amsurg.com
Issued by R3
About this certificate
This digital certificate with serial number 04:e0:58:f4:9c:84:d9:d2:6f:b0:80:d1:cb:eb:28:a5:8e:56 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=amsurg.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e0:58:f4:9c:84:d9:d2:6f:b0:80:d1:cb:eb:28:a5:8e:56Serial Number (int): 424790636075975185767583825167436042571350
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f6:bb:8a:1e:91:97:4c:e3:87:8a:0e:bf:85:ed:3f:c5:6f:5d:85:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 72:be:f1:c6:78:31:b7:9a:41:1d:2d:87:7d:fb:30:8f:7b:1c:59:a8
Fingerprint (sha256): 33:b3:e6:4f:d1:1f:2c:a3:f1:29:f0:ce:3a:36:7e:07:df:e3:b1:bd:55:58:2e:2d:aa:dc:3d:b5:4d:4c:76:9c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate amsurg.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for amsurg.com
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
amsurg.com
www.amsurg.com
www.amsurg.com
Other certificates including the domain name amsurg.com
(limited to 100 certificates)
staging.amsurg.com
amsurg.com
lyncaccessdr.amsurg.com
somni.amsurg.com
provreports.amsurg.com
jss.amsurg.com
csg.amsurg.com
amsurg.com
test.invsnap.amsurg.com
somni.amsurg.com
webmail.amsurg.com
amsurg.com
evhc.amsurg.com
invsnap.amsurg.com
lyncextwsdr.amsurg.com
*.amsurg.com
csg.amsurg.com
*.2k.amsurg.com
staging.amsurg.com
staging.amsurg.com
www.amsurg.com
amsurg.com
csg.amsurg.com
somni.amsurg.com
webmail.amsurg.com
staging.amsurg.com
www.amsurg.com
www.amsurg.com
posnap.amsurg.com
evhc.amsurg.com
evhc.amsurg.com
amsurg.com
receiver.amsurg.com
exchange.amsurg.com
www.amsurg.com
*.amsurg.com
www.amsurg.com
test.invsnap.amsurg.com
staging.amsurg.com
www.amsurg.com
staging.amsurg.com
webmail.amsurg.com
Test.Posnap.amsurg.com
somni.amsurg.com
www.amsurg.com
amsurg.com
exchange.amsurg.com
*.amsurg.com
staging.amsurg.com
amsurg.com
lyncextws.amsurg.com
webmail.amsurg.com
compass.amsurg.com
somni.amsurg.com
amsurg.com
staging.amsurg.com
*.amsurg.com
somni.amsurg.com
webocs.amsurg.com
www.amsurg.com
www.amsurg.com
www.northvc.com
amsurg.com
*.amsurg.com
*.amsurg.com
staging.amsurg.com
webmail.amsurg.com
www.amsurg.com
www.amsurg.com
evhc.amsurg.com
Reports85.amsurg.com
staging.amsurg.com
cashtrax.amsurg.com
*.amsurg.com
access.amsurg.com
posnap.amsurg.com
csg.amsurg.com
invsnap.amsurg.com
staging.amsurg.com
center.amsurg.com
partner.amsurg.com
webchat.amsurg.com
amsurg.com
amsurg.com
www.vhhomecare.net
www.amsurg.com
test.invsnap.amsurg.com
reports.amsurg.com
sharepoint.amsurg.com
staging.amsurg.com
webmail.amsurg.com
www.amsurg.com
somni.amsurg.com
amsurg.com
amsurg.com
www.amsurg.com
lyncaccess.amsurg.com
staging.amsurg.com
www.amsurg.com
staging.amsurg.com
amsurg.com
lyncaccessdr.amsurg.com
somni.amsurg.com
provreports.amsurg.com
jss.amsurg.com
csg.amsurg.com
amsurg.com
test.invsnap.amsurg.com
somni.amsurg.com
webmail.amsurg.com
amsurg.com
evhc.amsurg.com
invsnap.amsurg.com
lyncextwsdr.amsurg.com
*.amsurg.com
csg.amsurg.com
*.2k.amsurg.com
staging.amsurg.com
staging.amsurg.com
www.amsurg.com
amsurg.com
csg.amsurg.com
somni.amsurg.com
webmail.amsurg.com
staging.amsurg.com
www.amsurg.com
www.amsurg.com
posnap.amsurg.com
evhc.amsurg.com
evhc.amsurg.com
amsurg.com
receiver.amsurg.com
exchange.amsurg.com
www.amsurg.com
*.amsurg.com
www.amsurg.com
test.invsnap.amsurg.com
staging.amsurg.com
www.amsurg.com
staging.amsurg.com
webmail.amsurg.com
Test.Posnap.amsurg.com
somni.amsurg.com
www.amsurg.com
amsurg.com
exchange.amsurg.com
*.amsurg.com
staging.amsurg.com
amsurg.com
lyncextws.amsurg.com
webmail.amsurg.com
compass.amsurg.com
somni.amsurg.com
amsurg.com
staging.amsurg.com
*.amsurg.com
somni.amsurg.com
webocs.amsurg.com
www.amsurg.com
www.amsurg.com
www.northvc.com
amsurg.com
*.amsurg.com
*.amsurg.com
staging.amsurg.com
webmail.amsurg.com
www.amsurg.com
www.amsurg.com
evhc.amsurg.com
Reports85.amsurg.com
staging.amsurg.com
cashtrax.amsurg.com
*.amsurg.com
access.amsurg.com
posnap.amsurg.com
csg.amsurg.com
invsnap.amsurg.com
staging.amsurg.com
center.amsurg.com
partner.amsurg.com
webchat.amsurg.com
amsurg.com
amsurg.com
www.vhhomecare.net
www.amsurg.com
test.invsnap.amsurg.com
reports.amsurg.com
sharepoint.amsurg.com
staging.amsurg.com
webmail.amsurg.com
www.amsurg.com
somni.amsurg.com
amsurg.com
amsurg.com
www.amsurg.com
lyncaccess.amsurg.com
staging.amsurg.com
www.amsurg.com
staging.amsurg.com
Certificate
The complete raw certificate details for amsurg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISBOBY9JyE2dJvsIDRy+sopY5WMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA3MTAxNDAxMDdaFw0yMjEwMDgxNDAxMDZaMBUxEzARBgNVBAMT CmFtc3VyZy5jb20wggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQCFleDo Eb1kQC8pHg48X7t9awHjIUic/Ai9XrqoC8w2E17QpOcCCbOuVB8e252ki3uAobwy f7xvr6qhSBCMcAc1DQinlutoE0Fc8Nk81AoKcXK/croo6MebM87R83CbBx7InOCI QcHcb8dqDj4L9bGcb3Ccx14gpqJqH5yzdQoPvmRGtZP3zEce/AafZtsQCmmdX+lx 7TSkS4XdwnOt0gWOmDsDZfWyE3GkXhrMVosCIAiXSGJWCjMlTpuNPtPpZYsKm0DK omJ8g3xwSPjumNFXsIbxhyqxhj5Qs3chHjOY03h42zmtQvORA/jzIouTBCZeNQe8 PpRhX6OylOnJ1ROY/aEcq5cVkr5+I2zyumCFDIP/22/3YvGoDnbbHl/YkG74b9Ux CwYB0xlaaYfdT36eiwJJ2Icvh5R63+FBt/M/F20X8ZvcRkictvvTX5kGtSxP6l3S 9oXkWvCSdEbC+mk/dmSruuxwjXIkpAl1vumelro6c/oVCd67ms5B+TkEQcUCAwEA AaOCAlMwggJPMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU9ruKHpGXTOOHig6/he0/ xW9dhWUwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wJQYDVR0RBB4wHIIKYW1zdXJn LmNvbYIOd3d3LmFtc3VyZy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQBByMqx3yJGShDGoToJQodeTjGL GwPr60vHaPCQYpYG9gAAAYHooOeLAAAEAwBGMEQCIFKz/V18/4tza1+sTkhWrk9q 9X7WI4tpZRDxr/Tu4RLtAiAdZHq01vwgK69MsFpKhNJBZIeXqvBxGxHTALH3alMN 3wB1AEalVet1+pEgMLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABgeig55gAAAQD AEYwRAIgKKy13c6avnXMclXikDEdVQfLFsAqdSMq2lt/Hl+6zzQCIC08SXGnYMDQ 1Lqy9SbEi6x6ZshzC4EHENvaWeScWrQpMA0GCSqGSIb3DQEBCwUAA4IBAQAsP/MK Zg/rYV5pkIqI/uIBxSVXHQlwUdAUnDQmfqf2Pyx0Fyj9pRagqSuxeGMQ3dUSmxlB Kpk8v9APAkpTZZbJ+Uk+JKcE2TaymIOVAjbIVJxmZHLgF0eMmDG4t91LsYkca7rG km98kcjvg1nkwB+aRlJ1Rj4so7WCjCrlZirpVUO/uz441M9mJoUa088NlcTfu6FO he1R6Uji+7bLhqjzCKZxxMNj/cecOpZ6lCQsBkS48+0pHMmNvzF5gBiyIBeohM4z j1zCHF3NQRWs66T1HiTUi2dzoMpWrj5rM5HeS6r/3ZsEqDCHutFijzXX9Ht9Ou6W Kt9EkKl24deyNFxA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAhZXg6BG9ZEAvKR4OPF+7 fWsB4yFInPwIvV66qAvMNhNe0KTnAgmzrlQfHtudpIt7gKG8Mn+8b6+qoUgQjHAH NQ0Ip5braBNBXPDZPNQKCnFyv3K6KOjHmzPO0fNwmwceyJzgiEHB3G/Hag4+C/Wx nG9wnMdeIKaiah+cs3UKD75kRrWT98xHHvwGn2bbEAppnV/pce00pEuF3cJzrdIF jpg7A2X1shNxpF4azFaLAiAIl0hiVgozJU6bjT7T6WWLCptAyqJifIN8cEj47pjR V7CG8YcqsYY+ULN3IR4zmNN4eNs5rULzkQP48yKLkwQmXjUHvD6UYV+jspTpydUT mP2hHKuXFZK+fiNs8rpghQyD/9tv92LxqA522x5f2JBu+G/VMQsGAdMZWmmH3U9+ nosCSdiHL4eUet/hQbfzPxdtF/Gb3EZInLb701+ZBrUsT+pd0vaF5FrwknRGwvpp P3Zkq7rscI1yJKQJdb7pnpa6OnP6FQneu5rOQfk5BEHFAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 424790636075975185767583825167436042571350 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-10 14:01:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-08 14:01:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amsurg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3031558230610465985554208408835185389431772731356803271623053208654306794201060019898987175360277480815838606758148145545204898451620489584206860210844975176593261657113378217445243002654630013198336621431184040926175674224948222646604233737226937993627146726023664277325086706485484648881649390832007342413372706126574410284393107591258498441174598363023016812289729935992507649524186803714313171706382740854708316029793289078043571416738554185323816008230702652441772505046595865340475447687609682948377816091359315982549530928299253647125914358143484807777037680238218777790371380727715847181902533893245436870192476878660203340148703609748463007458485980976282188735806332746200138786964109890491778627529114005187594337405716008668810182333737983123232984914933400203805800914883124156664932155954580540155033958957372339538884307841336611431465728574673147473775741848887999595938807485655144772931397307365375636423109 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f6bb8a1e91974ce3878a0ebf85ed3fc56f5d8565 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsurg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsurg.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181e8a0e78b0000040300463044022052b3fd5d7cff8b736b5fac4e4856ae4f6af57ed6238b696510f1aff4eee112ed02201d647ab4d6fc202baf4cb05a4a84d241648797aaf0711b11d300b1f76a530ddf00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181e8a0e7980000040300463044022028acb5ddce9abe75cc7255e290311d5507cb16c02a75232ada5b7f1e5fbacf3402202d3c4971a760c0d0d4bab2f526c48bac7a66c8730b810710dbda59e49c5ab429 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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