voyager.corp.luno.com
Issued by R3
About this certificate
This digital certificate with serial number 03:8f:95:76:ed:a1:1c:58:99:07:e2:88:60:a9:97:8f:ec:ee was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=voyager.corp.luno.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8f:95:76:ed:a1:1c:58:99:07:e2:88:60:a9:97:8f:ec:eeSerial Number (int): 310195908747071782708514196288942856203502
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 89:ea:fe:32:a9:54:66:90:7f:6c:8f:37:c4:e1:dc:df:f0:b9:f9:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 56:a7:e9:25:18:9d:c2:b2:6a:e5:1f:b7:f6:59:87:65:92:58:8b:81
Fingerprint (sha256): 17:a2:a2:d9:2a:76:be:23:cb:71:a0:fe:3a:5c:35:40:18:2a:4b:5e:33:e3:7c:ee:62:f8:70:5b:77:98:79:b6
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate voyager.corp.luno.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for voyager.corp.luno.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
voyager.corp.luno.com
Other certificates including the domain name luno.com
(limited to 100 certificates)
nebula.corp.luno.com
trade.luno.com
app-status.cloudsign.jp
*.corp.luno.com
app-status.cloudsign.jp
ssl425545.cloudflaressl.com
try.luno.com
*.corp.luno.com
confluence-staging.corp.luno.com
one.luno.com
lunobase.corp.luno.com
corp.luno.com
*.corp.luno.com
unifi-controller.corp.luno.com
discover.luno.com
ssl425545.cloudflaressl.com
discover.luno.com
ajax-geo.staging.luno.com
apollo.corp.luno.com
luno.com
wordpress.prod.luno.com
app-status.cloudsign.jp
staging.luno.com
*.corp.luno.com
app-status.cloudsign.jp
app-status.cloudsign.jp
nebula.corp.luno.com
careers.luno.com
luno.com
try.luno.com
app-status.cloudsign.jp
staging.luno.com
corp.luno.com
one.luno.com
ajax-geo.staging.luno.com
one.luno.com
discover.luno.com
staging.luno.com
staging.luno.com
sandbox.luno.com
api-geo.staging.luno.com
*.staging.luno.com
try.luno.com
any-quote.blueur.com
trade.staging.luno.com
sni.cloudflaressl.com
app-status.cloudsign.jp
try.luno.com
ajax-geo.staging.luno.com
trade.luno.com
luno.com
ajax-geo.staging.luno.com
sni189482.cloudflaressl.com
staging.luno.com
app-status.cloudsign.jp
invest.luno.com
staging.luno.com
app-status.cloudsign.jp
papercut.corp.luno.com
app-status.cloudsign.jp
luno.com
ssl425544.cloudflaressl.com
ajax-geo.staging.luno.com
ajax-geo.staging.luno.com
app-status.cloudsign.jp
ajax-geo.staging.luno.com
uob-jwt.luno.com
*.corp.luno.com
*.staging.luno.com
crypto.luno.com
app-status.cloudsign.jp
sni189482.cloudflaressl.com
voyager.corp.luno.com
sni.cloudflaressl.com
corp.luno.com
api-geo.staging.luno.com
luno.com
*.luno.com
one.luno.com
sandbox.luno.com
new2-www.luno.com
*.staging.luno.com
sw.luno.com
uob-jwt.luno.com
discover.luno.com
ssl425545.cloudflaressl.com
dev.v3.playbook.vc
app-status.cloudsign.jp
luno.com
ajax-geo.staging.luno.com
app-status.cloudsign.jp
ajax-geo.staging.luno.com
staging.luno.com
staging.luno.com
invest.luno.com
staging.luno.com
ap-southeast-3.prod.luno.com
app-status.cloudsign.jp
ssl425544.cloudflaressl.com
staging.luno.com
trade.luno.com
app-status.cloudsign.jp
*.corp.luno.com
app-status.cloudsign.jp
ssl425545.cloudflaressl.com
try.luno.com
*.corp.luno.com
confluence-staging.corp.luno.com
one.luno.com
lunobase.corp.luno.com
corp.luno.com
*.corp.luno.com
unifi-controller.corp.luno.com
discover.luno.com
ssl425545.cloudflaressl.com
discover.luno.com
ajax-geo.staging.luno.com
apollo.corp.luno.com
luno.com
wordpress.prod.luno.com
app-status.cloudsign.jp
staging.luno.com
*.corp.luno.com
app-status.cloudsign.jp
app-status.cloudsign.jp
nebula.corp.luno.com
careers.luno.com
luno.com
try.luno.com
app-status.cloudsign.jp
staging.luno.com
corp.luno.com
one.luno.com
ajax-geo.staging.luno.com
one.luno.com
discover.luno.com
staging.luno.com
staging.luno.com
sandbox.luno.com
api-geo.staging.luno.com
*.staging.luno.com
try.luno.com
any-quote.blueur.com
trade.staging.luno.com
sni.cloudflaressl.com
app-status.cloudsign.jp
try.luno.com
ajax-geo.staging.luno.com
trade.luno.com
luno.com
ajax-geo.staging.luno.com
sni189482.cloudflaressl.com
staging.luno.com
app-status.cloudsign.jp
invest.luno.com
staging.luno.com
app-status.cloudsign.jp
papercut.corp.luno.com
app-status.cloudsign.jp
luno.com
ssl425544.cloudflaressl.com
ajax-geo.staging.luno.com
ajax-geo.staging.luno.com
app-status.cloudsign.jp
ajax-geo.staging.luno.com
uob-jwt.luno.com
*.corp.luno.com
*.staging.luno.com
crypto.luno.com
app-status.cloudsign.jp
sni189482.cloudflaressl.com
voyager.corp.luno.com
sni.cloudflaressl.com
corp.luno.com
api-geo.staging.luno.com
luno.com
*.luno.com
one.luno.com
sandbox.luno.com
new2-www.luno.com
*.staging.luno.com
sw.luno.com
uob-jwt.luno.com
discover.luno.com
ssl425545.cloudflaressl.com
dev.v3.playbook.vc
app-status.cloudsign.jp
luno.com
ajax-geo.staging.luno.com
app-status.cloudsign.jp
ajax-geo.staging.luno.com
staging.luno.com
staging.luno.com
invest.luno.com
staging.luno.com
ap-southeast-3.prod.luno.com
app-status.cloudsign.jp
ssl425544.cloudflaressl.com
staging.luno.com
Certificate
The complete raw certificate details for voyager.corp.luno.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISA4+Vdu2hHFiZB+KIYKmXj+zuMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA2MTYxOTM4MThaFw0yMTA5MTQxOTM4MTdaMCAxHjAcBgNVBAMT FXZveWFnZXIuY29ycC5sdW5vLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAJYP0lsqgQ/2tSCDDYyepgoBF1IzWwscuw4FY5QdeKACjbxmBe3sXVwL zVXy57XnyJU/QIyJ73DynRJQfqzR+wr2iVOIx9X4wnknBYMEno97KefwuC2VPhNO U/uHKN2cNx5ZcpfOh6TpBzcpHBToUvXXhAiwMvbWNFmcZAp0FpYHKs5iudljyRQM Mj2Ij0G1aGJNdZj4GSjHKtMoQZ1KL0T2QBhZqOxI8xu3bXLHupywZNGXFfEj/R3Q 9tDEeramlh+hi/DILwG3ClKm3OIGIVTIPgIA2EdJe1tulHBM4isRMN/JyYK9PT3+ T9LpK/TR+MA1dO4Xa5PjKKip3FXT5l1siD88CoV233Z/K078ObthZwcbC/YBG38K LXiknj/c94E59JmwS+2yp+ASy4v5UOQgtQKT3ZeYnCfaIkwiOb5QS24XJnfAObcA CqMUT80s40jBdI48osH8k7YkwoJ3ELiQpYb9uVvxpAfqeYXCpKsDnzwLO7WQXcfP uCHNDyWb0sMu58OZxq0OniSPYcM0pCQd8G94bWgnTxYcnpDr9u7CX2REBWMMXX8i JnRWN68Hm9RTKWVuCLyYidFCzUM2xK2+O5Hq/FxngAc9Fs9RMPqmqtIfCRWky43Y zYHeJm+hxitA+e4hT2lPu0xm+zXRgrxYM8ExrvkgFTPYrxZSdgcNAgMBAAGjggFd MIIBWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFInq/jKpVGaQf2yPN8Th3N/wufnA MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCAGA1UdEQQZMBeCFXZveWFnZXIuY29y cC5sdW5vLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy4WueNMKQh42OjIcAWS jNa88+TJcckA28ou2rKr7Y/NFGzApftP8zoYjxuz0/KdzdGWSOFHTYzcpwT/ZWqu CLMF+HdGskJ2jAEeyWIqiCub37xTtL/dfS34NCQLxzEwHoxBdk+s24FhdKFfGEpR PyI2Gu0uWrAE6yif9ZZBeuPPAtU0m5mfrAb1IK+mqV2rPo0MwBKPQtV7a4IdnvPl 3ZfHTBKFwgqI1ZBIa0bAx90cnqhxUVX66vwSP8097yVZS4JamxgiRbRuJTYtqAE0 jFa9VjIP5XnWU7Qxo683H4WbcKeOspwyikDJWUh4YXw5OMsLA2+GkZeYbwCYXAc7 Xg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlg/SWyqBD/a1IIMNjJ6m CgEXUjNbCxy7DgVjlB14oAKNvGYF7exdXAvNVfLntefIlT9AjInvcPKdElB+rNH7 CvaJU4jH1fjCeScFgwSej3sp5/C4LZU+E05T+4co3Zw3Hllyl86HpOkHNykcFOhS 9deECLAy9tY0WZxkCnQWlgcqzmK52WPJFAwyPYiPQbVoYk11mPgZKMcq0yhBnUov RPZAGFmo7EjzG7dtcse6nLBk0ZcV8SP9HdD20MR6tqaWH6GL8MgvAbcKUqbc4gYh VMg+AgDYR0l7W26UcEziKxEw38nJgr09Pf5P0ukr9NH4wDV07hdrk+MoqKncVdPm XWyIPzwKhXbfdn8rTvw5u2FnBxsL9gEbfwoteKSeP9z3gTn0mbBL7bKn4BLLi/lQ 5CC1ApPdl5icJ9oiTCI5vlBLbhcmd8A5twAKoxRPzSzjSMF0jjyiwfyTtiTCgncQ uJClhv25W/GkB+p5hcKkqwOfPAs7tZBdx8+4Ic0PJZvSwy7nw5nGrQ6eJI9hwzSk JB3wb3htaCdPFhyekOv27sJfZEQFYwxdfyImdFY3rweb1FMpZW4IvJiJ0ULNQzbE rb47ker8XGeABz0Wz1Ew+qaq0h8JFaTLjdjNgd4mb6HGK0D57iFPaU+7TGb7NdGC vFgzwTGu+SAVM9ivFlJ2Bw0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 310195908747071782708514196288942856203502 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-16 19:38:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 19:38:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'voyager.corp.luno.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 612198746606024423316098030450736972163395013464030826156491582095499383909596185785956565127627570139890258575923501545001656807337782568136169410601482549751559093310435422190419059416265893876431648473787381312385158335903732756739799748251774672885683415617850896304515251056627090201755556677949421353500925540082445732108329432775293924349192336567606286200299161248632804503733701880945911579186137876204180924433319622123686545924828669866402772987756584557696901687888454587882782758851534778805823963973045057329826259491891682886223402011920467230637470295151699610274564390503952259870831242678526217840879995597822706144925032167370839530814750540269952895672820087359864919280359578774060051589441233185224140644346397761535263319860511663132565346226972507092947005916662757341183131647280463713331882105994516413207451014276997121756198986098788676268177065674237973853927796194212059428691721734047048481034832320103003795917543126990761292292478530955948626734077771105667979833389112257825102058747659968305432028018750989549290335312283696214743326209165456030478724132856140393499263799318273497360271483881613778873851312556924319356897328583370432996421949410866086063380416652268262590107923881613661486581517 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 89eafe32a95466907f6c8f37c4e1dcdff0b9f9c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyager.corp.luno.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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