staging.renovatio.zaytuna.edu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1a:21:64:c8:a3:0f:fc:61:31:49:24:4e:f4:38:bb:91:92 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging.renovatio.zaytuna.edu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1a:21:64:c8:a3:0f:fc:61:31:49:24:4e:f4:38:bb:91:92Serial Number (int): 270228587158172954300079861585469066940818
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fa:19:ab:4e:74:64:a3:fb:8d:d2:7f:1b:82:4e:69:2a:d7:37:4b:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e3:74:08:e2:f0:e7:0d:72:a8:98:ae:25:3b:e6:5e:c6:c4:9d:c1:a5
Fingerprint (sha256): 25:12:06:a5:f2:13:b7:3e:cc:0b:56:82:c3:63:a6:e4:62:28:7d:c6:d2:e6:6d:7d:f9:84:c8:d8:33:4d:82:0e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate staging.renovatio.zaytuna.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.renovatio.zaytuna.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging.renovatio.zaytuna.edu
Other certificates including the domain name zaytuna.edu
(limited to 100 certificates)
bookstore.zaytuna.edu
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
securedns.planmygift.org
bookstore.zaytuna.edu
plannedgiving.zaytuna.edu
dev.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
bookclub.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
blog.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
bookstore.zaytuna.edu
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
securedns.planmygift.org
plannedgiving.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
securedns.planmygift.org
securedns.planmygift.org
plannedgiving.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
dev.zaytuna.edu
securedns.planmygift.org
dev.zaytuna.edu
bookstore.zaytuna.edu
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
info.zaytuna.edu
sni248639.cloudflaressl.com
blog.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
dev.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
securedns.planmygift.org
info.zaytuna.edu
securedns.planmygift.org
securedns.planmygift.org
staging.renovatio.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
info.zaytuna.edu
info.zaytuna.edu
plannedgiving.zaytuna.edu
plannedgiving.zaytuna.edu
staging.renovatio.zaytuna.edu
bookstore.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
dev.zaytuna.edu
sni248639.cloudflaressl.com
staging.renovatio.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
*.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
securedns.planmygift.org
bookstore.zaytuna.edu
plannedgiving.zaytuna.edu
dev.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
bookclub.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
blog.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
bookstore.zaytuna.edu
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
securedns.planmygift.org
plannedgiving.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
securedns.planmygift.org
securedns.planmygift.org
plannedgiving.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
dev.zaytuna.edu
securedns.planmygift.org
dev.zaytuna.edu
bookstore.zaytuna.edu
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
info.zaytuna.edu
sni248639.cloudflaressl.com
blog.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
dev.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
securedns.planmygift.org
info.zaytuna.edu
securedns.planmygift.org
securedns.planmygift.org
staging.renovatio.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
info.zaytuna.edu
info.zaytuna.edu
plannedgiving.zaytuna.edu
plannedgiving.zaytuna.edu
staging.renovatio.zaytuna.edu
bookstore.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
dev.zaytuna.edu
sni248639.cloudflaressl.com
staging.renovatio.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
*.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
Certificate
The complete raw certificate details for staging.renovatio.zaytuna.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAxohZMijD/xhMUkkTvQ4u5GSMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTQxNjU4MDVaFw0x OTEwMTIxNjU4MDVaMCgxJjAkBgNVBAMTHXN0YWdpbmcucmVub3ZhdGlvLnpheXR1 bmEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZ5gL1KsuK2 OhEcU6HJJbvk45IsZspLieovNYyeYYe597/PQrx2HjuNIEwcFSwLxYZpEkE2U7Fh pevKce1xxTyMhTbyVARwUftIX1H6YL5/j9wQuXTZE9xeGIJL3Pk2MRuKp+9FMkDU Nlm6VYjf+kF4CBxUyJD9rfBHf0C+k+FoJpQWEZh2QBYmAPF7FFhwGJfMka3xPm45 x4T9ZKEPaH2CKxisliU1IdpviwHUGbgoQsIauJnWr/un8RcLTGPBOdZH+T2l4NAZ +yJLOtxE8AXcL7L31ZEGzoXPseI5hG+zLW4tMDJC8IxIGv0DOxA9TL8BChODFnnv H7iHOloqhwIDAQABo4ICcDCCAmwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT6GatO dGSj+43SfxuCTmkq1zdLbjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCgGA1UdEQQhMB+CHXN0YWdpbmcucmVub3ZhdGlv LnpheXR1bmEuZWR1MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYK KwYBBAHWeQIEAgSB8wSB8ADuAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMB nd3x2/4AAAFr8aJ4bAAABAMARjBEAiBE6yksKqu8cKr+8VUTWFTrtoHa0PA8g9vd C0aMfmrYbwIgITztH/txje0dnrKG+NWF1HLFW5YPNHSK4NA0shihfq0AdQApPFGW VMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWvxonhLAAAEAwBGMEQCIAEx HdrLuAqmKAgPyfaod/cgmd1lYwvaenkCPfmkZQWeAiA2v6IW2sA9eKp/FqmG9q9P kdwVqgXKN3DFTw7y0SCs4TANBgkqhkiG9w0BAQsFAAOCAQEAXjQw0olSckLJcgvj +xNcm9+8Y0C59t1eXly4Olu05aXsxIW8RYE89vzxWrqb3sAyVzvhirIPUYAjjf/A l/k2+4xqWRcPYNOC6uab/FwOnczvTbxglRN7HBsT6RDmINCGFC3JvrgVE+q+rcLb 7vL60laK65w5jBN01aT7c/KyOQBBAlBf3oyjcHRh/9zePbgEjEo9oZH5FXYt+6fg 8qrBhY7R72ztu3q6mv3KlKx0ePn4yapIW4vUnZwBEOOxZN7AQepx1XqKKSnieTou m9N+Tfv3imWPNrhUQe3s0jEei0USMzIlO6UjA0Gf3QvH+KFLKXvRQUE8MjDEdUHB MfNlrw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZ5gL1KsuK2OhEcU6HJ Jbvk45IsZspLieovNYyeYYe597/PQrx2HjuNIEwcFSwLxYZpEkE2U7FhpevKce1x xTyMhTbyVARwUftIX1H6YL5/j9wQuXTZE9xeGIJL3Pk2MRuKp+9FMkDUNlm6VYjf +kF4CBxUyJD9rfBHf0C+k+FoJpQWEZh2QBYmAPF7FFhwGJfMka3xPm45x4T9ZKEP aH2CKxisliU1IdpviwHUGbgoQsIauJnWr/un8RcLTGPBOdZH+T2l4NAZ+yJLOtxE 8AXcL7L31ZEGzoXPseI5hG+zLW4tMDJC8IxIGv0DOxA9TL8BChODFnnvH7iHOloq hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270228587158172954300079861585469066940818 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 16:58:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 16:58:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.renovatio.zaytuna.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23767553664302420375410559701917433031974209664766505954093608534532032332111628258913089189493297152966690621822865823299038912247678183579926789842859033293712007391585351278113204709462880063145874778304141129468092329193796595031744374337794524120698588975973626024036342287549281637931021985741083710727479188938560888975561105058513384570551594259306711614420218388234315514481354786516404569450962280745312996616552692782234303168630768232752735141372649889198872792797188871982044261471899891605698791927422322091547106201387759566364238594063890648217454759694535022084764508954176084003624706960596737337991 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fa19ab4e7464a3fb8dd27f1b824e692ad7374b6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.renovatio.zaytuna.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bf1a2786c0000040300463044022044eb292c2aabbc70aafef155135854ebb681dad0f03c83dbdd0b468c7e6ad86f0220213ced1ffb718ded1d9eb286f8d585d472c55b960f34748ae0d034b218a17ead007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bf1a2784b0000040300463044022001311ddacbb80aa628080fc9f6a877f72099dd65630bda7a79023df9a465059e022036bfa216dac03d78aa7f16a986f6af4f91dc15aa05ca3770c54f0ef2d120ace1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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