beta.developer.signicat.com
Issued by R3
About this certificate
This digital certificate with serial number 04:4c:67:8b:81:dc:df:f6:39:f8:bb:d1:12:24:05:ee:4c:da was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=beta.developer.signicat.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4c:67:8b:81:dc:df:f6:39:f8:bb:d1:12:24:05:ee:4c:daSerial Number (int): 374448238459791839936570165822172257209562
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 93:42:2a:d7:41:f2:e0:66:ce:fe:25:00:08:07:64:4b:d9:41:73:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 55:e3:b4:d7:08:60:36:f5:68:d4:cb:e4:08:b1:67:c2:b3:b9:e8:01
Fingerprint (sha256): 1b:b2:08:35:0b:bc:5f:72:72:4b:e6:17:e6:66:29:ef:4d:ba:47:04:88:45:1c:60:dd:15:e0:ee:90:ad:d4:97
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate beta.developer.signicat.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for beta.developer.signicat.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beta.developer.signicat.com
Other certificates including the domain name signicat.com
(limited to 100 certificates)
mobileid.dev.signicat.com
mwc-demo.signicat.com
eu01.signicat.com
qa.scid.signicat.com
*.internal.signicat.com
partners.signicat.com
signicat.com
na.smart-integration.status.ricoh.com
vpn.signicat.com
staging.signicat.com
na.smart-integration.status.ricoh.com
onboarding.dev.signicat.com
na.smart-integration.status.ricoh.com
www-beta.signicat.com
www-staging.signicat.com
dtp-vpn.signicat.com
mail.signicat.com
api.signicat.com
dashboard.signicat.com
personskadeforbundet.no
microsoft-api-prod.signicat.com
go.signicat.com
cert-manager-upgrade-test.internal.signicat.com
www-staging.signicat.com
developer.signicat.com
api.signicat.com
dashboard.signicat.com
encapserver.dev.signicat.com
staging.signicat.com
express-dashboard.signicat.com
*.app.signicat.com
labs.signicat.com
eu01.signicat.com
community.signicat.com
signature.signicat.com
support.signicat.com
labs.signicat.com
na.smart-integration.status.ricoh.com
api.signicat.com
qa.signicat.com
microsoft-developer-dev.signicat.com
api.signicat.com
static.signicat.com
signicat.com
signicat.com
signature.signicat.com
na.smart-integration.status.ricoh.com
customer.signicat.com
signature.signicat.com
labs.signicat.com
qa.signicat.com
*.app.signicat.com
qa.signicat.com
secure-share.signicat.com
encap.test.signicat.com
go.signicat.com
customerportal.signicat.com
eu01.signicat.com
bourne-status.wifinity.net
candidatesrv.dev.signicat.com
bourne-status.wifinity.net
api.signicat.com
community.signicat.com
id.signicat.com
bourne-status.wifinity.net
dev01.signicat.com
onboarding.dev.signicat.com
grafana.signicat.com
dev01.signicat.com
id.signicat.com
demo.signicat.com
*.dev.signicat.com
grafana.signicat.com
na.smart-integration.status.ricoh.com
developer.signicat.com
encap.signicat.com
candidatesrv.dev.signicat.com
qa.scid.signicat.com
express-dashboard.signicat.com
na.smart-integration.status.ricoh.com
encapserver.dev.signicat.com
microsoft-api-test.signicat.com
cert-manager-upgrade-test.internal.signicat.com
developer.signicat.com
encap.test.signicat.com
*.internal.signicat.com
qa.signicat.com
labs.signicat.com
customer.signicat.com
qa.scid.signicat.com
beta.developer.signicat.com
www.signicat.com
www-staging.signicat.com
customerportal.signicat.com
qa.signicat.com
grafana.signicat.com
api.signicat.com
external.signicat.com
mwc-demo.signicat.com
eu01.signicat.com
qa.scid.signicat.com
*.internal.signicat.com
partners.signicat.com
signicat.com
na.smart-integration.status.ricoh.com
vpn.signicat.com
staging.signicat.com
na.smart-integration.status.ricoh.com
onboarding.dev.signicat.com
na.smart-integration.status.ricoh.com
www-beta.signicat.com
www-staging.signicat.com
dtp-vpn.signicat.com
mail.signicat.com
api.signicat.com
dashboard.signicat.com
personskadeforbundet.no
microsoft-api-prod.signicat.com
go.signicat.com
cert-manager-upgrade-test.internal.signicat.com
www-staging.signicat.com
developer.signicat.com
api.signicat.com
dashboard.signicat.com
encapserver.dev.signicat.com
staging.signicat.com
express-dashboard.signicat.com
*.app.signicat.com
labs.signicat.com
eu01.signicat.com
community.signicat.com
signature.signicat.com
support.signicat.com
labs.signicat.com
na.smart-integration.status.ricoh.com
api.signicat.com
qa.signicat.com
microsoft-developer-dev.signicat.com
api.signicat.com
static.signicat.com
signicat.com
signicat.com
signature.signicat.com
na.smart-integration.status.ricoh.com
customer.signicat.com
signature.signicat.com
labs.signicat.com
qa.signicat.com
*.app.signicat.com
qa.signicat.com
secure-share.signicat.com
encap.test.signicat.com
go.signicat.com
customerportal.signicat.com
eu01.signicat.com
bourne-status.wifinity.net
candidatesrv.dev.signicat.com
bourne-status.wifinity.net
api.signicat.com
community.signicat.com
id.signicat.com
bourne-status.wifinity.net
dev01.signicat.com
onboarding.dev.signicat.com
grafana.signicat.com
dev01.signicat.com
id.signicat.com
demo.signicat.com
*.dev.signicat.com
grafana.signicat.com
na.smart-integration.status.ricoh.com
developer.signicat.com
encap.signicat.com
candidatesrv.dev.signicat.com
qa.scid.signicat.com
express-dashboard.signicat.com
na.smart-integration.status.ricoh.com
encapserver.dev.signicat.com
microsoft-api-test.signicat.com
cert-manager-upgrade-test.internal.signicat.com
developer.signicat.com
encap.test.signicat.com
*.internal.signicat.com
qa.signicat.com
labs.signicat.com
customer.signicat.com
qa.scid.signicat.com
beta.developer.signicat.com
www.signicat.com
www-staging.signicat.com
customerportal.signicat.com
qa.signicat.com
grafana.signicat.com
api.signicat.com
external.signicat.com
Certificate
The complete raw certificate details for beta.developer.signicat.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISBExni4Hc3/Y5+LvREiQF7kzaMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTAzMjAwMzQxMjRaFw0yMTA2MTgwMzQxMjRaMCYxJDAiBgNVBAMT G2JldGEuZGV2ZWxvcGVyLnNpZ25pY2F0LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD ggIPADCCAgoCggIBAKRAoqPfe+cWR2gyaD6V27lqss3T/DqU48yhkZLxMjFLYsh9 e7H/Dwr3c0azbMBJbAF4iFVvj5RqNxw2o7WZTZZq+v+rJA+uAwA/fkc5G2Knz88K p04gBv2jmHTfq+x2Aazzl1NXm5/LUyUMv5vTv3qj0wShGtrfSao+zJGnQSvLPWpc oBjZ2JsGEz7763swnAeJg7lgW9uSJWcRXuE83z6G3bl9QW2I2dfb5CBkrpTptp+q kwMEzj485tzcfI9Xzc4nKzj6vCAAYVx4pADVB8l3brtgo9BbC4Q86LEwSKjQe6er GadUEEf/EdfOT0nTYoZs1ZHnXeVSgY1KWwv19mMDqZ6dl9y2C14esmfSjY9DmJuV mp+wEN23KxqM061LATu0sQzoItKYjvaQALnx2PE4MC/FYx6u6aHgUQVIndbZJqRi zKcqJ8pQ+uPmsGtH2LAQg6U5h+S/D4JPdQ4bBIzObnhLYI8xMwtF+W2xwRtc1/nY 4GO+urbQ9VK53TycOr6B8LxPppn9TZpL3zTG7Wkg1BGfBtyGGueaDi8pUWUGQ9UK TRNUSe42cBrfOt8LDb0UPJj1L/26fDVetnkkLGJCFaVStYeiYgfDUHqQgU9EjBJo 71hL6AilTK2t2/9QBw3KQ1H84B9n/tyZuEQRcmBFrYAkyk6jEOBx+n/p+CMTAgMB AAGjggFjMIIBXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJNCKtdB8uBmzv4lAAgH ZEvZQXP+MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCYGA1UdEQQfMB2CG2JldGEu ZGV2ZWxvcGVyLnNpZ25pY2F0LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjtY QHPNsHG6Z43iF0R/7xYE9yO4AXkYVjujmv40pTMu1M34xeePVNxKdUpxykuT/WjX nbTFqINNp/plcBpYTlsIWykPSSRbi+B/c7NnP7BrdtCG809ZIOakzX8RtRuPiidt 3ba5bQTvtv/+qKA++a5+aPO9QYc2Xsi/jFT+dbzRt2FGo3LkuHaRZF3mlJuXPZ/c 8OoRXPLJjdOkoj2NeTEs4Zk7vzVHHz3RApSYLh5P9TarAtP2MpLzoV/827pvkKuE c4Yrct4dePl8DzbTEih0Pxst2MGbe5Fz1dHv17Mo5N+YsdPMy1n0S2j8LJvBmoxO SLGDJsaC0mfHxx2/Kg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApECio9975xZHaDJoPpXb uWqyzdP8OpTjzKGRkvEyMUtiyH17sf8PCvdzRrNswElsAXiIVW+PlGo3HDajtZlN lmr6/6skD64DAD9+RzkbYqfPzwqnTiAG/aOYdN+r7HYBrPOXU1ebn8tTJQy/m9O/ eqPTBKEa2t9Jqj7MkadBK8s9alygGNnYmwYTPvvrezCcB4mDuWBb25IlZxFe4Tzf PobduX1BbYjZ19vkIGSulOm2n6qTAwTOPjzm3Nx8j1fNzicrOPq8IABhXHikANUH yXduu2Cj0FsLhDzosTBIqNB7p6sZp1QQR/8R185PSdNihmzVkedd5VKBjUpbC/X2 YwOpnp2X3LYLXh6yZ9KNj0OYm5Wan7AQ3bcrGozTrUsBO7SxDOgi0piO9pAAufHY 8TgwL8VjHq7poeBRBUid1tkmpGLMpyonylD64+awa0fYsBCDpTmH5L8Pgk91DhsE jM5ueEtgjzEzC0X5bbHBG1zX+djgY766ttD1UrndPJw6voHwvE+mmf1NmkvfNMbt aSDUEZ8G3IYa55oOLylRZQZD1QpNE1RJ7jZwGt863wsNvRQ8mPUv/bp8NV62eSQs YkIVpVK1h6JiB8NQepCBT0SMEmjvWEvoCKVMra3b/1AHDcpDUfzgH2f+3Jm4RBFy YEWtgCTKTqMQ4HH6f+n4IxMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 374448238459791839936570165822172257209562 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-20 03:41:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-18 03:41:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beta.developer.signicat.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670091662589982630785791654842503988565874552013779717756786860837657550027365060327399164110645743853750099026981189038334197325290894158030394864944673785005123156333868532531715992447304930437467653560360542181183495765905984646700323262895858218440638700061217576028914402481918509686998196977741803817549346401476320279079893308436240091238986892481898646562025157614236339213504812855629024944861103941065539504109127712580442990303742069482452529941704673542405460157430184482203464284863668260408006522890242678168152529993361063218371011283744378308348859494758098280186349432338150513559784661513764131527072885790787367740960447678677555915762513352834809061549235092987830476125852538033895536680229747706355982360276646280958252203126414196769673359457088352144949294480949280921188458746626092293330018382510034750581944769782569638209676326673823049491828457993287928684973972428626311342522495343893728953363148083559493531200186154753117313628810222420416577376511086860167235508504779734872292117262205323768699422557420798105253068843809146924174074750957622375401584504035060024556683985426328359592626803357698476690634396659409877256304159993012774976250970469002939422468899242268477432505039480204497685848851 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 93422ad741f2e066cefe25000807644bd94173fe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.developer.signicat.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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