assistance.chess.com
Issued by R3
About this certificate
This digital certificate with serial number 04:57:57:34:8f:35:d2:7b:ca:fb:a0:36:c1:16:a2:95:9f:e0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=assistance.chess.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:57:57:34:8f:35:d2:7b:ca:fb:a0:36:c1:16:a2:95:9f:e0Serial Number (int): 378169625388881371843731386166650651123680
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2f:4e:de:3e:e7:e5:ae:31:6b:ab:77:de:e3:4d:d5:21:f9:93:1d:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c3:61:89:13:12:30:c2:d6:56:70:b5:cc:d3:05:90:7f:0a:7b:d4:62
Fingerprint (sha256): 17:c6:9d:d7:a2:bf:b7:96:4f:ee:15:cb:35:8b:dc:42:cd:24:80:01:37:16:df:2f:b9:66:7b:f4:89:e9:ac:e8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate assistance.chess.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for assistance.chess.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
assistance.chess.com
Other certificates including the domain name chess.com
(limited to 100 certificates)
destek.chess.com
www.ridareadymades.com
support13.cdnetworks.net
support5.cdnetworks.net
vault.gcp-staging.chess.com
ssl001.insnw.net
4player.chess.com
suporte.chess.com
ccccms-beta.chess.com
hilfe.chess.com
live.chess.com
grafana.aws.chess.com
ccccms-beta.chess.com
sni.cloudflaressl.com
sni.cloudflaressl.com
links.chess.com
masterbooker.com
support13.cdnetworks.net
support13.cdnetworks.net
sni.cloudflaressl.com
assistance.chess.com
chess.com
support5.cdnetworks.net
oauth.chess.com
sni.cloudflaressl.com
support5.cdnetworks.net
support5.cdnetworks.net
services.chess.com
sni.cloudflaressl.com
cccc.chess.com
ssl001.insnw.net
pomoc.chess.com
daxmareba.chess.com
ssl001.insnw.net
www.chess.com
status.chess.com
variants.gcp-prod.chess.com
www.nate-fleming.com
report.koledasolus.bycopilot.com
live.chess.com
support5.cdnetworks.net
support5.cdnetworks.net
support5.cdnetworks.net
ssl001.insnw.net
ssl001.insnw.net
support13.cdnetworks.net
services.chess.com
status.chess.com
support13.cdnetworks.net
support5.cdnetworks.net
newman.chess.com
support13.cdnetworks.net
chess.com
sni.cloudflaressl.com
verify.chess.com
spravka.chess.com
static.chess.com
support.chess.com
ssl001.insnw.net
ayuda.chess.com
gradle-cache-eu-central-1-a1-prod.aws.chess.com
ssl001.insnw.net
report.koledasolus.bycopilot.com
ssl001.insnw.net
support5.cdnetworks.net
support5.cdnetworks.net
support5.cdnetworks.net
dovidka.chess.com
support13.cdnetworks.net
chess.com
treasure.chess.com
destek.chess.com
treasure.chess.com
support5.cdnetworks.net
analysis.chess.com
pomoc.chess.com
support13.cdnetworks.net
assistance.chess.com
support5.cdnetworks.net
support13.cdnetworks.net
go.chess.com
ccccms-beta.chess.com
infosec2020.2vanx.com
www.resque-prod-k8s.chess.com
app.4di2.ch
ksupport.chess.com
services.chess.com
www.wheelofnames.info
ssl001.insnw.net
ccccms-beta.chess.com
register.fishfacts.com
status.chess.com
links.mustwants.com
chess.com
variants.gcp-prod.chess.com
support13.cdnetworks.net
support13.cdnetworks.net
www.autorebalance.co
dex.aws.chess.com
*.chess.com
www.ridareadymades.com
support13.cdnetworks.net
support5.cdnetworks.net
vault.gcp-staging.chess.com
ssl001.insnw.net
4player.chess.com
suporte.chess.com
ccccms-beta.chess.com
hilfe.chess.com
live.chess.com
grafana.aws.chess.com
ccccms-beta.chess.com
sni.cloudflaressl.com
sni.cloudflaressl.com
links.chess.com
masterbooker.com
support13.cdnetworks.net
support13.cdnetworks.net
sni.cloudflaressl.com
assistance.chess.com
chess.com
support5.cdnetworks.net
oauth.chess.com
sni.cloudflaressl.com
support5.cdnetworks.net
support5.cdnetworks.net
services.chess.com
sni.cloudflaressl.com
cccc.chess.com
ssl001.insnw.net
pomoc.chess.com
daxmareba.chess.com
ssl001.insnw.net
www.chess.com
status.chess.com
variants.gcp-prod.chess.com
www.nate-fleming.com
report.koledasolus.bycopilot.com
live.chess.com
support5.cdnetworks.net
support5.cdnetworks.net
support5.cdnetworks.net
ssl001.insnw.net
ssl001.insnw.net
support13.cdnetworks.net
services.chess.com
status.chess.com
support13.cdnetworks.net
support5.cdnetworks.net
newman.chess.com
support13.cdnetworks.net
chess.com
sni.cloudflaressl.com
verify.chess.com
spravka.chess.com
static.chess.com
support.chess.com
ssl001.insnw.net
ayuda.chess.com
gradle-cache-eu-central-1-a1-prod.aws.chess.com
ssl001.insnw.net
report.koledasolus.bycopilot.com
ssl001.insnw.net
support5.cdnetworks.net
support5.cdnetworks.net
support5.cdnetworks.net
dovidka.chess.com
support13.cdnetworks.net
chess.com
treasure.chess.com
destek.chess.com
treasure.chess.com
support5.cdnetworks.net
analysis.chess.com
pomoc.chess.com
support13.cdnetworks.net
assistance.chess.com
support5.cdnetworks.net
support13.cdnetworks.net
go.chess.com
ccccms-beta.chess.com
infosec2020.2vanx.com
www.resque-prod-k8s.chess.com
app.4di2.ch
ksupport.chess.com
services.chess.com
www.wheelofnames.info
ssl001.insnw.net
ccccms-beta.chess.com
register.fishfacts.com
status.chess.com
links.mustwants.com
chess.com
variants.gcp-prod.chess.com
support13.cdnetworks.net
support13.cdnetworks.net
www.autorebalance.co
dex.aws.chess.com
*.chess.com
Certificate
The complete raw certificate details for assistance.chess.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISBFdXNI810nvK+6A2wRailZ/gMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTEwMTMyMTQ4MjhaFw0yMjAxMTEyMTQ4MjdaMB8xHTAbBgNVBAMT FGFzc2lzdGFuY2UuY2hlc3MuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAnCXEt397DoQvThX/gr53Sayogh4HrqSY5vbJs8aOzGkKOAQfB9WujmKX NncrSprCGhDnZhjY7FKLFj8bxlEe/8sqGkz35cXsJi/9kisS/6oIMr1feUvY2a5g YNnkPKdsVOfK8q9lpSkJMY/EFz476e4BKzP+uO2MZiglU8vDsChXscFeB9TybtX1 le29zCY33jJPDqYgHA4tn7MrEriWQXZff4BBhPHA5uZktIIkhOaOjj6SrYGMKrcJ w79PcmQtmBqlXf3F0hOSpfuA0cnanC1X8dxr0d6CWJsWkMBEt3LSefcZboIax1Ql 5fmlRLZO8/qsItD/LozCQVZjakM8ym+e469OWrXyrbj26jx6yQvhcueLX8+cLcT5 d6QX7WJ3EZZf7sLzUB9gmRAb0Dqj3cZTQYDT03vg3AQq9kEeXGdjkAJAEevjUdSp 9SPG9KUcaNGZw1pThxNvcyk306rrokM5SNMlbad5GFV9LqhLWvaKtF6BvkEBTeyR 2OL1ZC2VugHwOIXD2cSeREsbKWkt+0UxtJwPm9Z1LxWg1w3I1AQe/LeFGx/VhVdj JJL9i9YjtIR+zAXxamvLHHL/nGJylEjCtMAL2/jV0SJgKgSwgBcquf6ym5uNiLeW 1tk8BxiiMHDe/VvAQo4dhiawmDJYcyvnUUHhT9hRV2mQ+F1pttUCAwEAAaOCAVww ggFYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUL07ePuflrjFrq3fe403VIfmTHdww HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHwYDVR0RBBgwFoIUYXNzaXN0YW5jZS5j aGVzcy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHW eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAB1N/fPqJJIdLz2EZDu2CfYA JwUaPrx0AYWzr0jwTkxcKqLJx+siv0MgPeATAgY2ZwEzfB9+7ehhr3ECQZOQ7BEF T2CKlhuOBjuPYjqNOfx9Y2sxB98UQAk6ScVYudNXpU/H3wjGOxrU79eqkUnYvEAX ghy0qxZuCDLl9TIoIobp9EXvpeC3kOtGfWF0WvX3ygW4TzEzZskiEoGW3T4Nim97 DGWDRXKF9eJ8rMdVfavLeBkEIVh12jLoFliZ6TQKeVvd3pHGEPmkYngWEiZyZIit 70qrLnmfPCTJUsgK/6xHHruYlgkoRP+qnV0YbnAqcIqNqU3PZ+cXusM4i1S+5n4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnCXEt397DoQvThX/gr53 Sayogh4HrqSY5vbJs8aOzGkKOAQfB9WujmKXNncrSprCGhDnZhjY7FKLFj8bxlEe /8sqGkz35cXsJi/9kisS/6oIMr1feUvY2a5gYNnkPKdsVOfK8q9lpSkJMY/EFz47 6e4BKzP+uO2MZiglU8vDsChXscFeB9TybtX1le29zCY33jJPDqYgHA4tn7MrEriW QXZff4BBhPHA5uZktIIkhOaOjj6SrYGMKrcJw79PcmQtmBqlXf3F0hOSpfuA0cna nC1X8dxr0d6CWJsWkMBEt3LSefcZboIax1Ql5fmlRLZO8/qsItD/LozCQVZjakM8 ym+e469OWrXyrbj26jx6yQvhcueLX8+cLcT5d6QX7WJ3EZZf7sLzUB9gmRAb0Dqj 3cZTQYDT03vg3AQq9kEeXGdjkAJAEevjUdSp9SPG9KUcaNGZw1pThxNvcyk306rr okM5SNMlbad5GFV9LqhLWvaKtF6BvkEBTeyR2OL1ZC2VugHwOIXD2cSeREsbKWkt +0UxtJwPm9Z1LxWg1w3I1AQe/LeFGx/VhVdjJJL9i9YjtIR+zAXxamvLHHL/nGJy lEjCtMAL2/jV0SJgKgSwgBcquf6ym5uNiLeW1tk8BxiiMHDe/VvAQo4dhiawmDJY cyvnUUHhT9hRV2mQ+F1pttUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 378169625388881371843731386166650651123680 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 21:48:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 21:48:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assistance.chess.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 637026356372208693081038309959557778285382197848276669196676485299113760104526973218732071546643085624116026457565029006137816958345256290702404683685333780233661672719328910842154716292690429685372410090421300290791008945930780814824148704339805261558501853577950993359911481299982260372670465733408978126266875653433800629639494014273804803246250990491854202617672059963902998247987759741006786592154417998470170613204599184137185670804106382198442271607538430663196638065729929094355198008454521647617651418947673336036340230785285147480353198705391236916504206483570163581100465322327141171900305400187648617487900931704186727426787516913912469169982163107199379309880042607868009226654659753545192996236281820315286207415781396235102113190436645658266584791676908971982420106373211007640311891996929645830120170827061788031683842894234430325848173507124050346025483751458029747566875845377111359770497026763378511742052891433763296041974134840104415944882710819804039818772572362730212594453769109605314288737780739527949977679965690390699469956541451693706896191511915574458119021913202917844642231364033972886166524931443403027565661457496513976533184681878150450241593187358847855632720076929796637962143514657976129025586901 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2f4ede3ee7e5ae316bab77dee34dd521f9931ddc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistance.chess.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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