milnepublishing.geneseo.edu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:02:10:ac:1a:33:85:be:8e:d6:1b:ae:f3:f1:cf:d8:d2:aa was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=milnepublishing.geneseo.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:02:10:ac:1a:33:85:be:8e:d6:1b:ae:f3:f1:cf:d8:d2:aaSerial Number (int): 262039583783539521371025532393545835008682
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a6:94:0f:cf:e4:7d:e3:4c:94:91:13:53:a3:19:73:ff:40:fe:01:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fa:a8:dd:9a:3a:79:a6:75:d8:fb:ce:65:45:98:ae:42:e4:79:21:b4
Fingerprint (sha256): 23:5d:cf:58:a1:b4:82:5d:4a:18:3e:16:13:a1:2c:25:da:e2:5f:6a:e5:92:e8:36:4b:8a:a0:7e:8a:77:af:36
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate milnepublishing.geneseo.edu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for milnepublishing.geneseo.edu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
milnepublishing.geneseo.edu
milnepublishing.pressbooks.pub
milnepublishing.pressbooks.pub
Other certificates including the domain name geneseo.edu
(limited to 100 certificates)
statuspage.io
status.acquia.com
adxstatus.com
statuspage.io
statuspage.io
connect.geneseo.edu
statuspage.io
statuspage.io
ad2.w2k.geneseo.edu
adxstatus.com
statuspage.io
statuspage.io
features.geneseo.edu
adxstatus.com
statuspage.io
statuspage.io
aims.geneseo.edu
aims.geneseo.edu
statuspage.io
statuspage.io
milnepublishing.pressbooks.pub
statuspage.io
statuspage.io
statuspage.io
adxstatus.com
adxstatus.com
statuspage.io
status.acquia.com
statuspage.io
idm.geneseo.edu
glk.geneseo.edu
statuspage.io
statuspage.io
features.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
emsprod.geneseo.edu
bulletin.geneseo.edu
statuspage.io
statuspage.io
webmail.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
banapptcdev2.geneseo.edu
statuspage.io
adxstatus.com
statuspage.io
statuspage.io
edge-uc1.peopleadmin.com
adxstatus.com
statuspage.io
statuspage.io
statuspage.io
connect.geneseo.edu
statuspage.io
printers.w2k.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
adxstatus.com
oasis.geneseo.edu
statuspage.io
statuspage.io
remotehelp.geneseo.edu
*.geneseo.edu
canvas.geneseo.edu
librarydataportal.geneseo.edu
adxstatus.com
proxy.geneseo.edu
crashplanmaster.geneseo.edu
statuspage.io
webmail.geneseo.edu
statuspage.io
glk.geneseo.edu
statuspage.io
gcab.geneseo.edu
statuspage.io
statuspage.io
adxstatus.com
jira.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
features.geneseo.edu
statuspage.io
geneseo.edu
statuspage.io
statuspage.io
statuspage.io
360parent.geneseo.edu
statuspage.io
adxstatus.com
statuspage.io
statuspage.io
adxstatus.com
status.acquia.com
adxstatus.com
statuspage.io
statuspage.io
connect.geneseo.edu
statuspage.io
statuspage.io
ad2.w2k.geneseo.edu
adxstatus.com
statuspage.io
statuspage.io
features.geneseo.edu
adxstatus.com
statuspage.io
statuspage.io
aims.geneseo.edu
aims.geneseo.edu
statuspage.io
statuspage.io
milnepublishing.pressbooks.pub
statuspage.io
statuspage.io
statuspage.io
adxstatus.com
adxstatus.com
statuspage.io
status.acquia.com
statuspage.io
idm.geneseo.edu
glk.geneseo.edu
statuspage.io
statuspage.io
features.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
emsprod.geneseo.edu
bulletin.geneseo.edu
statuspage.io
statuspage.io
webmail.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
banapptcdev2.geneseo.edu
statuspage.io
adxstatus.com
statuspage.io
statuspage.io
edge-uc1.peopleadmin.com
adxstatus.com
statuspage.io
statuspage.io
statuspage.io
connect.geneseo.edu
statuspage.io
printers.w2k.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
adxstatus.com
oasis.geneseo.edu
statuspage.io
statuspage.io
remotehelp.geneseo.edu
*.geneseo.edu
canvas.geneseo.edu
librarydataportal.geneseo.edu
adxstatus.com
proxy.geneseo.edu
crashplanmaster.geneseo.edu
statuspage.io
webmail.geneseo.edu
statuspage.io
glk.geneseo.edu
statuspage.io
gcab.geneseo.edu
statuspage.io
statuspage.io
adxstatus.com
jira.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
features.geneseo.edu
statuspage.io
geneseo.edu
statuspage.io
statuspage.io
statuspage.io
360parent.geneseo.edu
statuspage.io
adxstatus.com
statuspage.io
statuspage.io
adxstatus.com
Certificate
The complete raw certificate details for milnepublishing.geneseo.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGjjCCBXagAwIBAgISAwIQrBozhb6O1huu8/HP2NKqMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjEwMzMwMzRaFw0y MDA1MjEwMzMwMzRaMCYxJDAiBgNVBAMTG21pbG5lcHVibGlzaGluZy5nZW5lc2Vv LmVkdTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANtqhh8uY/KBjLA8 XxfukIw36qzPwCXbpW4khWhDiAllLOnQTbewkAjQCaJCCJWP5Ppg5L0aG7v1Go4O zXLMR9QwvY0zmz6HRHIFaESeixUD2mX4fCckAX1aocZM560OuF8lpgDfMFREJgiU Tx718xHfWLeEeIQNuYDbTrj+QoTkCx+8FKODf8oof65tQrvR6GxAnB/RslGNNz1E aMerzA8Vs5IvaxrZOAa2KW6HZXGRsPHbHF+pUr3Rf5LA1cYO25oohF+T3JakkazH jvos6/kDzAR/JojGVki5u555Odr3s3uJVthHdXakzJXlYS6c+ZjxITulQsdCrbrA sqNFhmU0paUg1/kXbIZuPQmYDq1pXXxPRnBOAhX4Hr3/hVboi5OszYuSbVq65fJU ZskKJ1MHGvhVpVQczgcOmeKZ54gmEwIRAkqYc8QSdn9MScYO7dM1/xh+KaZBhNrC 8/1Y+ov4BNbEIPvNb2fV4DpxcQZ8AIaS7XHWRTgJ22HYEkVcLq2oI2/CrDYwD5hj LH7Tth9Fa7O8Mz/ey9KqIc/h7vaid6YqXMmNJcF/Y6v1bnYo5JCvx2e4yts0GnW0 gOOBqYc5/0UsLs0KD+MIlM9GyrvQgdvanrHmGVE+bqTd1yUMEGZZw6FJYasDE1NQ izwp4G8ioH/MgidXIzIz+9Po5B/VAgMBAAGjggKQMIICjDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFKaUD8/kfeNMlJETU6MZc/9A/gEaMB8GA1UdIwQYMBaAFKhKamME fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0 cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wRgYDVR0RBD8wPYIbbWls bmVwdWJsaXNoaW5nLmdlbmVzZW8uZWR1gh5taWxuZXB1Ymxpc2hpbmcucHJlc3Ni b29rcy5wdWIwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFF WAAAAXBmAvQ6AAAEAwBHMEUCIQCptzSwh3YjGgoJCkBAKd3XkCfmAKANdSyCVtCP 7hwGDwIgNnTJA1Vlz9lUVTvGEDzDpeTIDOP9cJxZ0fQTOFoAnx0AdgAHt1wb5X1o //Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXBmAvSEAAAEAwBHMEUCIF756Cwu hQ3uDGl1hKtnujjJa/wBufXnd7UAM/9WuXRGAiEA1ejhsXwmRUuolg5shGHUQVzA BcPdGDEz7LXr50INwMEwDQYJKoZIhvcNAQELBQADggEBAEJOAFSNCa5f1v/TXED9 RJYTqOCEIB7KwFI1VTCprgMfZlndQ9Mk0ScBrLKDWpimokLG2gqX1Mzv+dxuD7DY 1lwnH4mk+2sLCYqSgFwVUl49D159qrvfx0tJ2dLXObw87NhmbjRRcXdlHwhhpYvd GQ3JCoXlqug8JVW1vFjEX0c/bQAFfejgFdv5d8/UFdBFoT3/s8vR2jPqN84cznwT H5gIg1xxSBwCeEtTSmFSRdHjVk6nzEY9yu9yS7vRGzoKDhB0J6Kozx6SvSmo0knz uw8HVzADeS5p9iN4wn50aXVj/0mOFZ8C7f1oFNzhM+htixSLFOl2G1wdYhr+YOPC G8w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA22qGHy5j8oGMsDxfF+6Q jDfqrM/AJdulbiSFaEOICWUs6dBNt7CQCNAJokIIlY/k+mDkvRobu/Uajg7NcsxH 1DC9jTObPodEcgVoRJ6LFQPaZfh8JyQBfVqhxkznrQ64XyWmAN8wVEQmCJRPHvXz Ed9Yt4R4hA25gNtOuP5ChOQLH7wUo4N/yih/rm1Cu9HobECcH9GyUY03PURox6vM DxWzki9rGtk4BrYpbodlcZGw8dscX6lSvdF/ksDVxg7bmiiEX5PclqSRrMeO+izr +QPMBH8miMZWSLm7nnk52veze4lW2Ed1dqTMleVhLpz5mPEhO6VCx0KtusCyo0WG ZTSlpSDX+Rdshm49CZgOrWldfE9GcE4CFfgevf+FVuiLk6zNi5JtWrrl8lRmyQon Uwca+FWlVBzOBw6Z4pnniCYTAhECSphzxBJ2f0xJxg7t0zX/GH4ppkGE2sLz/Vj6 i/gE1sQg+81vZ9XgOnFxBnwAhpLtcdZFOAnbYdgSRVwuragjb8KsNjAPmGMsftO2 H0Vrs7wzP97L0qohz+Hu9qJ3pipcyY0lwX9jq/VudijkkK/HZ7jK2zQadbSA44Gp hzn/RSwuzQoP4wiUz0bKu9CB29qeseYZUT5upN3XJQwQZlnDoUlhqwMTU1CLPCng byKgf8yCJ1cjMjP70+jkH9UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 262039583783539521371025532393545835008682 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 03:30:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 03:30:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'milnepublishing.geneseo.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895139627657914937086060101143380561860377228976395672620582671710686383954976254785703499890633923224223615021453239919737928024120818734989778426118663072020440938246898990084408735400925715390570988308041361801523441342331297295797589504830779995196195601732610230200119837253129512814022250171282302132590542100534435396119377746688836093162586214518624217846459994018022054724808705240605161656262661936805748420894607326288499440950536804447735598390211210337977927528594589730337546630906637973604475598070504040638117808668010517871510756546951596013390133394963805930734761519204144047478200945218949371215082606749353336095543705582409624333622079849861998697142189128887748710428334508543874376351128275647366667996036499015592927908913050261902492518293427111642044484691641574482337319546015267498445365912547196062198963918138524055525875362541649832365751172498144949377398499570015472375081734503295456491228375152812072103433249893046002043016766099665345421017992774806051811014084602306354572038430123791478781960093071539704504059873818718938191305921263978717926891154592418008128622159932417337090175027649823337923862822834803099617465450524596378077493198868609520534294506643832729472263023048642156722134997 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a6940fcfe47de34c94911353a31973ff40fe011a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milnepublishing.geneseo.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milnepublishing.pressbooks.pub' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001706602f43a0000040300473045022100a9b734b08776231a0a090a404029ddd79027e600a00d752c8256d08fee1c060f02203674c9035565cfd954553bc6103cc3a5e4c80ce3fd709c59d1f413385a009f1d00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001706602f484000004030047304502205ef9e82c2e850dee0c697584ab67ba38c96bfc01b9f5e777b50033ff56b97446022100d5e8e1b17c26454ba8960e6c8461d4415cc005c3dd183133ecb5ebe7420dc0c1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) . . . . . . . . [c:1|t:2|false] . . . . . . . . [c:0|t:15|false] . . . . . . . . [c:1|t:22|false]