ca-ecology.ucnrs.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ca:a5:f2:ca:93:27:73:a6:53:a7:83:95:da:71:91:85:bc was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ca-ecology.ucnrs.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ca:a5:f2:ca:93:27:73:a6:53:a7:83:95:da:71:91:85:bcSerial Number (int): 330294479177160075661331159728174893467068
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a6:6c:8f:5e:e1:8d:f1:4c:eb:c3:90:d3:06:7e:0e:5f:1c:f9:41:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 64:34:25:15:b1:a6:b0:42:9d:ec:f1:89:b8:68:6e:9d:a8:1c:4b:19
Fingerprint (sha256): 31:93:ca:28:a5:3a:28:c7:1e:76:fe:81:9e:a3:26:dc:73:e7:b0:e5:c6:b2:e6:16:30:19:f0:71:e7:02:3e:21
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ca-ecology.ucnrs.org
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ca-ecology.ucnrs.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ca-ecology.ucnrs.org
caecology.ucnrs.org
california-ecology.ucnrs.org
californiaecology.org
granites.ucnrs.net
nrs.ucop.edu
ucnrs.com
ucnrs.net
ucnrs.org
weedtaskforce.org
www.ucnrs.com
www.ucnrs.net
www.ucnrs.org
www.weedtaskforce.org
caecology.ucnrs.org
california-ecology.ucnrs.org
californiaecology.org
granites.ucnrs.net
nrs.ucop.edu
ucnrs.com
ucnrs.net
ucnrs.org
weedtaskforce.org
www.ucnrs.com
www.ucnrs.net
www.ucnrs.org
www.weedtaskforce.org
Other certificates including the domain name ucnrs.org
(limited to 100 certificates)
iseeci.ucnrs.org
sagehen.ucnrs.org
chi.ucnrs.org
medex.ucnrs.org
anzaborrego.ucnrs.org
sanjoaquin.ucnrs.org
*.ucnrs.org
sanjoaquin.ucnrs.org
ucnrs.org
anzaborrego.ucnrs.org
ca-ecology.ucnrs.org
stuntranch.ucnrs.org
paradisereserve.ucnrs.org
ca-ecology.ucnrs.org
iseeci.ucnrs.org
ecopreserve.ucnrs.org
iseeci.ucnrs.org
forest.ucnrs.org
ucnrs.org
burns.ucnrs.org
ucnrs.org
blueoakranch.ucnrs.org
iseeci.ucnrs.org
medex.ucnrs.org
burns.ucnrs.org
iseeci.ucnrs.org
burns.ucnrs.org
ca-ecology.ucnrs.org
ecopreserve.ucnrs.org
deepcanyon.ucnrs.org
bigcreekblog.ucnrs.org
stuntranch.ucnrs.org
paradisereserve.ucnrs.org
stuntranch.ucnrs.org
ca-ecology.ucnrs.org
ca-ecology.ucnrs.org
carpinteria.ucnrs.org
anzaborrego.ucnrs.org
ucnrs.org
granite.ucnrs.org
sagehen.ucnrs.org
granite.ucnrs.org
anzaborrego.ucnrs.org
bigcreekblog.ucnrs.org
ca-ecology.ucnrs.org
deepcanyon.ucnrs.org
chi.ucnrs.org
ca-ecology.ucnrs.org
ucnrs.org
ca-ecology.ucnrs.org
chi.ucnrs.org
granite.ucnrs.org
ecopreserve.ucnrs.org
james.ucnrs.org
blueoakranch.ucnrs.org
ca-ecology.ucnrs.org
sanjoaquin.ucnrs.org
iseeci.ucnrs.org
burns.ucnrs.org
james.ucnrs.org
ca-ecology.ucnrs.org
blueoakranch.ucnrs.org
sagehen.ucnrs.org
granites.ucnrs.net
james.ucnrs.org
medex.ucnrs.org
sanjoaquin.ucnrs.org
ucnrs.org
james.ucnrs.org
medex.ucnrs.org
blueoakranch.ucnrs.org
ca-ecology.ucnrs.org
csfrs.ucnrs.org
forest.ucnrs.org
ca-ecology.ucnrs.org
carpinteria.ucnrs.org
deepcanyon.ucnrs.org
ca-ecology.ucnrs.org
chi.ucnrs.org
ca-ecology.ucnrs.org
ca-ecology.ucnrs.org
ucnrs.org
james.ucnrs.org
burns.ucnrs.org
bigcreekblog.ucnrs.org
ca-ecology.ucnrs.org
blueoakranch.ucnrs.org
deepcanyon.ucnrs.org
granites.ucnrs.net
carpinteria.ucnrs.org
paradisereserve.ucnrs.org
paradisereserve.ucnrs.org
chi.ucnrs.org
anzaborrego.ucnrs.org
ca-ecology.ucnrs.org
stuntranch.ucnrs.org
paradisereserve.ucnrs.org
deepcanyon.ucnrs.org
anzaborrego.ucnrs.org
paradisereserve.ucnrs.org
sagehen.ucnrs.org
chi.ucnrs.org
medex.ucnrs.org
anzaborrego.ucnrs.org
sanjoaquin.ucnrs.org
*.ucnrs.org
sanjoaquin.ucnrs.org
ucnrs.org
anzaborrego.ucnrs.org
ca-ecology.ucnrs.org
stuntranch.ucnrs.org
paradisereserve.ucnrs.org
ca-ecology.ucnrs.org
iseeci.ucnrs.org
ecopreserve.ucnrs.org
iseeci.ucnrs.org
forest.ucnrs.org
ucnrs.org
burns.ucnrs.org
ucnrs.org
blueoakranch.ucnrs.org
iseeci.ucnrs.org
medex.ucnrs.org
burns.ucnrs.org
iseeci.ucnrs.org
burns.ucnrs.org
ca-ecology.ucnrs.org
ecopreserve.ucnrs.org
deepcanyon.ucnrs.org
bigcreekblog.ucnrs.org
stuntranch.ucnrs.org
paradisereserve.ucnrs.org
stuntranch.ucnrs.org
ca-ecology.ucnrs.org
ca-ecology.ucnrs.org
carpinteria.ucnrs.org
anzaborrego.ucnrs.org
ucnrs.org
granite.ucnrs.org
sagehen.ucnrs.org
granite.ucnrs.org
anzaborrego.ucnrs.org
bigcreekblog.ucnrs.org
ca-ecology.ucnrs.org
deepcanyon.ucnrs.org
chi.ucnrs.org
ca-ecology.ucnrs.org
ucnrs.org
ca-ecology.ucnrs.org
chi.ucnrs.org
granite.ucnrs.org
ecopreserve.ucnrs.org
james.ucnrs.org
blueoakranch.ucnrs.org
ca-ecology.ucnrs.org
sanjoaquin.ucnrs.org
iseeci.ucnrs.org
burns.ucnrs.org
james.ucnrs.org
ca-ecology.ucnrs.org
blueoakranch.ucnrs.org
sagehen.ucnrs.org
granites.ucnrs.net
james.ucnrs.org
medex.ucnrs.org
sanjoaquin.ucnrs.org
ucnrs.org
james.ucnrs.org
medex.ucnrs.org
blueoakranch.ucnrs.org
ca-ecology.ucnrs.org
csfrs.ucnrs.org
forest.ucnrs.org
ca-ecology.ucnrs.org
carpinteria.ucnrs.org
deepcanyon.ucnrs.org
ca-ecology.ucnrs.org
chi.ucnrs.org
ca-ecology.ucnrs.org
ca-ecology.ucnrs.org
ucnrs.org
james.ucnrs.org
burns.ucnrs.org
bigcreekblog.ucnrs.org
ca-ecology.ucnrs.org
blueoakranch.ucnrs.org
deepcanyon.ucnrs.org
granites.ucnrs.net
carpinteria.ucnrs.org
paradisereserve.ucnrs.org
paradisereserve.ucnrs.org
chi.ucnrs.org
anzaborrego.ucnrs.org
ca-ecology.ucnrs.org
stuntranch.ucnrs.org
paradisereserve.ucnrs.org
deepcanyon.ucnrs.org
anzaborrego.ucnrs.org
paradisereserve.ucnrs.org
Certificate
The complete raw certificate details for ca-ecology.ucnrs.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG+jCCBeKgAwIBAgISA8ql8sqTJ3OmU6eDldpxkYW8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MDcwOTQ1NDhaFw0x ODEyMDYwOTQ1NDhaMB8xHTAbBgNVBAMTFGNhLWVjb2xvZ3kudWNucnMub3JnMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe6rcUtUcSKrFHCBY3WpsgEN gYE27oLAozFusJCIofdCM0leeBZdnXxfO9HQM4K+UVWwKmpk3CS49yPuGUzp26c4 Wn1JTHcLmkAZhtdFwgVENG/tMjAy1gO0o79i0kawXAmdeRyJxS01+epDQL43QoSv uD0Uhly7dSdSHkQKKxMh8eFYTZCxHHdjjgpFFMcuav4aN/nXvHCT280jj0CqiyuY 6XWnnjD7hQucoTX4FqZaORGsRSzaoNJFma1Sl6/hldzsT46BEIeTrWsm8CwpZ7eO kRBJgrrJh6Aprb1+/Ax39doVZ/eTlBs6aYNuZ7ftt07h2T09mhrx/0sgQCR6GQID AQABo4IEAzCCA/8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSmbI9e4Y3xTOvDkNMG fg5fHPlBhTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j cnlwdC5vcmcvMIIBBQYDVR0RBIH9MIH6ghRjYS1lY29sb2d5LnVjbnJzLm9yZ4IT Y2FlY29sb2d5LnVjbnJzLm9yZ4IcY2FsaWZvcm5pYS1lY29sb2d5LnVjbnJzLm9y Z4IVY2FsaWZvcm5pYWVjb2xvZ3kub3JnghJncmFuaXRlcy51Y25ycy5uZXSCDG5y cy51Y29wLmVkdYIJdWNucnMuY29tggl1Y25ycy5uZXSCCXVjbnJzLm9yZ4IRd2Vl ZHRhc2tmb3JjZS5vcmeCDXd3dy51Y25ycy5jb22CDXd3dy51Y25ycy5uZXSCDXd3 dy51Y25ycy5vcmeCFXd3dy53ZWVkdGFza2ZvcmNlLm9yZzCB/gYDVR0gBIH2MIHz MAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2Vy dGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0 aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUg UG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRv cnkvMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAKTxRllTIOWW6qlD8WAfUt2+/ WHopctykwwz05UVH9HgAAAFls6NMLgAABAMARjBEAiAr4Z7AiFpQH3MfzOQpMzb0 kziHo9hRaNAOSzngcHL2hQIgcob6PQlmVh7qu0UwOUANqiQauE6cQYkQyDCZ9hUs Z1AAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWWzo0xvAAAE AwBHMEUCICIYBFCmWeHh3aR2nDatHSNVz8YvepHmWppAqmtlQbVzAiEAumEWZUFo tUqg4zVITcgvYHxReGv6/OEN5HmvylaLmGcwDQYJKoZIhvcNAQELBQADggEBAGGm KUEnAMto02eCoTKlu0OPbMgWVDYB9JL8p8EyjW0sDVWCDrXCxq8lYkUWqcZYpDLm H5+URC0675e7cXJ/w0ZW2kWTGrQWGI7BjpQpHKVSLa/y9qJ/sbIc8kQeu1PPm5YC pFj8TeEthWPSgvf6JtHFhHJY/CS0Mx0imDkCy+MdgTNw8yBhBnd4Az7nWvH3WSmt RdTJsKCj7A/78XDedzWkaMYK+eXJPxv57PBXYOVKt2FAVPgtdjTLWZz/AKZguJIg 0U+NSkVjXT5Dng0tGWPolTtx2yPwz13sLLHICQ5o8vYq+Qdf65W+zsLgo+PPfjpp 8sLT3ki3Z0HB4J3DMXw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe6rcUtUcSKrFHCBY3Wp sgENgYE27oLAozFusJCIofdCM0leeBZdnXxfO9HQM4K+UVWwKmpk3CS49yPuGUzp 26c4Wn1JTHcLmkAZhtdFwgVENG/tMjAy1gO0o79i0kawXAmdeRyJxS01+epDQL43 QoSvuD0Uhly7dSdSHkQKKxMh8eFYTZCxHHdjjgpFFMcuav4aN/nXvHCT280jj0Cq iyuY6XWnnjD7hQucoTX4FqZaORGsRSzaoNJFma1Sl6/hldzsT46BEIeTrWsm8Cwp Z7eOkRBJgrrJh6Aprb1+/Ax39doVZ/eTlBs6aYNuZ7ftt07h2T09mhrx/0sgQCR6 GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330294479177160075661331159728174893467068 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 09:45:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 09:45:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ca-ecology.ucnrs.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24481685272734617842521196873130408044666576618263789871055254752818413865042224489736224757409527997236912853880189233173869325937992229747841335647919126140737138655862424016062578844327439893652649828390987044210060087941825036369589861832621037929170393237362766586093777561978307605943825068224817181757817141416141407258210648083656672713015123980807206354589021924350968030780042088166451258891029994470711188662837125051138291573930595137529559159857524737821752451198995625566928955022653180646184640200468796983137167351240465663662113967491511237096142030456791492469197828471019773389990867442671424928281 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a66c8f5ee18df14cebc390d3067e0e5f1cf94185 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-ecology.ucnrs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caecology.ucnrs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'california-ecology.ucnrs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiaecology.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granites.ucnrs.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrs.ucop.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucnrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucnrs.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucnrs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedtaskforce.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucnrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucnrs.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucnrs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weedtaskforce.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165b3a34c2e000004030046304402202be19ec0885a501f731fcce4293336f4933887a3d85168d00e4b39e07072f68502207286fa3d0966561eeabb453039400daa241ab84e9c418910c83099f6152c67500076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165b3a34c6f0000040300473045022022180450a659e1e1dda4769c36ad1d2355cfc62f7a91e65a9a40aa6b6541b573022100ba6116654168b54aa0e335484dc82f607c51786bfafce10de479afca568b9867 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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