archives-staff.library.duq.edu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ff:cc:5e:bc:f8:80:4d:96:30:25:79:48:e3:f1:57:d2:1f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=archives-staff.library.duq.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ff:cc:5e:bc:f8:80:4d:96:30:25:79:48:e3:f1:57:d2:1fSerial Number (int): 348380515779946170902741636245756652802591
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cc:47:84:99:b7:b2:27:a8:20:fa:22:34:4c:78:88:b7:2c:bb:c7:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): be:6e:e4:1b:a0:72:91:f3:f2:aa:55:1f:a6:e3:9e:61:6a:30:31:c5
Fingerprint (sha256): 14:57:4c:60:07:b4:c6:06:b5:40:5d:98:a6:26:8f:76:59:24:7d:27:41:25:e2:d6:03:8f:52:c1:af:c5:bf:3e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate archives-staff.library.duq.edu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for archives-staff.library.duq.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
archives-staff.library.duq.edu
archives.library.duq.edu
archives.library.duq.edu
Other certificates including the domain name duq.edu
(limited to 100 certificates)
wpm.ccmp.eu
sfunder5cert.net
ddc.duq.edu
law.duq.edu
scalefunder.net
ask.library.duq.edu
sfunder5cert.net
dsc.duq.edu
sfunder29cert.net
sso.duq.edu
www.dupress.duq.edu
mosaic.duq.edu
sfunder5cert.net
archives-staff.library.duq.edu
*.msl.duq.edu
scalefunder.net
scalefunder.net
www.dupress.duq.edu
www.dupress.duq.edu
5714315743068160-fe4.pantheonsite.io
www.mathcs.duq.edu
www.sbdc.duq.edu
digital.library.duq.edu
onlinenursing.duq.edu
calendar.library.duq.edu
5714315743068160-fe4.pantheonsite.io
5714315743068160-fe4.pantheonsite.io
duqcrim.com
5714315743068160-fe4.pantheonsite.io
calendar.library.duq.edu
sites.law.duq.edu
sfunder5cert.net
wpm.ccmp.eu
dsc.duq.edu
ddc.duq.edu
scalefunder.net
scalefunder.net
dupress.duq.edu
scalefunder.net
*.duq.edu
ask.library.duq.edu
wpm.ccmp.eu
5714315743068160-fe4.pantheonsite.io
wpm.ccmp.eu
jurismagazine.duqlawblogs.org
quarantine.duq.edu
applications.duq.edu
www.jma.duq.edu
*.authenticate.library.duq.edu
sfunder1cert.net
*.cr.duq.edu
edtech.msltest.duq.edu
dupress.duq.edu
*.duq.edu
5714315743068160-fe4.pantheonsite.io
ddc.duq.edu
winapps.duq.edu
sfunder15cert.net
wpm.ccmp.eu
scalefunder.net
ask.library.duq.edu
calendar.library.duq.edu
calendar.library.duq.edu
5714315743068160-fe4.pantheonsite.io
jma.msl.duq.edu
dayofgiving.duq.edu
archives-staff.library.duq.edu
archives-staff.library.duq.edu
apply.duq.edu
www.dupress.duq.edu
wpm.ccmp.eu
edtech.msl.duq.edu
scalefunder.net
www.dupress.duq.edu
5714315743068160-fe4.pantheonsite.io
www.dupress.duq.edu
dsc.duq.edu
scalefunder.net
dsc.duq.edu
guides.library.duq.edu
5714315743068160-fe4.pantheonsite.io
scalefunder.net
applications.duq.edu
sedfmweb.cr.duq.edu
sfunder5cert.net
sfunder1cert.net
*.duq.edu
wpm.ccmp.eu
5714315743068160-fe4.pantheonsite.io
view.mail.online.duq.edu
wpm.ccmp.eu
*.duq.edu
5714315743068160-fe4.pantheonsite.io
discover.duq.edu
guides.library.duq.edu
cpass-pub.cr.duq.edu
dupress.duq.edu
mosaic.duq.edu
5714315743068160-fe4.pantheonsite.io
gtm.duq.edu
sfunder5cert.net
ddc.duq.edu
law.duq.edu
scalefunder.net
ask.library.duq.edu
sfunder5cert.net
dsc.duq.edu
sfunder29cert.net
sso.duq.edu
www.dupress.duq.edu
mosaic.duq.edu
sfunder5cert.net
archives-staff.library.duq.edu
*.msl.duq.edu
scalefunder.net
scalefunder.net
www.dupress.duq.edu
www.dupress.duq.edu
5714315743068160-fe4.pantheonsite.io
www.mathcs.duq.edu
www.sbdc.duq.edu
digital.library.duq.edu
onlinenursing.duq.edu
calendar.library.duq.edu
5714315743068160-fe4.pantheonsite.io
5714315743068160-fe4.pantheonsite.io
duqcrim.com
5714315743068160-fe4.pantheonsite.io
calendar.library.duq.edu
sites.law.duq.edu
sfunder5cert.net
wpm.ccmp.eu
dsc.duq.edu
ddc.duq.edu
scalefunder.net
scalefunder.net
dupress.duq.edu
scalefunder.net
*.duq.edu
ask.library.duq.edu
wpm.ccmp.eu
5714315743068160-fe4.pantheonsite.io
wpm.ccmp.eu
jurismagazine.duqlawblogs.org
quarantine.duq.edu
applications.duq.edu
www.jma.duq.edu
*.authenticate.library.duq.edu
sfunder1cert.net
*.cr.duq.edu
edtech.msltest.duq.edu
dupress.duq.edu
*.duq.edu
5714315743068160-fe4.pantheonsite.io
ddc.duq.edu
winapps.duq.edu
sfunder15cert.net
wpm.ccmp.eu
scalefunder.net
ask.library.duq.edu
calendar.library.duq.edu
calendar.library.duq.edu
5714315743068160-fe4.pantheonsite.io
jma.msl.duq.edu
dayofgiving.duq.edu
archives-staff.library.duq.edu
archives-staff.library.duq.edu
apply.duq.edu
www.dupress.duq.edu
wpm.ccmp.eu
edtech.msl.duq.edu
scalefunder.net
www.dupress.duq.edu
5714315743068160-fe4.pantheonsite.io
www.dupress.duq.edu
dsc.duq.edu
scalefunder.net
dsc.duq.edu
guides.library.duq.edu
5714315743068160-fe4.pantheonsite.io
scalefunder.net
applications.duq.edu
sedfmweb.cr.duq.edu
sfunder5cert.net
sfunder1cert.net
*.duq.edu
wpm.ccmp.eu
5714315743068160-fe4.pantheonsite.io
view.mail.online.duq.edu
wpm.ccmp.eu
*.duq.edu
5714315743068160-fe4.pantheonsite.io
discover.duq.edu
guides.library.duq.edu
cpass-pub.cr.duq.edu
dupress.duq.edu
mosaic.duq.edu
5714315743068160-fe4.pantheonsite.io
gtm.duq.edu
Certificate
The complete raw certificate details for archives-staff.library.duq.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISA//MXrz4gE2WMCV5SOPxV9IfMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMTIwMjMzNDhaFw0x OTA1MTMwMjMzNDhaMCkxJzAlBgNVBAMTHmFyY2hpdmVzLXN0YWZmLmxpYnJhcnku ZHVxLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALwEuzS1pHQh AkNhsU3d7US2F36/W8MK9e1ueWFF2dEDexUo8/lq1+RQUBtGSzr+mKTB7mJhghQI WkU9sXD61nTCEfH50qZW7JMWLs2hqHqbtXmyILR4CijZw1pY00Wp5uTZwGuKdHlm p0fRrIuUWZOHblg7aj1wpRRpTeWTgE+hw+D878SqTFiezm2tyigw6dBJdZV7wt5z gPmZd+Sp647Ok7eg2Ou7XsCqTXMEK0l3PYKXGig+NtTPRI8alQSHIlkg3W7cW0Ii G0VNORcu+8IxbJYsE5tAezgpQBPapDQgn15QhUnCRWRvFdzug3B8gR6XUYN9DlRx ZmXRJ6pqJdsCAwEAAaOCAo4wggKKMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUzEeE mbeyJ6gg+iI0THiItyy7x6EwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzBDBgNVHREEPDA6gh5hcmNoaXZlcy1zdGFmZi5s aWJyYXJ5LmR1cS5lZHWCGGFyY2hpdmVzLmxpYnJhcnkuZHVxLmVkdTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3 AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABaN/ElU4AAAQDAEgw RgIhAIvR1qTylXuktCFOqLRshho/7V1OEWGipelljKo+sEFeAiEA31G2p3bRBHpX MUzlosOM/oEOorzIY2mUx7FJj7h5eGwAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWjfxJWOAAAEAwBHMEUCIQDPMl5yWhvzEQoO5sADZP112wQA 1CvBFEiOZwl0pETC7AIgF3t5WuKwcLWWH+0ZLa4ilFiJhsWeCPeXGZi/wT74CIAw DQYJKoZIhvcNAQELBQADggEBADn0E59SR0/ScfH0W1AZmEjnY5lOgS5r0maiavaN A301/b3DvtUyUNfOm2nRzR0E0REOv4gA+odWdq35Ph6c7JwBAYBFgK04izCCiTTs JIh4sk7mmZ8jHyIBroCHuNsGfkdElbHavKB6c3HzdN2BMSNf39KbfyY/NnF2lfS1 XwgAlzdQy7nca3hVpUFCvGY04BBomcB+1Qr1w4KDY8DgadxcuMDan1sU3NEsNPtz ezMlizIM66dTu+RkxxFuV0psoMbVb8vQsI4uk+Lk9M5M2+kzS/nlnBzS84osQu7l f9SwEmB/c9GnsKkEbBbx4z/jmwiWmkTBmK5ElGAlPN6q2+0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAS7NLWkdCECQ2GxTd3t RLYXfr9bwwr17W55YUXZ0QN7FSjz+WrX5FBQG0ZLOv6YpMHuYmGCFAhaRT2xcPrW dMIR8fnSplbskxYuzaGoepu1ebIgtHgKKNnDWljTRanm5NnAa4p0eWanR9Gsi5RZ k4duWDtqPXClFGlN5ZOAT6HD4PzvxKpMWJ7Oba3KKDDp0El1lXvC3nOA+Zl35Knr js6Tt6DY67tewKpNcwQrSXc9gpcaKD421M9EjxqVBIciWSDdbtxbQiIbRU05Fy77 wjFsliwTm0B7OClAE9qkNCCfXlCFScJFZG8V3O6DcHyBHpdRg30OVHFmZdEnqmol 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348380515779946170902741636245756652802591 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 02:33:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 02:33:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'archives-staff.library.duq.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23735134411306965171223972677553637221275533220524652777034321711807797122335308453262151486987476109245077917170472099789238740967883121965405156782177507020294737613915273147613870976220351342504662118432116152827822198964773465845547073786213522300881811246529891574078871079411646372302391177099709521663218592359867659951751148234858514999489487195882133129983223047465658225458296077161833037969390586092891162615467263216782777303228991169048465683660001579030331676651292860859493152941436660825225684566251484778825445188695368408160029776497129727069324005128103157632327899603600060875436678096422108276187 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cc478499b7b227a820fa22344c7888b72cbbc7a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archives-staff.library.duq.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archives.library.duq.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168dfc4954e00000403004830460221008bd1d6a4f2957ba4b4214ea8b46c861a3fed5d4e1161a2a5e9658caa3eb0415e022100df51b6a776d1047a57314ce5a2c38cfe810ea2bcc8636994c7b1498fb879786c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168dfc4958e0000040300473045022100cf325e725a1bf3110a0ee6c00364fd75db0400d42bc114488e670974a444c2ec0220177b795ae2b070b5961fed192dae2294588986c59e08f7971998bfc13ef80880 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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