go-suny.goranku.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d9:64:c2:28:c6:fb:c5:2a:95:99:47:15:f9:37:32:1f:3d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=go-suny.goranku.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d9:64:c2:28:c6:fb:c5:2a:95:99:47:15:f9:37:32:1f:3dSerial Number (int): 335312062349354913276116083406495770877757
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5c:ee:09:92:04:01:32:82:f2:30:ab:05:fa:6b:ac:e3:56:99:12:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d0:45:c2:75:a2:a5:36:08:89:18:d9:7e:05:71:f6:20:d0:bd:62:d9
Fingerprint (sha256): 1c:e2:92:a5:86:ad:4a:ab:4d:13:ef:0a:b6:f3:0c:aa:d9:1f:1d:9f:ee:2e:6f:20:64:e8:8c:12:3f:3c:7c:78
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate go-suny.goranku.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for go-suny.goranku.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
go-suny.goranku.com
navigator.suny.edu
navigator.suny.edu
Other certificates including the domain name goranku.com
(limited to 100 certificates)
go-suny.goranku.com
ssl377523.cloudflaressl.com
ssl3095.cloudflare.com
ssl377524.cloudflaressl.com
iu.goranku.com
manage.goranku.com
*.goranku.com
staging.indiana.goranku.com
glasgow.goranku.com
manage.goranku.com
ssl377523.cloudflaressl.com
nebraska.goranku.com
ssl377524.cloudflaressl.com
columbia.goranku.com
gwu.goranku.com
*.goranku.com
api.goranku.com
navigator.suny.edu
ssl255882.cloudflaressl.com
iu.goranku.com
ssl377524.cloudflaressl.com
ssl377522.cloudflaressl.com
ssl377523.cloudflaressl.com
goranku.com
gwu.goranku.com
ssl377523.cloudflaressl.com
goranku.com
stm.goranku.com
ssl377522.cloudflaressl.com
glasgow.goranku.com
ssl3095.cloudflare.com
api.goranku.com
manage-demo.goranku.com
api.goranku.com
ssl377522.cloudflaressl.com
gwu.goranku.com
dev.indiana.goranku.com
dev.suny.goranku.com
go-suny.goranku.com
ssl377522.cloudflaressl.com
go-suny.goranku.com
ssl377522.cloudflaressl.com
columbia.goranku.com
go-suny.goranku.com
glasgow.goranku.com
gwu.goranku.com
stm.goranku.com
goranku.com
ssl377524.cloudflaressl.com
ssl377523.cloudflaressl.com
www.goranku.com
ssl377524.cloudflaressl.com
ssl255884.cloudflaressl.com
ssl255884.cloudflaressl.com
columbia.goranku.com
glasgow.goranku.com
goranku.com
ssl377524.cloudflaressl.com
ssl255882.cloudflaressl.com
ssl377522.cloudflaressl.com
ssl377523.cloudflaressl.com
manage-demo.goranku.com
ssl255884.cloudflaressl.com
ssl377522.cloudflaressl.com
api.goranku.com
ssl3095.cloudflare.com
*.goranku.com
ssl377523.cloudflaressl.com
ssl377522.cloudflaressl.com
sni.cloudflaressl.com
iu.goranku.com
ssl377522.cloudflaressl.com
api.goranku.com
ssl377523.cloudflaressl.com
ssl255884.cloudflaressl.com
staging.glasgow.goranku.com
staging.api.goranku.com
staging.glasgow.goranku.com
staging.indiana.goranku.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
go-suny.goranku.com
api.goranku.com
ssl377522.cloudflaressl.com
staging.manage.goranku.com
manage.goranku.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
staging.glasgow.goranku.com
go-suny.goranku.com
go-suny.goranku.com
ssl377523.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377523.cloudflaressl.com
ssl377524.cloudflaressl.com
manage-demo.goranku.com
ssl377522.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377523.cloudflaressl.com
ssl3095.cloudflare.com
ssl377524.cloudflaressl.com
iu.goranku.com
manage.goranku.com
*.goranku.com
staging.indiana.goranku.com
glasgow.goranku.com
manage.goranku.com
ssl377523.cloudflaressl.com
nebraska.goranku.com
ssl377524.cloudflaressl.com
columbia.goranku.com
gwu.goranku.com
*.goranku.com
api.goranku.com
navigator.suny.edu
ssl255882.cloudflaressl.com
iu.goranku.com
ssl377524.cloudflaressl.com
ssl377522.cloudflaressl.com
ssl377523.cloudflaressl.com
goranku.com
gwu.goranku.com
ssl377523.cloudflaressl.com
goranku.com
stm.goranku.com
ssl377522.cloudflaressl.com
glasgow.goranku.com
ssl3095.cloudflare.com
api.goranku.com
manage-demo.goranku.com
api.goranku.com
ssl377522.cloudflaressl.com
gwu.goranku.com
dev.indiana.goranku.com
dev.suny.goranku.com
go-suny.goranku.com
ssl377522.cloudflaressl.com
go-suny.goranku.com
ssl377522.cloudflaressl.com
columbia.goranku.com
go-suny.goranku.com
glasgow.goranku.com
gwu.goranku.com
stm.goranku.com
goranku.com
ssl377524.cloudflaressl.com
ssl377523.cloudflaressl.com
www.goranku.com
ssl377524.cloudflaressl.com
ssl255884.cloudflaressl.com
ssl255884.cloudflaressl.com
columbia.goranku.com
glasgow.goranku.com
goranku.com
ssl377524.cloudflaressl.com
ssl255882.cloudflaressl.com
ssl377522.cloudflaressl.com
ssl377523.cloudflaressl.com
manage-demo.goranku.com
ssl255884.cloudflaressl.com
ssl377522.cloudflaressl.com
api.goranku.com
ssl3095.cloudflare.com
*.goranku.com
ssl377523.cloudflaressl.com
ssl377522.cloudflaressl.com
sni.cloudflaressl.com
iu.goranku.com
ssl377522.cloudflaressl.com
api.goranku.com
ssl377523.cloudflaressl.com
ssl255884.cloudflaressl.com
staging.glasgow.goranku.com
staging.api.goranku.com
staging.glasgow.goranku.com
staging.indiana.goranku.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
go-suny.goranku.com
api.goranku.com
ssl377522.cloudflaressl.com
staging.manage.goranku.com
manage.goranku.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
staging.glasgow.goranku.com
go-suny.goranku.com
go-suny.goranku.com
ssl377523.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377524.cloudflaressl.com
ssl377523.cloudflaressl.com
ssl377524.cloudflaressl.com
manage-demo.goranku.com
ssl377522.cloudflaressl.com
ssl377524.cloudflaressl.com
Certificate
The complete raw certificate details for go-suny.goranku.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISA9lkwijG+8UqlZlHFfk3Mh89MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA5MjEyMzQ3MDBaFw0x NzEyMjAyMzQ3MDBaMB4xHDAaBgNVBAMTE2dvLXN1bnkuZ29yYW5rdS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgicqAfY4xone549avJmPM4w3 eip8jlAgwE6Gbmjv3ZAULtEnDsuQ4y4MokVl0ysx+v9ZqxcnkJyftSV3qoE06oCC 6K87GLVBtRSbOfgUIxsAzBc0Dg2r9zgI7Xyi6YsUd5qtOxdjabbY5YW15baQ/h6x d/eUK9jiVnD6Nlc4OIK2yVnz/z7fQuaFXS/joHMszFZ3/ZtbmcNHwS/Nz3DhVDGP LcMkZecjPna3SgHEBdZydTnoRB5/cnp1wxYOb/ZvPkK12LBLY2/Tq0GaIiCT4VNq lKpf5tKQtZNOAhcPZomILM9O4oNdrvg7rQJV5t1OqoismNN2n3aqfxIIqE4TAgMB AAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFzuCZIEATKC8jCrBfpr rONWmRIXMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wMgYDVR0RBCswKYITZ28tc3VueS5nb3Jhbmt1LmNvbYISbmF2aWdh dG9yLnN1bnkuZWR1MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLf EwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw gasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSBy ZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3Jk YW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6 Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEB AHBYBE5kgoLhYKfhGgXbqZzdidgChZxhql2HCmaZxgJXsnjH6ex5lXoBGabTKvpH BqpgVef/USnPdYXpwFwBVH5OLXWVHud73o944NGVkg6doEY0Q7FjQTLF78GyWBQG rZp3bkJSFjNlKiUj3rE6TkcHd0I9SKY58r1HrUDOCYc0RocOltxz9caKtPS1bMZA kiwKHaDPPP4mlWiiu6mzxlb4uaXkC2KNP6PvRNqpRv+tDKw/x6up9qga9huZoeX8 zLI7FxDmst5/wCaVJIIiO5zH2CzU5xCYXA6Z5Cut+b4q/lOwtJzkCuIWpjrtBFdB vZCG7up7lbkEM8sCbBFipRA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoInKgH2OMaJ3uePWryZ jzOMN3oqfI5QIMBOhm5o792QFC7RJw7LkOMuDKJFZdMrMfr/WasXJ5Ccn7Uld6qB NOqAguivOxi1QbUUmzn4FCMbAMwXNA4Nq/c4CO18oumLFHearTsXY2m22OWFteW2 kP4esXf3lCvY4lZw+jZXODiCtslZ8/8+30LmhV0v46BzLMxWd/2bW5nDR8Evzc9w 4VQxjy3DJGXnIz52t0oBxAXWcnU56EQef3J6dcMWDm/2bz5CtdiwS2Nv06tBmiIg k+FTapSqX+bSkLWTTgIXD2aJiCzPTuKDXa74O60CVebdTqqIrJjTdp92qn8SCKhO EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335312062349354913276116083406495770877757 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-21 23:47:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-20 23:47:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go-suny.goranku.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25564318431969447898251824174280659728753884363383687075679230631871665112996565209825970138901514685821464304925493859849365678278701321372082076221121414070115937171601094916486818413845962245248384478939080920290998846728435434313258520233269632534239978183406353374525066406045613505435814957629811663328305010661021797150305720032992658223451595111698764978242789793356212320263050926466397048675063808063223940500181576329546281040445679452011479728166200094427272956691421533396993330399208266871939548573010313705363710521943961563603717333868413602419563846611958610350782653949893138252274668709444613328403 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5cee099204013282f230ab05fa6bace356991217 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-suny.goranku.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigator.suny.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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