www.communityfoundations.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:28:c2:de:5a:52:35:14:cf:22:cf:81:94:29:7b:d0:f5:c2 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.communityfoundations.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:28:c2:de:5a:52:35:14:cf:22:cf:81:94:29:7b:d0:f5:c2Serial Number (int): 275207177225133148406512496211563738363330
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6e:e5:1e:af:39:32:48:f5:5f:de:5e:e8:66:a9:da:e0:48:50:1a:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 56:a7:4c:01:d6:67:81:98:0e:9d:23:af:2f:e2:de:d7:93:a6:64:24
Fingerprint (sha256): 2a:01:75:3a:db:b7:cb:8f:25:b5:00:2f:0a:e0:f4:4b:b5:67:da:f5:be:eb:12:05:47:39:7e:35:03:a3:67:ea
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.communityfoundations.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.communityfoundations.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.communityfoundations.ca
Other certificates including the domain name communityfoundations.ca
(limited to 100 certificates)
careers.wolfconsulting.vn
cloudstore.tulsago.com
empleos.coloradoranchers.com
communityfoundations.ca
asi-personnel.aspscat.systems
tls.automattic.com
careers.hivepro.com
datahub.communityfoundations.ca
jobs.deepwavedigital.com
jobs.novellaafrica.com
tls.automattic.com
careers.tti-research.com
tls.automattic.com
recruitment.rubiconemployment.com
careers.communityfoundations.ca
tls.automattic.com
tls.automattic.com
drive.gtica.cl
career.fabrise.co
tls.automattic.com
recruit.initium-me.com
www.communityfoundations.ca
careers.dolbilling.net
datahub.communityfoundations.ca
careers.hivepro.com
www.communityfoundations.ca
careers.cascadeits.us
join.sakshi.org.in
tls.automattic.com
datahub.communityfoundations.ca
recruitment.rubiconemployment.com
careers.transparentbpo.com
tls.automattic.com
careers.tti-research.com
careers.wolfconsulting.vn
careers.hivepro.com
careers.brainnest.consulting
drive.gtica.cl
tls.automattic.com
datahub.communityfoundations.ca
drive.gtica.cl
jobs.timesprofessionallearning.com
careers.hivepro.com
jobs.deepwavedigital.com
careers.inspecthoa.com
drive.gtica.cl
careers.tti-research.com
careers.transparentbpo.com
careers.inspecthoa.com
careers.hivepro.com
jobs.oshricohen.me
careers.wolfconsulting.vn
careers.inspecthoa.com
career.fabrise.co
jobs.inkwell.co
drive.gtica.cl
tls.automattic.com
communityfoundations.ca
careers.inspecthoa.com
careers.hivepro.com
careers.inspecthoa.com
recruit.dreampc.com.au
jobs.timesprofessionallearning.com
empleos.coloradoranchers.com
careers.inspecthoa.com
jobs.deepwavedigital.com
communityfoundations.ca
tls.automattic.com
careers.beforecrypt.com
forms.mpcapps.com
jobs.decodingit.com
myhrms.ultechsolutions.co.za
empleos.coloradoranchers.com
careers.hivepro.com
datahub.communityfoundations.ca
careers.brainnest.consulting
jobs.oshricohen.me
careers.communityfoundations.ca
careers.inspecthoa.com
jobs.inkwell.co
careers.communityfoundations.ca
career.fabrise.co
jobs.novellaafrica.com
careers.fundae.ai
datahub.communityfoundations.ca
careers.inspecthoa.com
communityfoundations.ca
empleos.coloradoranchers.com
careers.brainnest.consulting
jobs.oshricohen.me
jobs.inkwell.co
careers.beforecrypt.com
jobs.inkwell.co
workdrive.paladintech.us
careers.inspecthoa.com
career.fabrise.co
jobs.deepwavedigital.com
files.enteracent.com
tls.automattic.com
workdrive.paladintech.us
cloudstore.tulsago.com
empleos.coloradoranchers.com
communityfoundations.ca
asi-personnel.aspscat.systems
tls.automattic.com
careers.hivepro.com
datahub.communityfoundations.ca
jobs.deepwavedigital.com
jobs.novellaafrica.com
tls.automattic.com
careers.tti-research.com
tls.automattic.com
recruitment.rubiconemployment.com
careers.communityfoundations.ca
tls.automattic.com
tls.automattic.com
drive.gtica.cl
career.fabrise.co
tls.automattic.com
recruit.initium-me.com
www.communityfoundations.ca
careers.dolbilling.net
datahub.communityfoundations.ca
careers.hivepro.com
www.communityfoundations.ca
careers.cascadeits.us
join.sakshi.org.in
tls.automattic.com
datahub.communityfoundations.ca
recruitment.rubiconemployment.com
careers.transparentbpo.com
tls.automattic.com
careers.tti-research.com
careers.wolfconsulting.vn
careers.hivepro.com
careers.brainnest.consulting
drive.gtica.cl
tls.automattic.com
datahub.communityfoundations.ca
drive.gtica.cl
jobs.timesprofessionallearning.com
careers.hivepro.com
jobs.deepwavedigital.com
careers.inspecthoa.com
drive.gtica.cl
careers.tti-research.com
careers.transparentbpo.com
careers.inspecthoa.com
careers.hivepro.com
jobs.oshricohen.me
careers.wolfconsulting.vn
careers.inspecthoa.com
career.fabrise.co
jobs.inkwell.co
drive.gtica.cl
tls.automattic.com
communityfoundations.ca
careers.inspecthoa.com
careers.hivepro.com
careers.inspecthoa.com
recruit.dreampc.com.au
jobs.timesprofessionallearning.com
empleos.coloradoranchers.com
careers.inspecthoa.com
jobs.deepwavedigital.com
communityfoundations.ca
tls.automattic.com
careers.beforecrypt.com
forms.mpcapps.com
jobs.decodingit.com
myhrms.ultechsolutions.co.za
empleos.coloradoranchers.com
careers.hivepro.com
datahub.communityfoundations.ca
careers.brainnest.consulting
jobs.oshricohen.me
careers.communityfoundations.ca
careers.inspecthoa.com
jobs.inkwell.co
careers.communityfoundations.ca
career.fabrise.co
jobs.novellaafrica.com
careers.fundae.ai
datahub.communityfoundations.ca
careers.inspecthoa.com
communityfoundations.ca
empleos.coloradoranchers.com
careers.brainnest.consulting
jobs.oshricohen.me
jobs.inkwell.co
careers.beforecrypt.com
jobs.inkwell.co
workdrive.paladintech.us
careers.inspecthoa.com
career.fabrise.co
jobs.deepwavedigital.com
files.enteracent.com
tls.automattic.com
workdrive.paladintech.us
Certificate
The complete raw certificate details for www.communityfoundations.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAyjC3lpSNRTPIs+BlCl70PXCMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjEyMTAwMDFaFw0x OTA4MTkyMTAwMDFaMCYxJDAiBgNVBAMTG3d3dy5jb21tdW5pdHlmb3VuZGF0aW9u cy5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNptgNfEArvKuCj KI7MNEDgwSqrWbPaImhmlE0ZBkIW/JL2p5o70+fSlyPs95Y5R24+8TfulIET1As2 qpRKa475e0OYVX7ue4so8C0TECQWo+ldlXCuOv/7a5SQz3q7DUvzWbqVmQxiYfdC ajJXCQzWr341PDjsNvD7qhXWIgmeLhIXGdk+mlk76Fn9OwLgkEIgaOx4UNXZXLG4 0Tl+GEG2yeqDs+XavoqcGs9t8VaKt0uZNbfZoCeahTZPqtqrLcMQv04fv+BfRrBs buWRrZHgVISHjRXA0frb5D27UlJSB5NEEIfWrHwat96U/YwZdXBKsTskIM9+lhxV qJlKeZsCAwEAAaOCAm8wggJrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUbuUerzky SPVf3l7oZqna4EhQGgwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAmBgNVHREEHzAdght3d3cuY29tbXVuaXR5Zm91bmRh dGlvbnMuY2EwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb /gAAAWrcaJLrAAAEAwBHMEUCIExyxwIKcGy833DSx1YdC6eAcCOwwKuCfYrPOk90 tZtrAiEAoeK1ZikWI39/H38gUkeyTfKRFjVbOX6NPEaVE4RCuYEAdQBj8tvN6DvM LM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWrcaJMSAAAEAwBGMEQCIH/2MZQa MvEOE61MTVsdicod4gmRbuoHBmTz0GGfOpglAiBQo9fQ7hNqIVpC7aJdZ/UQMayt JuCbt8es1qYwtV23VzANBgkqhkiG9w0BAQsFAAOCAQEAUnG8zUMPAwD7hmhDX7sU l7g/5b2g7SuKso7Ra7jCQU1XRZEC9HB3V05YkyRodpoauyr2JxFvlqmVu4mCsUdC in78l4XQ4d5Pn8eckmDCjLlZpMHXplzP9KVg6GJnORPdE36mDG4IHU19NZ49lGGI zmMEfRWt1K6tmHSnJ8BP1aDn4Y5t6oykmmcGshbNZxTMYp6EKeow0EPX3gTg/eeY RUM83qNVnQtjRSEyPxF4AZFCp1SGnnth3ZYLhCLTXSun2g3kuwk7PsX5nGIT9hbp vhRIWwJZBUF2TG+HkKC//sE5tlO7n2y/JCuiQlXlYR3XHd2ZqAmV7QGWfSzKmH7K gA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2m2A18QCu8q4KMojsw0 QODBKqtZs9oiaGaUTRkGQhb8kvanmjvT59KXI+z3ljlHbj7xN+6UgRPUCzaqlEpr jvl7Q5hVfu57iyjwLRMQJBaj6V2VcK46//trlJDPersNS/NZupWZDGJh90JqMlcJ DNavfjU8OOw28PuqFdYiCZ4uEhcZ2T6aWTvoWf07AuCQQiBo7HhQ1dlcsbjROX4Y QbbJ6oOz5dq+ipwaz23xVoq3S5k1t9mgJ5qFNk+q2qstwxC/Th+/4F9GsGxu5ZGt keBUhIeNFcDR+tvkPbtSUlIHk0QQh9asfBq33pT9jBl1cEqxOyQgz36WHFWomUp5 mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 275207177225133148406512496211563738363330 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 21:00:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 21:00:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.communityfoundations.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22648784620410401508911600701051780526394413081442000578446084782730924550265723410518100277498784399551384503991310903183223944752702781387278488823766099809981676838437649782897844179467167203561477800876263390510993109332092940474998059329433388331905045808880197426393462033253430353443696784532448075673347796937784784899648110497046312378702377078094428813979553759477425952325180791027785956530753102322657185122732770643492601020086643212111952385124493149600541616344749767748040081891969053288287712986430792965526543686832333549638993932854480511428316206334007641373175128006137609280554858113451319523739 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6ee51eaf393248f55fde5ee866a9dae048501a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communityfoundations.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016adc6892eb000004030047304502204c72c7020a706cbcdf70d2c7561d0ba7807023b0c0ab827d8acf3a4f74b59b6b022100a1e2b5662916237f7f1f7f205247b24df29116355b397e8d3c4695138442b98100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016adc689312000004030046304402207ff631941a32f10e13ad4c4d5b1d89ca1de209916eea070664f3d0619f3a9825022050a3d7d0ee136a215a42eda25d67f51031acad26e09bb7c7acd6a630b55db757 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005271bccd430f0300fb8668435fbb1497b83fe5bda0ed2b8ab28ed16bb8c2414d57459102f47077574e58932468769a1abb2af627116f96a995bb8982b147428a7efc9785d0e1de4f9fc79c9260c28cb959a4c1d7a65ccff4a560e862673913dd137ea60c6e081d4d7d359e3d946188ce63047d15add4aead9874a727c04fd5a0e7e18e6dea8ca49a6706b216cd6714cc629e8429ea30d043d7de04e0fde79845433cdea3559d0b634521323f1178019142a754869e7b61dd960b8422d35d2ba7da0de4bb093b3ec5f99c6213f616e9be14485b02590541764c6f8790a0bffec139b653bb9f6cbf242ba24255e5611dd71ddd99a80995ed01967d2cca987eca80