev-test.skylight.gc.stepstone.com
questionnaire-dev.skylight.gc.stepstone.com
www.stepstone.de
vault3.gc.stepstone.com
*.gc.stepstone.com
stepstone.de
vault1.gc.stepstone.com
*.stepstone.com
*.apollo.stepstone.com
it.support.workingsolutions.com
*.gc.stepstone.com
*.live.dw.stepstone.com
www.stepstone.de
vault2.gc.stepstone.com
stepstone.de
developer-origin.gc.stepstone.com
nagios.gc.stepstone.com
vault3.gc.stepstone.com
questionnaire-dev.skylight.gc.stepstone.com
questionnaire-dev.skylight.gc.stepstone.com
stepstone.de
developer-dev.gc.stepstone.com
fsus-4.freshservice.com
www.stepstone.de
dashboard.labs.stepstone.com
daas.stepstone.com
www.stepstone.de
3hive-dev-test.skylight.gc.stepstone.com
*.uat.dw.stepstone.com
support.sdi-infra.org
helpcenter.stepstone.com
stepstone.de
helpcenter.stepstone.com
login.recruit-preprod.stepstone.com
stepstone.de
facade-uat2.gc.stepstone.com
mocksite-uat.skylight.gc.stepstone.com
goldfish-whitelabel.gc.stepstone.com
vault1.gc.stepstone.com
*.search.stepstone.com
defaulthost.gc.stepstone.com
fsus-8.freshservice.com
dw.stepstone.com
*.gc.stepstone.com
people-dev.gc.stepstone.com
goldfish-whitelabel.gc.stepstone.com
www-preview.stepstone.com
3hive-dev-test.skylight.gc.stepstone.com
questionnaire-uat.skylight.gc.stepstone.com
helpcenter.stepstone.com
goldfish-whitelabel.gc.stepstone.com
helpcenter.stepstone.com
fsus-8.freshservice.com
support.themallschool.org.uk
stepstone.de
survey-dev-test.gc.stepstone.com
*.dev.dw.stepstone.com
helpcenter.stepstone.com
javascript-dev-test.skylight.gc.stepstone.com
developer-dev.gc.stepstone.com
salarysurvey.gc.stepstone.com
career.stepstone.com
goldfish-api-dev-test.gc.stepstone.com
helpcenter.stepstone.com
whitecloud-resourceservice-demo.gc.stepstone.com
goldfish-api.gc.stepstone.com
*.search.stepstone.com
www.stepstone.de
*.dw.stepstone.com
*.stepstone.com
developer-dev.gc.stepstone.com
questionnaire-uat.skylight.gc.stepstone.com
*.ds.daas.stepstone.com
*.gc.stepstone.com
labs.stepstone.com
Certificate
The complete raw certificate details for vault1.gc.stepstone.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEQTCCAymgAwIBAgISBJUAVZwTMy/uUxg+AsxSl7HAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAyMDgxNTU0MTBaFw0yMzA1MDkxNTU0MDlaMCIxIDAeBgNVBAMT F3ZhdWx0MS5nYy5zdGVwc3RvbmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAnY7OkdZgNpEbOKz2yOY2yUzvG45OsWlHHwHJ2zRrJDsvKQe0pF69 f1NT6p1IHm1SSX0ivJD6VL7IF4WwkNzo0LT5NO1Uo+qgka33g0Q/qKibb3YdI4Wv E2ABZPqy3S081oN21eoS/ysyURJ8SzvkdsQfMoGoOtA0pzCcBjY4wn4CNuPXQl22 uH42sqbU3qrVZUvNGh7xejBk8cAruXuOUwYavDIL04Ue3CdKV0tiOm4Yp19e5wxH zzLQC9FCO2BaOBCWJCQD6Ugm86VQPSjQVYyyQnUSHUfv/demXbi5KvNHH/SDP7zg 8BORR+5QeEIXZTISSPHtohecpUcBkBkgYwIDAQABo4IBXzCCAVswDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBRJiXgFWZ1/j6cEZxlvdAx8ZuXWuzAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzAiBgNVHREEGzAZghd2YXVsdDEuZ2Muc3RlcHN0b25lLmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAT0aPVf/zVZDw8WE0hZhf1uBa3jC6VMQl+kF0 V2HJeVT2adX0GlQcAKftvRW5nosfyRhPPGA20ZMIvYsVL054gH1A8G/eJhPhVD1s 3lm3F0AB9j2ZDxZi4sKuVxzMlM8kw7axg9Z6H4Kcwn3TavuOmGfl6+FvJdlkZk+1 n0KMcH3ntt6M/zm2aSGNLYZp9k2UyDwoftbwD4xXopoyt1rg7qcAiu8YnJVEbFnt 7mFOuCWjFwsPj7PownAe7Yyte18pBe7/Rnu9EMq2NGP12rkvFJbA1sIFtHoIsyzK SR9myAZjoDraYRCG7eQVexKCNeJ+EvBQfcGsUI9JxjSbwycjoQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY7OkdZgNpEbOKz2yOY2 yUzvG45OsWlHHwHJ2zRrJDsvKQe0pF69f1NT6p1IHm1SSX0ivJD6VL7IF4WwkNzo 0LT5NO1Uo+qgka33g0Q/qKibb3YdI4WvE2ABZPqy3S081oN21eoS/ysyURJ8Szvk dsQfMoGoOtA0pzCcBjY4wn4CNuPXQl22uH42sqbU3qrVZUvNGh7xejBk8cAruXuO UwYavDIL04Ue3CdKV0tiOm4Yp19e5wxHzzLQC9FCO2BaOBCWJCQD6Ugm86VQPSjQ VYyyQnUSHUfv/demXbi5KvNHH/SDP7zg8BORR+5QeEIXZTISSPHtohecpUcBkBkg YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 399151660909070868040788908163652308677056 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 15:54:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 15:54:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vault1.gc.stepstone.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19889834592989901560853697690810838505728126709938456783035994438584132491005876936391191918758539030586647744903270586460327030411699850959110639892027124643951461885958577014800557475231491767848863198716737002614878765429772759349395685655699718819102195520684726050104760486934867552992107520246135864746261504985756426989014705533924241338859651365233010840237554794763152340320936503414599111136535828537675700289906412088176407452988303898195379297641741118254016922879871281016304792437064089848907212739497032415516224692591273742999788238062813358276828644366859171479128768677252077513403526843386927063139 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 49897805599d7f8fa70467196f740c7c66e5d6bb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vault1.gc.stepstone.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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