bridgewater.vt.gov
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:41:90:c4:88:64:f2:75:c9:db:91:3d:04:35:5b:27:ab:e2 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bridgewater.vt.gov
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:41:90:c4:88:64:f2:75:c9:db:91:3d:04:35:5b:27:ab:e2Serial Number (int): 283647640933124600894901625553726592232418
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:ba:61:88:7a:6a:89:43:52:85:77:55:cc:c2:f8:98:39:56:02:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 78:c8:0e:ad:33:6b:5c:ad:32:bc:e7:2c:72:04:9a:54:a3:e1:07:d1
Fingerprint (sha256): 1e:71:43:bb:23:0b:09:ee:14:d0:8a:76:dc:dd:04:3c:00:20:e7:d0:19:53:54:34:87:e4:cf:16:06:74:57:77
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bridgewater.vt.gov
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bridgewater.vt.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bridgewater.vt.gov
Other certificates including the domain name vt.gov
(limited to 100 certificates)
www.myvtax.vermont.gov
www.poultney.vt.gov
www.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
bridgewater.vt.gov
www.tradoc.army.mil
www.tradoc.army.mil
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.tradoc.army.mil
www.ahsuploader.vt.gov
rms.vermont.gov
bridgewater.vt.gov
ssl7.revizesites.com
anrmaps.vermont.gov
westfield.vt.gov
www.vermont.gov
anrmaps.vermont.gov
www.bridgewater.vt.gov
vtlottery.com
www.bridgewater.vt.gov
ljfo.vermont.gov
www.poultney.vt.gov
www.tradoc.army.mil
www.skysoldiers.army.mil
ssl7.revizesites.com
www.bridgewater.vt.gov
rupert.vt.gov
ssl7.revizesites.com
psp.education.vt.gov
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.usaplants.vermont.gov
www.rms.vermont.gov
ssl7.revizesites.com
publicportal.courts.vt.gov
mabdapplytest.vt.gov
www.vermont.gov
uipublic.labor.vermont.gov
www.ahsuploadertest.vt.gov
secure.education.state.vt.us
www.skysoldiers.army.mil
www.vermont.gov
www.vermont.gov
vtjfo.bluehousegroup.com
pawlet.vt.gov
www.ahsuploader.vt.gov
www.tradoc.army.mil
bridgewater.vt.gov
www.myvtax.vermont.gov
www.skysoldiers.army.mil
vtlottery.com
www.vermont.gov
townofcambridgevt.org
vtlottery.com
www.staging.myvtax.vermont.gov
vtlottery.com
vtjfo.bluehousegroup.com
www.tradoc.army.mil
rupert.vt.gov
www.myvtax.vermont.gov
www.poultney.vt.gov
ssl7.revizesites.com
ssl7.revizesites.com
vtjfo.bluehousegroup.com
www.poultney.vt.gov
www.poultney.vt.gov
www.poultney.vt.gov
middletownsprings.vt.gov
vtlottery.com
ljfo.vermont.gov
www.myvtax.vermont.gov
anrmaps.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
www.tradoc.army.mil
anrmaps.vermont.gov
ssl7.revizesites.com
verv.vermont.gov
www.skysoldiers.army.mil
secure.education.state.vt.us
pawlet.vt.gov
rupert.vt.gov
anrmaps.vermont.gov
www.skysoldiers.army.mil
*.pawlet.vt.gov
ljfo.vermont.gov
verv.vermont.gov
www.skysoldiers.army.mil
ssl7.revizesites.com
id-dev.vt.gov
secure.education.state.vt.us
cambridge.vermont.gov
www.poultney.vt.gov
vtlottery.com
www.poultney.vt.gov
ljfo.vermont.gov
www.skysoldiers.army.mil
vtjfo.bluehousegroup.com
www.poultney.vt.gov
www.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
bridgewater.vt.gov
www.tradoc.army.mil
www.tradoc.army.mil
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.tradoc.army.mil
www.ahsuploader.vt.gov
rms.vermont.gov
bridgewater.vt.gov
ssl7.revizesites.com
anrmaps.vermont.gov
westfield.vt.gov
www.vermont.gov
anrmaps.vermont.gov
www.bridgewater.vt.gov
vtlottery.com
www.bridgewater.vt.gov
ljfo.vermont.gov
www.poultney.vt.gov
www.tradoc.army.mil
www.skysoldiers.army.mil
ssl7.revizesites.com
www.bridgewater.vt.gov
rupert.vt.gov
ssl7.revizesites.com
psp.education.vt.gov
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.usaplants.vermont.gov
www.rms.vermont.gov
ssl7.revizesites.com
publicportal.courts.vt.gov
mabdapplytest.vt.gov
www.vermont.gov
uipublic.labor.vermont.gov
www.ahsuploadertest.vt.gov
secure.education.state.vt.us
www.skysoldiers.army.mil
www.vermont.gov
www.vermont.gov
vtjfo.bluehousegroup.com
pawlet.vt.gov
www.ahsuploader.vt.gov
www.tradoc.army.mil
bridgewater.vt.gov
www.myvtax.vermont.gov
www.skysoldiers.army.mil
vtlottery.com
www.vermont.gov
townofcambridgevt.org
vtlottery.com
www.staging.myvtax.vermont.gov
vtlottery.com
vtjfo.bluehousegroup.com
www.tradoc.army.mil
rupert.vt.gov
www.myvtax.vermont.gov
www.poultney.vt.gov
ssl7.revizesites.com
ssl7.revizesites.com
vtjfo.bluehousegroup.com
www.poultney.vt.gov
www.poultney.vt.gov
www.poultney.vt.gov
middletownsprings.vt.gov
vtlottery.com
ljfo.vermont.gov
www.myvtax.vermont.gov
anrmaps.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
www.tradoc.army.mil
anrmaps.vermont.gov
ssl7.revizesites.com
verv.vermont.gov
www.skysoldiers.army.mil
secure.education.state.vt.us
pawlet.vt.gov
rupert.vt.gov
anrmaps.vermont.gov
www.skysoldiers.army.mil
*.pawlet.vt.gov
ljfo.vermont.gov
verv.vermont.gov
www.skysoldiers.army.mil
ssl7.revizesites.com
id-dev.vt.gov
secure.education.state.vt.us
cambridge.vermont.gov
www.poultney.vt.gov
vtlottery.com
www.poultney.vt.gov
ljfo.vermont.gov
www.skysoldiers.army.mil
vtjfo.bluehousegroup.com
Certificate
The complete raw certificate details for bridgewater.vt.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISA0GQxIhk8nXJ25E9BDVbJ6viMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMjMyMDE1NDBaFw0x OTAzMjMyMDE1NDBaMB0xGzAZBgNVBAMTEmJyaWRnZXdhdGVyLnZ0LmdvdjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALGYouDc+DdB1m+4VYON5p6CqVMW MdUE5wrf7BPNDbi7glYOBRxurGmoHdfIdM7PosY38myLb/euVc5GdQk7ZGYXSIgG u8ghmbMrWY5IjOVZaUzidRakPMOWaeEVoJe7VdQeSyVOkXEzns+1VLhMOIj9Mbjs 6uATcjfJJz04jpAlipB9n4EUXUYSaA72xOvnY9jdcTC78TXY80OerZTKv0wGFo9l Hv86CEfJv7OOPP+pHBbm70IJ6dhsL+9/O1VgpuIhHfiVK6ijIwU8I1WlviSIt0eD hZT+0syEbIfj4C5ccogV8b4fKREI5zbgD6/+FDx6ZEn8+VG3KCEzoESjDu8CAwEA AaOCAmYwggJiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZbphiHpqiUNShXdVzML4 mDlWAs0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzAdBgNVHREEFjAUghJicmlkZ2V3YXRlci52dC5nb3YwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB0 ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWfc7GqmAAAEAwBHMEUC IBYqtpmjTBsoXjfTe2IG+KYA2e+e976N/RYsMlGp0gCSAiEAkp91fjiGha/zWKg+ c35dJsEhu7kCpZLQtbnSjdhvc2AAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD DPTlRUf0eAAAAWfc7GzgAAAEAwBGMEQCIBvjC1Vcw+AGXqj2OKJDSGEovHOBE/Jb 0v/SFMPjfjBkAiBKtAeAEzgB/i2v4CWUz4+y/b51FnO3SdHJB8bYf6TP+jANBgkq hkiG9w0BAQsFAAOCAQEAMXMdsDVIiQwIBP0PmMtEwUQzK31RIIrZDoN+24D1MTXX Uem5/LBT1x3upMfajqHavDq99n0qI1GAx84e6bboagXWFry80NzEFveqU22hut48 mCHbApXuEykkf5vGpwgZ4bGEN97CGLfrdHJGiFu6Gx7CAxQ9CmSjoS30vtevSolC ZaD7UW6tt+1tZpdPGoUjUWNkPnf/jG4Jh4lJ3iNeykvNv3y1U9TwbZ5kBeii3iXz /CLQYvaGqx9kLFqVGoDYZ7LscjX+Rwn27Ehj0jXb8BQetzkzUhGlUv5vwvHIcCoN FJiGbERtQEVN81ydFp1AECbmcRzrUXE4JzI6Sb3bbQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZii4Nz4N0HWb7hVg43m noKpUxYx1QTnCt/sE80NuLuCVg4FHG6saagd18h0zs+ixjfybItv965VzkZ1CTtk ZhdIiAa7yCGZsytZjkiM5VlpTOJ1FqQ8w5Zp4RWgl7tV1B5LJU6RcTOez7VUuEw4 iP0xuOzq4BNyN8knPTiOkCWKkH2fgRRdRhJoDvbE6+dj2N1xMLvxNdjzQ56tlMq/ TAYWj2Ue/zoIR8m/s448/6kcFubvQgnp2Gwv7387VWCm4iEd+JUrqKMjBTwjVaW+ JIi3R4OFlP7SzIRsh+PgLlxyiBXxvh8pEQjnNuAPr/4UPHpkSfz5UbcoITOgRKMO 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 283647640933124600894901625553726592232418 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-23 20:15:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 20:15:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bridgewater.vt.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22419447715998020357604244138258116269329208427958625651926754041924359950585250040864204507623108378702640434537511630933373975040794818572400991365400803698131373426302726268028452608496895855768843433631071271283077181676987580524146985008116463192609415475843346871687917176441672558541580662665204524978261619251062914005902686379730556391854508600804588941259862252259219880173179433837241915263211657311055634865564486806211915708836961266779567669469304075555366795137113731689756282973389167055686392780625974563126668329115867247076554908247552367678438554310889162500080753135427216774314585497626766151407 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 65ba61887a6a894352857755ccc2f898395602cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgewater.vt.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167dcec6aa600000403004730450220162ab699a34c1b285e37d37b6206f8a600d9ef9ef7be8dfd162c3251a9d20092022100929f757e388685aff358a83e737e5d26c121bbb902a592d0b5b9d28dd86f7360007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167dcec6ce0000004030046304402201be30b555cc3e0065ea8f638a243486128bc738113f25bd2ffd214c3e37e306402204ab40780133801fe2dafe02594cf8fb2fdbe751673b749d1c907c6d87fa4cffa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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