collegian.richmond.edu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:2a:4b:93:c7:e6:01:86:79:26:f6:b7:6f:f6:72:17:a7:80 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=collegian.richmond.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2a:4b:93:c7:e6:01:86:79:26:f6:b7:6f:f6:72:17:a7:80Serial Number (int): 362841462559464935920244471255328953444224
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 00:12:e5:8c:f2:e4:ad:c1:34:48:5e:be:f3:71:59:42:17:a1:b7:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 26:35:11:54:20:cb:a2:2e:10:8d:4c:b0:4c:ea:57:8f:88:ff:f1:3c
Fingerprint (sha256): 19:ae:4e:68:74:32:95:29:e1:b5:84:79:5b:4f:40:e4:98:0e:e8:df:1e:0a:b8:e4:dd:cb:14:78:07:c6:3e:34
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate collegian.richmond.edu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for collegian.richmond.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
collegian.richmond.edu
richmond.dlconsulting.com
richmond.dlconsulting.com
Other certificates including the domain name richmond.edu
(limited to 100 certificates)
lawreview.richmond.edu
ems.richmond.edu
codingbootcamp.richmond.edu
collegian.richmond.edu
spiderchallenge.richmond.edu
cygnet.richmond.edu
connect.richmond.edu
spdr-rw.richmond.edu
blackboard.richmond.edu
md.richmond.edu
spidertechnet.richmond.edu
www.lawinfo.richmond.edu
lawreview.richmond.edu
spdr-vm.richmond.edu
king.richmond.edu
blog.richmond.edu
onecardweb.richmond.edu
effect.richmond.edu
libguides.richmond.edu
connect.richmond.edu
secure-usea1-1.tessituranetwork.com
bootcamps.richmond.edu
spidertechhub.richmond.edu
webapps.richmond.edu
webapps.richmond.edu
collegian.richmond.edu
spidergiving.richmond.edu
sorry.richmond.edu
masterplan.richmond.edu
avs-ess-sessmgr-sm100.richmond.edu
cassini.richmond.edu
secure-usea1-1.tessituranetwork.com
askboatwright.richmond.edu
secure-usea1-1.tessituranetwork.com
*.richmond.edu
dsl.richmond.edu
libsystest2.richmond.edu
libcal.richmond.edu
secure-usea1-1.tessituranetwork.com
www.student.richmond.edu
secure-usea1-1.tessituranetwork.com
idp.richmond.edu
lawreview.richmond.edu
effect.richmond.edu
jerkshistory.richmond.edu
emstest.richmond.edu
policy.richmond.edu
archives.richmond.edu
sprd-vm.richmond.edu
securessl-est1.tessituranetworkhost.com
dsl.richmond.edu
secure-usea1-1.tessituranetwork.com
websecure.richmond.edu
libcal.richmond.edu
xblog.richmond.edu
testapp.richmond.edu
secure-usea1-1.tessituranetwork.com
webpass.richmond.edu
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
tickets.modlin.richmond.edu
collegian.richmond.edu
codingbootcamp.richmond.edu
xemq20u1.richmond.edu
emstest.richmond.edu
securessl-est1.tessituranetworkhost.com
avs-cma.richmond.edu
scholarship.richmond.edu
testforms.richmond.edu
exchangemail.richmond.edu
sailaway.richmond.edu
richmond.edu
bannerweb.richmond.edu
codingbootcamp.richmond.edu
xeadmu.richmond.edu
scholarship.richmond.edu
collegian.richmond.edu
secure-usea1-1.tessituranetwork.com
askboatwright.richmond.edu
securessl-est1.tessituranetworkhost.com
secure-usea1-1.tessituranetwork.com
spdr-cms.richmond.edu
collegian.richmond.edu
urhere.richmond.edu
idp.richmond.edu
secure-usea1-1.tessituranetwork.com
xess19u1.richmond.edu
avs-ric-avp2.richmond.edu
helping.richmond.edu
upgradeweb.richmond.edu
*.coursedog.com
bootcamps.richmond.edu
xemc20u1.richmond.edu
libcal.richmond.edu
avs-ess-avp.richmond.edu
metcalf.richmond.edu
wwws.richmond.edu
effect.richmond.edu
securessl-est1.tessituranetworkhost.com
ldap.richmond.edu
ems.richmond.edu
codingbootcamp.richmond.edu
collegian.richmond.edu
spiderchallenge.richmond.edu
cygnet.richmond.edu
connect.richmond.edu
spdr-rw.richmond.edu
blackboard.richmond.edu
md.richmond.edu
spidertechnet.richmond.edu
www.lawinfo.richmond.edu
lawreview.richmond.edu
spdr-vm.richmond.edu
king.richmond.edu
blog.richmond.edu
onecardweb.richmond.edu
effect.richmond.edu
libguides.richmond.edu
connect.richmond.edu
secure-usea1-1.tessituranetwork.com
bootcamps.richmond.edu
spidertechhub.richmond.edu
webapps.richmond.edu
webapps.richmond.edu
collegian.richmond.edu
spidergiving.richmond.edu
sorry.richmond.edu
masterplan.richmond.edu
avs-ess-sessmgr-sm100.richmond.edu
cassini.richmond.edu
secure-usea1-1.tessituranetwork.com
askboatwright.richmond.edu
secure-usea1-1.tessituranetwork.com
*.richmond.edu
dsl.richmond.edu
libsystest2.richmond.edu
libcal.richmond.edu
secure-usea1-1.tessituranetwork.com
www.student.richmond.edu
secure-usea1-1.tessituranetwork.com
idp.richmond.edu
lawreview.richmond.edu
effect.richmond.edu
jerkshistory.richmond.edu
emstest.richmond.edu
policy.richmond.edu
archives.richmond.edu
sprd-vm.richmond.edu
securessl-est1.tessituranetworkhost.com
dsl.richmond.edu
secure-usea1-1.tessituranetwork.com
websecure.richmond.edu
libcal.richmond.edu
xblog.richmond.edu
testapp.richmond.edu
secure-usea1-1.tessituranetwork.com
webpass.richmond.edu
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
tickets.modlin.richmond.edu
collegian.richmond.edu
codingbootcamp.richmond.edu
xemq20u1.richmond.edu
emstest.richmond.edu
securessl-est1.tessituranetworkhost.com
avs-cma.richmond.edu
scholarship.richmond.edu
testforms.richmond.edu
exchangemail.richmond.edu
sailaway.richmond.edu
richmond.edu
bannerweb.richmond.edu
codingbootcamp.richmond.edu
xeadmu.richmond.edu
scholarship.richmond.edu
collegian.richmond.edu
secure-usea1-1.tessituranetwork.com
askboatwright.richmond.edu
securessl-est1.tessituranetworkhost.com
secure-usea1-1.tessituranetwork.com
spdr-cms.richmond.edu
collegian.richmond.edu
urhere.richmond.edu
idp.richmond.edu
secure-usea1-1.tessituranetwork.com
xess19u1.richmond.edu
avs-ric-avp2.richmond.edu
helping.richmond.edu
upgradeweb.richmond.edu
*.coursedog.com
bootcamps.richmond.edu
xemc20u1.richmond.edu
libcal.richmond.edu
avs-ess-avp.richmond.edu
metcalf.richmond.edu
wwws.richmond.edu
effect.richmond.edu
securessl-est1.tessituranetworkhost.com
ldap.richmond.edu
Certificate
The complete raw certificate details for collegian.richmond.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISBCpLk8fmAYZ5Jva3b/ZyF6eAMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDUxMjA3NTZaFw0y MDA1MDUxMjA3NTZaMCExHzAdBgNVBAMTFmNvbGxlZ2lhbi5yaWNobW9uZC5lZHUw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUjYVBEBoa1406MshA55Mz o3DscJ5RAKU13GPwhFTnqbDNNIAFkzjgqsm4IwhLaz3h1JDk6vIUPTzz0I9jmZBJ mc7B61ibWWwWoRqb5htxNRYFJiw1QfvRuytmtYhXqfs1tj1qinCW/RXOM4K3IJgY LJtACU23WNngn1lt9Wp8/FguPb0vm9Q/As4QB1mQw7FhfO5Adv9xL8QNvX+p1w6I AzVaHblOXUd25g5i64J2mxuI+VgFL16MM5pRlUemeCkEsMFT3/B12jBvampRFgIG rYJYgKTgtGj/h/efonX1gOYmnkFpBBAtVCHvse3a2GBF7yYReErLyMHDF/ts8Iox AgMBAAGjggKGMIICgjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAAS5Yzy5K3BNEhe vvNxWUIXobe+MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wPAYDVR0RBDUwM4IWY29sbGVnaWFuLnJpY2htb25kLmVkdYIZ cmljaG1vbmQuZGxjb25zdWx0aW5nLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3 BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy eXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AF6nc/nfVsDntTZIfdBJ 4DJ6kZoMhKESEoQYdZaBcUVYAAABcBV23FkAAAQDAEcwRQIgDZZbeHC/8ILA6ODo bWv2GQFjfwoVEIMlPO9Aa+frx48CIQD7jaV2F/JZeEirs5tZpVPmZJcNc6BQU+8Q 7r50S6AbVQB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcBV2 3EcAAAQDAEcwRQIgdXkuhevBPjf8jBVHMEa1y7XfMTerHP9mscBrnRwK97ICIQDj WQzO+tpLcG1Cn0f2Fb1jAPfIu6IeeKU0ERLPIwfo9TANBgkqhkiG9w0BAQsFAAOC AQEAh0vXfuf2ysERKemvK73UlSxsKud24gLFS+lg7ivJHxda11POoObHQ0t7KDZ+ DTVLCp94tt0TBocguW5MimAzA24S9RL1mAoHuloH95VaCCIgDQxhjdjL81E8atCF lgYc5V0BNcLAXlZKIKQ34Kyj66pjD2zr5tAW+KPB1b2bMfjNxbTxNyJiWjkNQ0Kd OsC/+vU6xgVD0tZzd0GI3ufidJqjp2YozNGRA6+vVDEoRWnsEXSZ17CEbTw+erCd FefhaTOxmvtNrXeEVhZL8k3efYDR9YOjUTwSDMAz/CRJWGPvWEXdJZgFdoontzdI XebSSNZeLpzDLy7gQEBvnhrYnw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I2FQRAaGteNOjLIQOeT M6Nw7HCeUQClNdxj8IRU56mwzTSABZM44KrJuCMIS2s94dSQ5OryFD0889CPY5mQ SZnOwetYm1lsFqEam+YbcTUWBSYsNUH70bsrZrWIV6n7NbY9aopwlv0VzjOCtyCY GCybQAlNt1jZ4J9ZbfVqfPxYLj29L5vUPwLOEAdZkMOxYXzuQHb/cS/EDb1/qdcO iAM1Wh25Tl1HduYOYuuCdpsbiPlYBS9ejDOaUZVHpngpBLDBU9/wddowb2pqURYC Bq2CWICk4LRo/4f3n6J19YDmJp5BaQQQLVQh77Ht2thgRe8mEXhKy8jBwxf7bPCK MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 362841462559464935920244471255328953444224 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 12:07:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 12:07:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collegian.richmond.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26832307024177814759500341053332274489318969931948209725539194890591830182131464869105790229549138636645334491323224937241818627166634932114262513689808549157145379224720437974989669788540544510798772262023966628170194982609692002115665035805732798446438325460297028192043260383290447284571475024754576612604694222306158975462536820195313481174989252316062388764767547913257566497241466617540290252567906237965678679446085785090794618132602764777622678278902771174067778517569007089555415513984698757187162257853039526332352080438565732069432810456925609337377176905754870476356974350896936802820132434898619001244209 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegian.richmond.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmond.dlconsulting.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701576dc59000004030047304502200d965b7870bff082c0e8e0e86d6bf61901637f0a151083253cef406be7ebc78f022100fb8da57617f2597848abb39b59a553e664970d73a05053ef10eebe744ba01b55007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001701576dc470000040300473045022075792e85ebc13e37fc8c15473046b5cbb5df3137ab1cff66b1c06b9d1c0af7b2022100e3590ccefada4b706d429f47f615bd6300f7c8bba21e78a5341112cf2307e8f5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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