psaairlines.com
Issued by R3
About this certificate
This digital certificate with serial number 03:b1:5b:c6:95:3c:31:47:68:7f:4b:d6:ce:54:aa:9d:e0:75 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=psaairlines.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b1:5b:c6:95:3c:31:47:68:7f:4b:d6:ce:54:aa:9d:e0:75Serial Number (int): 321688827589529237000837206972436764811381
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 98:97:5c:41:bd:d2:cc:6a:bb:7a:24:aa:3b:cf:ad:4f:29:96:6d:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d9:93:e2:03:ac:f6:65:9b:d0:f1:68:ab:48:17:4d:f8:82:48:51:a6
Fingerprint (sha256): 21:52:63:d0:eb:9e:18:4b:fb:c9:5c:81:15:3c:41:a4:24:34:55:01:c8:a7:07:ac:2d:3b:49:0a:39:c2:57:38
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate psaairlines.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for psaairlines.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
psaairlines.com
www.psaairlines.com
www.psaairlines.com
Other certificates including the domain name psaairlines.com
(limited to 100 certificates)
release.psaairlines.com
psaairlines.com
aaapac-expcluster-e01-hon1.aa.com
aana-expcluster-e01-bv1.aa.com
premium-mobile.stage.aa.com
psaairlines.com
premium-mobile.stage.aa.com
yada-beta.stage.aa.com
tokenservice.psaairlines.com
vpn.psaairlines.com
aana-cups21-sc1.aa.com
aana-expcluster-c01-bv1.aa.com
aana-expcluster-c01-bv1.aa.com
mcweb.psaairlines.com
aaemea-cups01-ams1-ms.aa.com
release.psaairlines.com
yada-beta.stage.aa.com
ctwst.psaairlines.com
release.psaairlines.com
release.psaairlines.com
premium-mobile.stage.aa.com
yada-beta.stage.aa.com
aaapac-expc01-sin1.aa.com
release.psaairlines.com
c3008021ipr101-ms.corpaa.aa.com
*.psaairlines.com
premium-mobile.stage.aa.com
ctws.psaairlines.com
aos2.psaairlines.com
aana-expcluster-e01-sc1.aa.com
psaairlines.com
psaairlines.com
psaairlines.com
aana-expcluster-e01-sc1.aa.com
aana-expcluster-c01-bv1.aa.com
release.psaairlines.com
aaapac-expe01-sin1.aa.com
aana-expcluster-e01-sc1.aa.com
aaemea-expe01-ams1.aa.com
yada-beta.stage.aa.com
release.psaairlines.com
planningvalidatorapi.psaairlines.com
aana-expcluster-c01-sc1.aa.com
premium-mobile.stage.aa.com
sni1fe0fgl.wpc.edgecastcdn.net
aos.stage.psaairlines.com
release.psaairlines.com
aana-expcluster-e01-bv1.aa.com
release.psaairlines.com
aaapac-expcluster-c01-sin1.aa.com
aana-expcluster-e01-bv1.aa.com
aana-expcluster-c01-bv1.aa.com
testreleaseapi.psaairlines.com
psaairlines.com
ftweb.psaairlines.com
yada-beta.stage.aa.com
aana-expcluster-c01-sc1.aa.com
testtokenservice.psaairlines.com
testplanningvalidatorapi.psaairlines.com
tokenservice.psaairlines.com
emp.psaairlines.com
release.psaairlines.com
aana-expcluster-c01-sc1.aa.com
testrelease.psaairlines.com
release.psaairlines.com
aana-expcluster-e01-bv1.aa.com
planningvalidatorapi.psaairlines.com
aaemea-expe01-lon1.aa.com
ctwst.psaairlines.com
premium-mobile.stage.aa.com
testreleaseapi.psaairlines.com
release.psaairlines.com
www.psaairlines.com
aana-expcluster-c01-bv1.aa.com
psaairlines.com
premium-mobile.stage.aa.com
c3008011ipr001-ms.corpaa.aa.com
psaairlines.com
psaairlines.com
yada-beta.stage.aa.com
psaairlines.com
psaairlines.com
aana-expcluster-e01-sc1.aa.com
premium-mobile.stage.aa.com
aana-expcluster-e01-bv1.aa.com
yada-beta.stage.aa.com
aaapac-cups01-hon1.aa.com
aana-expcluster-c01-bv1.aa.com
release.psaairlines.com
psaairlines.com
yada-beta.stage.aa.com
release.psaairlines.com
psaairlines.com
ctwst.psaairlines.com
planningvalidatorapi.psaairlines.com
psaairlines.com
sni11976gl.wpc.edgecastcdn.net
premium-mobile.stage.aa.com
release.psaairlines.com
premium-mobile.stage.aa.com
psaairlines.com
aaapac-expcluster-e01-hon1.aa.com
aana-expcluster-e01-bv1.aa.com
premium-mobile.stage.aa.com
psaairlines.com
premium-mobile.stage.aa.com
yada-beta.stage.aa.com
tokenservice.psaairlines.com
vpn.psaairlines.com
aana-cups21-sc1.aa.com
aana-expcluster-c01-bv1.aa.com
aana-expcluster-c01-bv1.aa.com
mcweb.psaairlines.com
aaemea-cups01-ams1-ms.aa.com
release.psaairlines.com
yada-beta.stage.aa.com
ctwst.psaairlines.com
release.psaairlines.com
release.psaairlines.com
premium-mobile.stage.aa.com
yada-beta.stage.aa.com
aaapac-expc01-sin1.aa.com
release.psaairlines.com
c3008021ipr101-ms.corpaa.aa.com
*.psaairlines.com
premium-mobile.stage.aa.com
ctws.psaairlines.com
aos2.psaairlines.com
aana-expcluster-e01-sc1.aa.com
psaairlines.com
psaairlines.com
psaairlines.com
aana-expcluster-e01-sc1.aa.com
aana-expcluster-c01-bv1.aa.com
release.psaairlines.com
aaapac-expe01-sin1.aa.com
aana-expcluster-e01-sc1.aa.com
aaemea-expe01-ams1.aa.com
yada-beta.stage.aa.com
release.psaairlines.com
planningvalidatorapi.psaairlines.com
aana-expcluster-c01-sc1.aa.com
premium-mobile.stage.aa.com
sni1fe0fgl.wpc.edgecastcdn.net
aos.stage.psaairlines.com
release.psaairlines.com
aana-expcluster-e01-bv1.aa.com
release.psaairlines.com
aaapac-expcluster-c01-sin1.aa.com
aana-expcluster-e01-bv1.aa.com
aana-expcluster-c01-bv1.aa.com
testreleaseapi.psaairlines.com
psaairlines.com
ftweb.psaairlines.com
yada-beta.stage.aa.com
aana-expcluster-c01-sc1.aa.com
testtokenservice.psaairlines.com
testplanningvalidatorapi.psaairlines.com
tokenservice.psaairlines.com
emp.psaairlines.com
release.psaairlines.com
aana-expcluster-c01-sc1.aa.com
testrelease.psaairlines.com
release.psaairlines.com
aana-expcluster-e01-bv1.aa.com
planningvalidatorapi.psaairlines.com
aaemea-expe01-lon1.aa.com
ctwst.psaairlines.com
premium-mobile.stage.aa.com
testreleaseapi.psaairlines.com
release.psaairlines.com
www.psaairlines.com
aana-expcluster-c01-bv1.aa.com
psaairlines.com
premium-mobile.stage.aa.com
c3008011ipr001-ms.corpaa.aa.com
psaairlines.com
psaairlines.com
yada-beta.stage.aa.com
psaairlines.com
psaairlines.com
aana-expcluster-e01-sc1.aa.com
premium-mobile.stage.aa.com
aana-expcluster-e01-bv1.aa.com
yada-beta.stage.aa.com
aaapac-cups01-hon1.aa.com
aana-expcluster-c01-bv1.aa.com
release.psaairlines.com
psaairlines.com
yada-beta.stage.aa.com
release.psaairlines.com
psaairlines.com
ctwst.psaairlines.com
planningvalidatorapi.psaairlines.com
psaairlines.com
sni11976gl.wpc.edgecastcdn.net
premium-mobile.stage.aa.com
release.psaairlines.com
premium-mobile.stage.aa.com
Certificate
The complete raw certificate details for psaairlines.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIERjCCAy6gAwIBAgISA7FbxpU8MUdof0vWzlSqneB1MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTExMzAxOTIyNTBaFw0yMjAyMjgxOTIyNDlaMBoxGDAWBgNVBAMT D3BzYWFpcmxpbmVzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANAzPZY7jeFnUjqI4ILmXgDUwclZbt9m3wzXkgUWe5hCbdpB8+1gPYc43HwZCJXe hgQKSbtsB8GVgRyN7De2/SEYTd1NzJOO+FJ/nsVMpe4KeV2Bz4tXEGRB/iTJHdC1 RY604S2q3jx3eXPAExEPudqN24MIqeEGZQQ+ymiEFvzm/D6xCmWmBcZsh4wC2uk2 mV+fINiNlLMGFZsZDgXAoM+QwTx2MHy6KmCU6Ki/LGm91+8DEQLLR/9ips/JA88H SpJjdm+ynp2i1KMlLo9Noh48Eq8NH1WlsA1GiEZr04YCAjEse2i4+xr+9tfkTfBb Qi0J8MlGfUKZM1+icCKK9ocCAwEAAaOCAWwwggFoMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUmJdcQb3SzGq7eiSqO8+tTymWbSkwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wLwYDVR0RBCgwJoIPcHNhYWlybGluZXMuY29tghN3d3cucHNhYWlybGluZXMu Y29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQi2URff8arpE86jnWmEKVFJrzlVQk 39wBa0GbQ1WinLbWxjRjtBLzd23slDRKnYA4RE+8syciKjCEzYTK4kYmLLX5cPZ7 pzl8LibofNEnfGjaIM6OP+8EWTURzKX+lEidIA0pfJdOKolxf2HFi5unqT9zj+Kn UFdWyX78ubC7InscSSfoVRACNc6dVeLoEDpad3Xnz9M+r7SplJ/pjDDomAQip4m0 Ih6uKMTxUCFo+z4Teb1ySye6KrZv6VnNFFyDBvyBMqA2HsNai/1FvVlHhzNjAycb kO8qkCXOg4xh3IzKtKQKea/1xzxzRhpVw/v1cov3zZwFgoU/N1wsR7E6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DM9ljuN4WdSOojgguZe ANTByVlu32bfDNeSBRZ7mEJt2kHz7WA9hzjcfBkIld6GBApJu2wHwZWBHI3sN7b9 IRhN3U3Mk474Un+exUyl7gp5XYHPi1cQZEH+JMkd0LVFjrThLarePHd5c8ATEQ+5 2o3bgwip4QZlBD7KaIQW/Ob8PrEKZaYFxmyHjALa6TaZX58g2I2UswYVmxkOBcCg z5DBPHYwfLoqYJToqL8sab3X7wMRAstH/2Kmz8kDzwdKkmN2b7KenaLUoyUuj02i HjwSrw0fVaWwDUaIRmvThgICMSx7aLj7Gv721+RN8FtCLQnwyUZ9QpkzX6JwIor2 hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321688827589529237000837206972436764811381 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-30 19:22:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-28 19:22:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psaairlines.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26282835101530167603987411954377088770833374230458020392412810132590623875064237913722199064769167455589722826172080427434898821811393560593550519017823464013447098767306631710626417134433967720632327781702716495995686749911760055622846089922424271635224043583349376010873515876678867295171294042015802678562583096771028782387940942115877061451405515419082037905040399159327954554359853990745978890689589431300380054802171117176698212950996026511258623111390293554753655547864133188788657962704230007518963940255797370083468729373380111960743241754390692193865481963736930195637854716114485893719043210188209519261319 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 98975c41bdd2cc6abb7a24aa3bcfad4f29966d29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaairlines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaairlines.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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