calperformances.org
Issued by R3
About this certificate
This digital certificate with serial number 04:76:fd:cc:9f:e9:43:68:50:82:db:eb:8f:f1:88:72:43:c3 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=calperformances.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:76:fd:cc:9f:e9:43:68:50:82:db:eb:8f:f1:88:72:43:c3Serial Number (int): 388939820178588600546440385479664041345987
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 04:44:6a:c8:a3:19:d5:b1:4a:73:7c:58:7f:b7:f5:6c:39:01:b2:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 56:1b:b0:6a:47:7f:6e:fc:ab:18:67:a1:7e:f7:43:29:c5:e1:8e:05
Fingerprint (sha256): 33:1d:fe:2a:2b:66:b1:32:f0:20:33:98:a0:5e:13:cb:ea:39:1c:11:a2:48:9d:f9:99:50:78:ff:93:95:96:38
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate calperformances.org
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for calperformances.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
calperformances.org
facilities.calperformances.org
news.calperformances.org
www.calperformances.org
facilities.calperformances.org
news.calperformances.org
www.calperformances.org
Other certificates including the domain name calperformances.org
(limited to 100 certificates)
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
bi.operaphila.org
hub.meed.com
dev.wellness.yale.edu
secure-uswe2-1.tessituranetwork.com
info-dev.calperformances.org
good.gsm.cornell.edu
secure-uswe2-1.tessituranetwork.com
dev.embody.yale.edu
secure-uswe2-1.tessituranetwork.com
expeditions.sandiegozoo.org
club.kjzz.org
secure-uswe2-1.tessituranetwork.com
dev.wellness.yale.edu
5735834829455360-fe3.pantheonsite.io
secure-uswe2-1.tessituranetwork.com
host2.openminds.com
test.calperformances.org
5649684605435904-fe1.pantheonsite.io
secure-uswe2-1.tessituranetwork.com
calperformances.org
secure-uswe2-1.tessituranetwork.com
calperformances.org
secure-uswe2-1.tessituranetwork.com
connect.iadb.org
bi.operaphila.org
secure-uswe2-1.tessituranetwork.com
securessl-pst1.tessituranetworkhost.com
calperformances.org
bi.operaphila.org
acadmintest.cuofco.org
secure-uswe2-1.tessituranetwork.com
5735834829455360-fe3.pantheonsite.io
bi.operaphila.org
securessl-pst1.tessituranetworkhost.com
test.calperformances.org
covid.usmle.org
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
securessl-pst1.tessituranetworkhost.com
calperformances.org
cms.legacy.com
secure-uswe2-1.tessituranetwork.com
dev.dhsri.yale.edu
d7.cmc.edu
clc.shawnee.edu
bi.operaphila.org
industri40.ida.dk
info-dev.calperformances.org
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
d7.cmc.edu
bi.operaphila.org
secure-uswe2-1.tessituranetwork.com
csc.arizona.edu
securessl-pst1.tessituranetworkhost.com
5735834829455360-fe3.pantheonsite.io
secure-uswe2-1.tessituranetwork.com
bi.operaphila.org
csc.arizona.edu
secure-uswe2-1.tessituranetwork.com
csc.arizona.edu
dev.dhsri.yale.edu
secure-uswe2-1.tessituranetwork.com
bi.operaphila.org
bi.operaphila.org
csc.arizona.edu
calperformances.org
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
acadmintest.cuofco.org
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
secure3.calperformances.org
securessl-pst1.tessituranetworkhost.com
connect.iadb.org
bi.operaphila.org
dev-lp-jhubsph.edu.help
citeak.multidevcom.uaf.edu
bi.operaphila.org
industri40.ida.dk
secure-uswe2-1.tessituranetwork.com
coins.rutgers.edu
design-engineering.princeton.edu
dev-web-degacc.edu.help
bi.operaphila.org
bi.capacityinteractive.com
dashboard.calperformances.org
secure-uswe2-1.tessituranetwork.com
dev-web-degacc.edu.help
securessl-pst1.tessituranetworkhost.com
bi.operaphila.org
gws-uat.earthjustice.org
bi.operaphila.org
bi.operaphila.org
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
bi.operaphila.org
hub.meed.com
dev.wellness.yale.edu
secure-uswe2-1.tessituranetwork.com
info-dev.calperformances.org
good.gsm.cornell.edu
secure-uswe2-1.tessituranetwork.com
dev.embody.yale.edu
secure-uswe2-1.tessituranetwork.com
expeditions.sandiegozoo.org
club.kjzz.org
secure-uswe2-1.tessituranetwork.com
dev.wellness.yale.edu
5735834829455360-fe3.pantheonsite.io
secure-uswe2-1.tessituranetwork.com
host2.openminds.com
test.calperformances.org
5649684605435904-fe1.pantheonsite.io
secure-uswe2-1.tessituranetwork.com
calperformances.org
secure-uswe2-1.tessituranetwork.com
calperformances.org
secure-uswe2-1.tessituranetwork.com
connect.iadb.org
bi.operaphila.org
secure-uswe2-1.tessituranetwork.com
securessl-pst1.tessituranetworkhost.com
calperformances.org
bi.operaphila.org
acadmintest.cuofco.org
secure-uswe2-1.tessituranetwork.com
5735834829455360-fe3.pantheonsite.io
bi.operaphila.org
securessl-pst1.tessituranetworkhost.com
test.calperformances.org
covid.usmle.org
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
securessl-pst1.tessituranetworkhost.com
calperformances.org
cms.legacy.com
secure-uswe2-1.tessituranetwork.com
dev.dhsri.yale.edu
d7.cmc.edu
clc.shawnee.edu
bi.operaphila.org
industri40.ida.dk
info-dev.calperformances.org
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
d7.cmc.edu
bi.operaphila.org
secure-uswe2-1.tessituranetwork.com
csc.arizona.edu
securessl-pst1.tessituranetworkhost.com
5735834829455360-fe3.pantheonsite.io
secure-uswe2-1.tessituranetwork.com
bi.operaphila.org
csc.arizona.edu
secure-uswe2-1.tessituranetwork.com
csc.arizona.edu
dev.dhsri.yale.edu
secure-uswe2-1.tessituranetwork.com
bi.operaphila.org
bi.operaphila.org
csc.arizona.edu
calperformances.org
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
acadmintest.cuofco.org
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
secure3.calperformances.org
securessl-pst1.tessituranetworkhost.com
connect.iadb.org
bi.operaphila.org
dev-lp-jhubsph.edu.help
citeak.multidevcom.uaf.edu
bi.operaphila.org
industri40.ida.dk
secure-uswe2-1.tessituranetwork.com
coins.rutgers.edu
design-engineering.princeton.edu
dev-web-degacc.edu.help
bi.operaphila.org
bi.capacityinteractive.com
dashboard.calperformances.org
secure-uswe2-1.tessituranetwork.com
dev-web-degacc.edu.help
securessl-pst1.tessituranetworkhost.com
bi.operaphila.org
gws-uat.earthjustice.org
bi.operaphila.org
bi.operaphila.org
Certificate
The complete raw certificate details for calperformances.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISBHb9zJ/pQ2hQgtvrj/GIckPDMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAxMDQxNjMyNTRaFw0yMzA0MDQxNjMyNTNaMB4xHDAaBgNVBAMT E2NhbHBlcmZvcm1hbmNlcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDDjqJEwXuHA21Uj64qXlQXQIPlTdSRAx4EXyy99T10ailBTjQieDZBWrUH 4EUwbUyfsgLOER1hpB3/zPajjIJK8Q6u4cdu9HH2Pw2uQHZUN1OGiiYUoRrRhyv4 3sm30GIa6p8UVyCR/cnrUaC10595ve7UTW8t8UPXgcmYkaUO28XCnsq1mZK4qdQO +21kCl6CHOXDVL5CtLuxmjl6k3kCzblXgxWdbl1MkVN+aGdsH2+SEkOH47oN4tiz NfR1LFWuwYjrqAgO+Ty/BnVraKyUgsZDZYML/ahZXZH4+9Ydm5QqrMsa1E5Ya69k tHRDOI0OvIX5xUYgKw60zI66+/hlAgMBAAGjggKiMIICnjAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFAREasijGdWxSnN8WH+39Ww5AbJiMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMHEGA1UdEQRqMGiCE2NhbHBlcmZvcm1hbmNlcy5vcmeCHmZhY2lsaXRp ZXMuY2FscGVyZm9ybWFuY2VzLm9yZ4IYbmV3cy5jYWxwZXJmb3JtYW5jZXMub3Jn ghd3d3cuY2FscGVyZm9ybWFuY2VzLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3 BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy eXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ALc++yTfnE26dfI5xbpY 9Gxd/ELPep81xJ4dCYEl7bSZAAABhX3X0ygAAAQDAEcwRQIhAPx5c6xlmq9/95qw RstPCE1WYnbOBrKhgoLoaUNnQWoQAiB5GpNfFq2tOyXlIPcWTSAc2OCwFXlGTmQk xSp2b9bEOwB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABhX3X 1UsAAAQDAEgwRgIhANaZkrECY+L7WcQ8JEdHyNNtd7bNVG98Aq22npv10ivEAiEA qOrhxa++4Sp7HAVtAJAXDw5rhvJqtfACAbTaaNCaVY8wDQYJKoZIhvcNAQELBQAD ggEBAAsQldLYV67G20Y4mZ6WkvLavgSwN3oqQNR3p+3aZspld1JUW8dVfoq61ZAl QEJTKCvznSVJiNSOvtDD2PUXYrWtr8C2IZsT8+88Ninu/NXH/PMLwIwgwS/AJ/NB DWFo33h7JsI8ZgCuV/W/+lstfbKGZbyHkAuv6hRKJfLpesDOP7WIa2k84dc/Hfod Jd5KYLbRizBpGZt70ie/dXwpqK2r5vr02HH6Sv0Y1QJs/jJXfccn+Dv45mV+Kk4V aUVt8+irdmK3M+PR6SG8zR16g22lnLtFCuEoCXqcamr1w8jDOPKbXRBvWX/Wdzeg FeVoEgf7gxhUId124aMMbrmstJw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46iRMF7hwNtVI+uKl5U F0CD5U3UkQMeBF8svfU9dGopQU40Ing2QVq1B+BFMG1Mn7ICzhEdYaQd/8z2o4yC SvEOruHHbvRx9j8NrkB2VDdThoomFKEa0Ycr+N7Jt9BiGuqfFFcgkf3J61GgtdOf eb3u1E1vLfFD14HJmJGlDtvFwp7KtZmSuKnUDvttZApeghzlw1S+QrS7sZo5epN5 As25V4MVnW5dTJFTfmhnbB9vkhJDh+O6DeLYszX0dSxVrsGI66gIDvk8vwZ1a2is lILGQ2WDC/2oWV2R+PvWHZuUKqzLGtROWGuvZLR0QziNDryF+cVGICsOtMyOuvv4 ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 388939820178588600546440385479664041345987 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 16:32:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 16:32:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'calperformances.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24686804846986700463286235473113579310640311389133520587690101062602581528438869452339616892952701902849061179936484875175962958584343852540185544183047237885328788321992471394861784671407872629842251491403749912828485536459849583589245555154424957554500881276697578384568150008763221433348736210875490343848174039032910683409070497266386346837523561884554602537558352214849828580677730541219147370984863199779155273255284942666036956568962165193514919553059246300356407560953783348314569168119667241859434381348711752591025577632034019588909291610597210916265772008296336673389410930207470033159467095714263857887333 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 04446ac8a319d5b14a737c587fb7f56c3901b262 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calperformances.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facilities.calperformances.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.calperformances.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calperformances.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001857dd7d3280000040300473045022100fc7973ac659aaf7ff79ab046cb4f084d566276ce06b2a18282e8694367416a100220791a935f16adad3b25e520f7164d201cd8e0b01579464e6424c52a766fd6c43b0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001857dd7d54b0000040300483046022100d69992b10263e2fb59c43c244747c8d36d77b6cd546f7c02adb69e9bf5d22bc4022100a8eae1c5afbee12a7b1c056d0090170f0e6b86f26ab5f00201b4da68d09a558f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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