gov.os.city
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:db:0f:f5:df:c3:86:77:ab:bf:48:0c:56:04:74:87:33:f4 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gov.os.city
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:db:0f:f5:df:c3:86:77:ab:bf:48:0c:56:04:74:87:33:f4Serial Number (int): 335879911222101827178359117671554548708340
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3f:bb:fe:85:ac:0f:32:d9:94:0c:89:b0:6a:1d:c0:69:d9:5c:9b:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 33:11:02:24:fd:56:19:a0:11:f7:46:b4:77:3a:14:b7:8a:24:b5:b6
Fingerprint (sha256): 15:5b:79:b6:c7:a1:5d:77:aa:90:1e:ea:a2:5c:c5:0e:ba:f8:54:82:a7:de:1d:8b:82:3b:2f:c1:0f:87:46:e8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gov.os.city
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gov.os.city
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
corporate.os.city
gov.os.city
www.corporate.os.city
www.gov.os.city
gov.os.city
www.corporate.os.city
www.gov.os.city
Other certificates including the domain name os.city
(limited to 100 certificates)
singletally.os.city
artisans.os.city
admin.banana.services
www.kylesheppard.io
overthebunker.com
app-prod.forextb.com
ngo.costalab.net
www.hackkosice.com
os.city
www.ru.memeize.me
app.metisclub.fr
cadadiacuenta.os.city
ekolaj.patnem.com
www.fiasp-udine.it
www.letmeinnovate.com
os.city
www.fitin.io
ods11.os.city
os.city
jonnyibiza.comwww.jonnyibiza.com
gov.os.city
ods11.os.city
vit-dev.app2.1on1navi.com
www.briehubble.com
www.medclar.ro
infosec2020.2vanx.com
janakitti.com
staging--links.pkgx.io
vellorecabs.in
qa-bizworks.gov.taxscribe.app
rrmapping.in
vkb.westhouse-group.com
padraoampla.com.br
do-to.app
blockchain.os.city
pe.f5wc.com
rcloudsoft.app
c.goslash.com
app.standards.site
clients.moneymatters247.co.uk
certificados.upso.edu.ar
navigator-test.sentrex.com
www.kmotorsev.com
www.easteden.app
blockchain.os.city
corporate.os.city
blackpoint.vision
account.earthimpact.me
gov.os.city
app.metisclub.fr
budget.thinkcomputing.ca
meet.os.city
raiseandwin.com
rcloudsoft.app
os.city
www.polymerstudio.ml
www.circuitopenedodecinema.com.br
did.os.city
ai-engineer-aichi-115130720.diendantuyendung.com
my-karte.thurios.com
lmogg.com
stonkmarket.com
uat.condo.ricmasoft.com
stamper.smartheadtest.ru
certificados.upso.edu.ar
warrenlotasgift.com
os.city
incognito-club.online
meet.os.city
mumbai.crycto.io
dev-app.viviclinic.com
os.city
beyond-budget.com
link-stg.upswingfitness.com
blockchain.os.city
blockchain.os.city
os.city
career.towaso.com
adventure.jeremyrabaino.com
os.city
icarus-map.shigureaya.me
os.city
connectrix.app
app.catobot.com
blockchain.os.city
astrologerconnect.com
www.gamboaweb.com.br
certificados.upso.edu.ar
opencall.spotlight.fined.io
fizzsocial.app
fraktiq.art
www.flodri.io
website-dev.econmortgage.com
www.appliedinnovationexchange.com
gestion.vui.cr
portal.bneural.io
timetrackbuddy.com
ngo.costalab.net
www.mattbull.dev
liamjegou.com
artisans.os.city
admin.banana.services
www.kylesheppard.io
overthebunker.com
app-prod.forextb.com
ngo.costalab.net
www.hackkosice.com
os.city
www.ru.memeize.me
app.metisclub.fr
cadadiacuenta.os.city
ekolaj.patnem.com
www.fiasp-udine.it
www.letmeinnovate.com
os.city
www.fitin.io
ods11.os.city
os.city
jonnyibiza.comwww.jonnyibiza.com
gov.os.city
ods11.os.city
vit-dev.app2.1on1navi.com
www.briehubble.com
www.medclar.ro
infosec2020.2vanx.com
janakitti.com
staging--links.pkgx.io
vellorecabs.in
qa-bizworks.gov.taxscribe.app
rrmapping.in
vkb.westhouse-group.com
padraoampla.com.br
do-to.app
blockchain.os.city
pe.f5wc.com
rcloudsoft.app
c.goslash.com
app.standards.site
clients.moneymatters247.co.uk
certificados.upso.edu.ar
navigator-test.sentrex.com
www.kmotorsev.com
www.easteden.app
blockchain.os.city
corporate.os.city
blackpoint.vision
account.earthimpact.me
gov.os.city
app.metisclub.fr
budget.thinkcomputing.ca
meet.os.city
raiseandwin.com
rcloudsoft.app
os.city
www.polymerstudio.ml
www.circuitopenedodecinema.com.br
did.os.city
ai-engineer-aichi-115130720.diendantuyendung.com
my-karte.thurios.com
lmogg.com
stonkmarket.com
uat.condo.ricmasoft.com
stamper.smartheadtest.ru
certificados.upso.edu.ar
warrenlotasgift.com
os.city
incognito-club.online
meet.os.city
mumbai.crycto.io
dev-app.viviclinic.com
os.city
beyond-budget.com
link-stg.upswingfitness.com
blockchain.os.city
blockchain.os.city
os.city
career.towaso.com
adventure.jeremyrabaino.com
os.city
icarus-map.shigureaya.me
os.city
connectrix.app
app.catobot.com
blockchain.os.city
astrologerconnect.com
www.gamboaweb.com.br
certificados.upso.edu.ar
opencall.spotlight.fined.io
fizzsocial.app
fraktiq.art
www.flodri.io
website-dev.econmortgage.com
www.appliedinnovationexchange.com
gestion.vui.cr
portal.bneural.io
timetrackbuddy.com
ngo.costalab.net
www.mattbull.dev
liamjegou.com
Certificate
The complete raw certificate details for gov.os.city in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISA9sP9d/Dhnerv0gMVgR0hzP0MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjcxNDEzMzFaFw0x OTExMjUxNDEzMzFaMBYxFDASBgNVBAMTC2dvdi5vcy5jaXR5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy99gcKqQr38moE9jb2soAyitLoC4wx1g0+cm vUP94FI1CAoPNPNT3mUjan1108t1mWycyq0B3fOqpmA0fHH/J7uTyED6zo6bL1Dw Clab/d9b1/0KGFfV3fn+3D25ap3MQ4VExr/wqGViQpAXoiA8wE1XNEC0Dg50DTXj /5jdiEKD1bGsXVQLmuP30w12+B3x7/PQWLawttF/Z6Hx+mihGmwzIHKZY/gaajwh ADqNNGkqWnxAvJtHEVsAdcSqX8TfTmSWqocCY4Pq3bxnnXqF84NvZt+L5xLE0uJh VkwnubIzKY4zo6gaf+VXS66zVKsLpRBzIVqqMkOnB2E6j8eQXwIDAQABo4ICnDCC ApgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ/u/6FrA8y2ZQMibBqHcBp2VybBzAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MFEGA1UdEQRKMEiCEWNvcnBvcmF0ZS5vcy5jaXR5ggtnb3Yub3MuY2l0eYIVd3d3 LmNvcnBvcmF0ZS5vcy5jaXR5gg93d3cuZ292Lm9zLmNpdHkwTAYDVR0gBEUwQzAI BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw cy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDiaUuu JujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWzTo55pAAAEAwBIMEYCIQCr T58FwUbS8aHowYHi7VWa3/iUC1+kLkePAR5pw0JQQgIhAMjVC7w2Uc00nUIhLJnd xJg6OOftbruee6EpJ/HJ+a0FAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0 5UVH9HgAAAFs06OgUAAABAMARzBFAiEAoYmExcPh9Zu4bfyEuhEgffQBzg9CfbIV UbBpZhHnFr4CIDFbThNpIoVaKWV0JJmExMksTzg2lr639zbDcWaD1/fSMA0GCSqG SIb3DQEBCwUAA4IBAQBd0LX3rPddCaAvULMAIVGjHJ7JC+ncWdlF8l5hGfMRmwXu eKxITo+6azgffu4bcifrm6Jc761r9erEZuQCQqR5XQRvcUya9YZlvumKCSuZhmJT CpzkN0kctvX+iI6Kv1fQdc7PyWocMadHELTS5Q2ZwvnNVkZsPzPydfrm4opvwZMv kYEkUl2IbUKBP0FVImiOUV2QY6sCwNGgjtcUfBPXl7jkyQYh5tNINSi/21el8Mc/ rx/MK7r/4Z8lOQ0o+GuB3ACkoKWsbNs3FfnscGQE633asI1JUHuBfxFB1/8BgvNu Pqiv5p/gCHcZnFg5KG11fbxblvq4IksIvUm+3l1x -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy99gcKqQr38moE9jb2so AyitLoC4wx1g0+cmvUP94FI1CAoPNPNT3mUjan1108t1mWycyq0B3fOqpmA0fHH/ J7uTyED6zo6bL1DwClab/d9b1/0KGFfV3fn+3D25ap3MQ4VExr/wqGViQpAXoiA8 wE1XNEC0Dg50DTXj/5jdiEKD1bGsXVQLmuP30w12+B3x7/PQWLawttF/Z6Hx+mih GmwzIHKZY/gaajwhADqNNGkqWnxAvJtHEVsAdcSqX8TfTmSWqocCY4Pq3bxnnXqF 84NvZt+L5xLE0uJhVkwnubIzKY4zo6gaf+VXS66zVKsLpRBzIVqqMkOnB2E6j8eQ XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335879911222101827178359117671554548708340 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 14:13:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 14:13:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gov.os.city' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25736527073713348999041995617035091252892702145554393926218200647107879442632042116721750178722749985363830619808423331548096889942314708830475858055958860966202884817074533418149647538900110077097127078197081659949213250995738523026482988431586301672634716047032103827387687115877282287075370715246716079382809464684901544440319211558600876407786832490881961113023954043427202104391206361232736407859389694308171203721657074306533381297200986551626341674145385695954006924619076368171495720100822416022386314914008873779201004246205786742965020507630669026965266239327047555131726710354639317798963245745040542634079 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3fbbfe85ac0f32d9940c89b06a1dc069d95c9b07 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.os.city' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gov.os.city' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporate.os.city' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gov.os.city' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cd3a39e690000040300483046022100ab4f9f05c146d2f1a1e8c181e2ed559adff8940b5fa42e478f011e69c3425042022100c8d50bbc3651cd349d42212c99ddc4983a38e7ed6ebb9e7ba12927f1c9f9ad05007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cd3a3a0500000040300473045022100a18984c5c3e1f59bb86dfc84ba11207df401ce0f427db21551b0696611e716be0220315b4e136922855a296574249984c4c92c4f383696beb7f736c3716683d7f7d2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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