librarycat.marionfl.org
Issued by R3
About this certificate
This digital certificate with serial number 04:7c:a9:ab:17:32:27:80:99:f5:ca:aa:72:33:96:6b:b5:61 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=librarycat.marionfl.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7c:a9:ab:17:32:27:80:99:f5:ca:aa:72:33:96:6b:b5:61Serial Number (int): 390869685109756870688644978987830340203873
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e0:e2:ee:98:2d:58:24:b5:12:e2:be:00:16:66:0d:04:e9:66:a4:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fd:6c:ac:63:50:44:8c:e7:72:4e:09:56:5b:2d:f3:5f:19:8e:d1:f0
Fingerprint (sha256): 13:08:1c:23:2f:df:08:5f:0f:76:22:1c:ec:54:94:7d:4a:58:fc:89:a8:bb:a8:16:77:eb:7f:dd:ea:35:2b:a3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate librarycat.marionfl.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for librarycat.marionfl.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
librarycat.marionfl.org
marion.aspendiscovery.org
marionkids.aspendiscovery.org
marion.aspendiscovery.org
marionkids.aspendiscovery.org
Other certificates including the domain name marionfl.org
(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
librarycat.marionfl.org
marionfl.org
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b1.granicusgovaccess.net
marionfl.org
san-b1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
marionfl.org
marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
environmental.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
environmental.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
*.marionfl.org
san-b1.granicusgovaccess.net
marionfl.org
environmental.marionfl.org
san-b1.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
marionfl.org
*.marionfl.org
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
librarycat.marionfl.org
marionfl.org
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b1.granicusgovaccess.net
marionfl.org
san-b1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
marionfl.org
marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
environmental.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
environmental.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
*.marionfl.org
san-b1.granicusgovaccess.net
marionfl.org
environmental.marionfl.org
san-b1.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
marionfl.org
*.marionfl.org
*.marionfl.org
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
*.marionfl.org
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a1.granicusgovaccess.net
*.marionfl.org
Certificate
The complete raw certificate details for librarycat.marionfl.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISBHypqxcyJ4CZ9cqqcjOWa7VhMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjEwNDA3MTlaFw0yMzEyMjAwNDA3MThaMCIxIDAeBgNVBAMT F2xpYnJhcnljYXQubWFyaW9uZmwub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAtTaEeTXHf4eU03QrSyEpZ5/tjjfzsIR8Gsteyb84z4TBGAZJIOXb 5SmsACcukHuIz61TNSmb1fN+9qBRZ0M5T+3JYtu3Qs3q4NKaYfE//PbNSEWJK+TH 9Rd50GsDCPNXfCD/4k/WA2a7keDe2AvDShpf8NvgMpWKBCwnOGsq9vjMvSCJkoIB BxZ1jsWMgbXeLG2jdHT1Cv3EixOOZRL3PaHPOSU0WV+ddzViQjgUdEVdlqVPKnGL ajS3Y2ImcrFqzQcPlzmzhy1TaO/6nYORvC4grpKlNbupmsXkQS07bkG8vMlC2i5v h36FgWcohwgy1GpAAaTAtgwfkR2FFWbJkQIDAQABo4ICVDCCAlAwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBTg4u6YLVgktRLivgAWZg0E6Wak+DAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzBcBgNVHREEVTBTghdsaWJyYXJ5Y2F0Lm1hcmlvbmZsLm9yZ4IZ bWFyaW9uLmFzcGVuZGlzY292ZXJ5Lm9yZ4IdbWFyaW9ua2lkcy5hc3BlbmRpc2Nv dmVyeS5vcmcwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2 BIHzAPEAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYq2IqlE AAAEAwBIMEYCIQCL5h7CEZBav8FFvFPUHJe9UVsei1FnpEKYINrKDKbS4wIhAPFg PrxT8K+xeM7iF51h4aa+KIseuWMiNJgEkN8vJO0fAHYAtz77JN+cTbp18jnFulj0 bF38Qs96nzXEnh0JgSXttJkAAAGKtiKpMwAABAMARzBFAiEAtsN4Gh6b6BGeM5GP RLG+YnuODVJAhuufacIm6kp6y+gCID2VExVzjSUx72OBGv7knT26rpTUYXCmyUKD H45RtxFIMA0GCSqGSIb3DQEBCwUAA4IBAQBeUXlduGBIaxb7zn2vhBxRP/pac5v6 Ul6b7O6dlGzWPBmVzvLGZ9onzvtKG1FI6jRDKZhTnu1seajwNNidyeohOa4wB6pq iRK/jdQbkEVA1DOI6AbTERwjlGFxMGUp2lxf7fdwcod9dhDfqVP8aWc7SVfS1y9D fH/SriAbEZ/ubtUwMlCAQMWG+qOPjb4yP/bIeT7cTsmM9vQtZ1OYB+DOXagQjJcE Ll82H1Nleg5FKDnfOoHfdZc+atLVM6DpGgoRZmVGxMlsLvhrz7exZJBMyEsac/GB Pdttkro7X7diPAsgyML7WYHBsAiilpK/xGQZ/cg4tXrkTYAOunH2bUbh -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTaEeTXHf4eU03QrSyEp Z5/tjjfzsIR8Gsteyb84z4TBGAZJIOXb5SmsACcukHuIz61TNSmb1fN+9qBRZ0M5 T+3JYtu3Qs3q4NKaYfE//PbNSEWJK+TH9Rd50GsDCPNXfCD/4k/WA2a7keDe2AvD Shpf8NvgMpWKBCwnOGsq9vjMvSCJkoIBBxZ1jsWMgbXeLG2jdHT1Cv3EixOOZRL3 PaHPOSU0WV+ddzViQjgUdEVdlqVPKnGLajS3Y2ImcrFqzQcPlzmzhy1TaO/6nYOR vC4grpKlNbupmsXkQS07bkG8vMlC2i5vh36FgWcohwgy1GpAAaTAtgwfkR2FFWbJ kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 390869685109756870688644978987830340203873 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 04:07:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 04:07:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'librarycat.marionfl.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22876016767506240787232159733737694184577428262302127755485203698735483853503435286931703854743964245883423670598651981941381312912406360616323856210224892422275175400433829655970902850935737686868712700305298483436858170261023600463265650009860993457601840136156280962638507828834999720846688009608755716603426525489453847523844041785070678287233793390004799801944496843551331717801793348861240384684671561399515743267028668542488006325931685514280814221763511687722484140382204119220230920510661258224719192747741480996488429420889084910824975529592540397133208377455882015232313125342695153725909626241663814257041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e0e2ee982d5824b512e2be0016660d04e966a4f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librarycat.marionfl.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marion.aspendiscovery.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marionkids.aspendiscovery.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab622a94400000403004830460221008be61ec211905abfc145bc53d41c97bd515b1e8b5167a4429820daca0ca6d2e3022100f1603ebc53f0afb178cee2179d61e1a6be288b1eb9632234980490df2f24ed1f007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab622a9330000040300473045022100b6c3781a1e9be8119e33918f44b1be627b8e0d524086eb9f69c226ea4a7acbe802203d951315738d2531ef63811afee49d3dbaae94d46170a6c942831f8e51b71148 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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