catamount.bywatersolutions.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:a0:2e:9b:3a:d4:31:79:2c:89:43:67:6b:1d:43:d8:01:33 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=catamount.bywatersolutions.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a0:2e:9b:3a:d4:31:79:2c:89:43:67:6b:1d:43:d8:01:33Serial Number (int): 402956272921401758489714062141046209904947
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 04:ba:6e:b9:39:01:47:76:2c:2f:23:17:e4:46:d6:54:b5:99:17:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 42:84:ce:fd:6b:b3:96:a6:22:da:2f:66:0e:aa:02:22:82:67:6e:0e
Fingerprint (sha256): 36:f5:0e:b0:42:90:ea:89:33:4f:22:39:c8:0a:f5:c3:bb:a4:9b:79:9a:8b:de:15:54:30:dc:4b:dc:85:84:6b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate catamount.bywatersolutions.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for catamount.bywatersolutions.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ainsworth.bywatersolutions.com
bennington.bywatersolutions.com
brighamfree.bywatersolutions.com
catalog.brookslibraryvt.org
catalog.rutlandfree.org
catalog.springfieldtownlibrary.org
catalog.waterburypubliclibrary.com
catamount.bywatersolutions.com
drml.bywatersolutions.com
fletchermemorial.bywatersolutions.com
guilfordfree.bywatersolutions.com
mccullough.bywatersolutions.com
morristown.bywatersolutions.com
nwpl.bywatersolutions.com
royaltonlibrary.bywatersolutions.com
staff.catamount.bywatersolutions.com
starksboropl.bywatersolutions.com
westrutlandpubliclibrary.bywatersolutions.com
bennington.bywatersolutions.com
brighamfree.bywatersolutions.com
catalog.brookslibraryvt.org
catalog.rutlandfree.org
catalog.springfieldtownlibrary.org
catalog.waterburypubliclibrary.com
catamount.bywatersolutions.com
drml.bywatersolutions.com
fletchermemorial.bywatersolutions.com
guilfordfree.bywatersolutions.com
mccullough.bywatersolutions.com
morristown.bywatersolutions.com
nwpl.bywatersolutions.com
royaltonlibrary.bywatersolutions.com
staff.catamount.bywatersolutions.com
starksboropl.bywatersolutions.com
westrutlandpubliclibrary.bywatersolutions.com
Other certificates including the domain name bywatersolutions.com
(limited to 100 certificates)
catalog.redlibrary.org
harrison.bywatersolutions.com
cin.bywatersolutions.com
audubon.bywatersolutions.com
harrison.bywatersolutions.com
arcadiapl.bywatersolutions.com
model.bywatersolutions.com
bedfordtx.bywatersolutions.com
harrison.bywatersolutions.com
washoe-aspen.bywatersolutions.com
koha.bywatersolutions.com
farmington.bywatersolutions.com
www.astinus.bywatersolutions.com
catalog.redlibrary.org
idsa.bywatersolutions.com
devs.bywatersolutions.com
staff.ajaxlibrary.ca
farmington.bywatersolutions.com
ticket.bywatersolutions.com
camden.bywatersolutions.com
disneytech.bywatersolutions.com
demo.bywatersolutions.com
bywatersolutions.com
kohacon2018.bywatersolutions.com
kohacon2018.bywatersolutions.com
dovernet.bywatersolutions.com
vokal-aspen.bywatersolutions.com
texlaw.bywatersolutions.com
bywatersolutions.com
ajaxon.bywatersolutions.com
collingswood.bywatersolutions.com
kids.meadvillelibrary.org
demo.bywatersolutions.com
ticket.bywatersolutions.com
samuelmerritt.bywatersolutions.com
catalog.dnredwoods.bywatersolutions.com
bywatersolutions.com
kids.meadvillelibrary.org
sdlaw.bywatersolutions.com
catalog.bethelu.bywatersolutions.com
kohacon2018.bywatersolutions.com
media.bywatersolutions.com
devs.bywatersolutions.com
esri.bywatersolutions.com
catalog.redlibrary.org
catalog.rahwaylibrary.org
texlaw.bywatersolutions.com
bywatersolutions.com
roundrock.bywatersolutions.com
risl.bywatersolutions.com
farmington.bywatersolutions.com
bywatersolutions.com
merial.bywatersolutions.com
demo.bywatersolutions.com
collingswood.bywatersolutions.com
devs.bywatersolutions.com
catalog.rahwaylibrary.org
kids.meadvillelibrary.org
catalog.rahwaylibrary.org
bywatersolutions.com
siskiyou.bywatersolutions.com
catalog.redlibrary.org
hkic.bywatersolutions.com
disneytech.bywatersolutions.com
esri.bywatersolutions.com
bywatersolutions.com
demo.bywatersolutions.com
uintah.bywatersolutions.com
catalog.redlibrary.org
catalog.rahwaylibrary.org
tnhsc.bywatersolutions.com
bywaterconsortium.aspendiscovery.org
kohacon2018.bywatersolutions.com
dovernet.bywatersolutions.com
demo.bywatersolutions.com
dovernet.bywatersolutions.com
aspen-arlingtontest.bywatersolutions.com
downtown.roseville-libki.bywatersolutions.com
help.aspendiscovery.org
kohacon2018.bywatersolutions.com
catamount.bywatersolutions.com
esri.bywatersolutions.com
ticket.bywatersolutions.com
catalog.rahwaylibrary.org
collingswood.bywatersolutions.com
kohacon2018.bywatersolutions.com
catalog.redlibrary.org
pals.bywatersolutions.com
aspen.bywatersolutions.com
ckls.bywatersolutions.com
catalog.rahwaylibrary.org
catalog.redlibrary.org
catalog.rahwaylibrary.org
ticket.bywatersolutions.com
ramapo.bywatersolutions.com
kohacon2018.bywatersolutions.com
harrison.bywatersolutions.com
kohacon2018.bywatersolutions.com
tlccat.bywatersolutions.com
demo.bywatersolutions.com
harrison.bywatersolutions.com
cin.bywatersolutions.com
audubon.bywatersolutions.com
harrison.bywatersolutions.com
arcadiapl.bywatersolutions.com
model.bywatersolutions.com
bedfordtx.bywatersolutions.com
harrison.bywatersolutions.com
washoe-aspen.bywatersolutions.com
koha.bywatersolutions.com
farmington.bywatersolutions.com
www.astinus.bywatersolutions.com
catalog.redlibrary.org
idsa.bywatersolutions.com
devs.bywatersolutions.com
staff.ajaxlibrary.ca
farmington.bywatersolutions.com
ticket.bywatersolutions.com
camden.bywatersolutions.com
disneytech.bywatersolutions.com
demo.bywatersolutions.com
bywatersolutions.com
kohacon2018.bywatersolutions.com
kohacon2018.bywatersolutions.com
dovernet.bywatersolutions.com
vokal-aspen.bywatersolutions.com
texlaw.bywatersolutions.com
bywatersolutions.com
ajaxon.bywatersolutions.com
collingswood.bywatersolutions.com
kids.meadvillelibrary.org
demo.bywatersolutions.com
ticket.bywatersolutions.com
samuelmerritt.bywatersolutions.com
catalog.dnredwoods.bywatersolutions.com
bywatersolutions.com
kids.meadvillelibrary.org
sdlaw.bywatersolutions.com
catalog.bethelu.bywatersolutions.com
kohacon2018.bywatersolutions.com
media.bywatersolutions.com
devs.bywatersolutions.com
esri.bywatersolutions.com
catalog.redlibrary.org
catalog.rahwaylibrary.org
texlaw.bywatersolutions.com
bywatersolutions.com
roundrock.bywatersolutions.com
risl.bywatersolutions.com
farmington.bywatersolutions.com
bywatersolutions.com
merial.bywatersolutions.com
demo.bywatersolutions.com
collingswood.bywatersolutions.com
devs.bywatersolutions.com
catalog.rahwaylibrary.org
kids.meadvillelibrary.org
catalog.rahwaylibrary.org
bywatersolutions.com
siskiyou.bywatersolutions.com
catalog.redlibrary.org
hkic.bywatersolutions.com
disneytech.bywatersolutions.com
esri.bywatersolutions.com
bywatersolutions.com
demo.bywatersolutions.com
uintah.bywatersolutions.com
catalog.redlibrary.org
catalog.rahwaylibrary.org
tnhsc.bywatersolutions.com
bywaterconsortium.aspendiscovery.org
kohacon2018.bywatersolutions.com
dovernet.bywatersolutions.com
demo.bywatersolutions.com
dovernet.bywatersolutions.com
aspen-arlingtontest.bywatersolutions.com
downtown.roseville-libki.bywatersolutions.com
help.aspendiscovery.org
kohacon2018.bywatersolutions.com
catamount.bywatersolutions.com
esri.bywatersolutions.com
ticket.bywatersolutions.com
catalog.rahwaylibrary.org
collingswood.bywatersolutions.com
kohacon2018.bywatersolutions.com
catalog.redlibrary.org
pals.bywatersolutions.com
aspen.bywatersolutions.com
ckls.bywatersolutions.com
catalog.rahwaylibrary.org
catalog.redlibrary.org
catalog.rahwaylibrary.org
ticket.bywatersolutions.com
ramapo.bywatersolutions.com
kohacon2018.bywatersolutions.com
harrison.bywatersolutions.com
kohacon2018.bywatersolutions.com
tlccat.bywatersolutions.com
demo.bywatersolutions.com
Certificate
The complete raw certificate details for catamount.bywatersolutions.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIcDCCB1igAwIBAgISBKAumzrUMXksiUNnax1D2AEzMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MjExODQ1MTVaFw0x ODEwMTkxODQ1MTVaMCkxJzAlBgNVBAMTHmNhdGFtb3VudC5ieXdhdGVyc29sdXRp b25zLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIZyb+e03+V PesWNFrN2ZbqyVTP3P5RYeA5XOXy+300LfypKIu/EeivLVmhiBKT3M9ojWToX3aC h5TLe2gBZJ4D1r4jEr0iF87AW9i0gbRilFFE/LArmUmh/QJNml2QCyvDbGW4ZHih GlNIAmb/aYFgwdD9eurgpLaLdAO1qkS/vIJ6yxnPg2oBnqw1XvY169XjimaUM0QW 27TgH2Z4odS3h5aS5B4LIcMfe5rHgVbGYXPu/qKphBwdMy61KaQyBXc1PA4lptQ+ 8pc+q9hEd8SKfRGJFwGmpJ5Ke/dUm5cqsLJ/lp7n2Alg5+TpbW/GwDPkJSCq271x +9Ci3l3JgksCAwEAAaOCBW8wggVrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBLpu uTkBR3YsLyMX5EbWVLWZF8gwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzCCAm4GA1UdEQSCAmUwggJhgh5haW5zd29ydGgu Ynl3YXRlcnNvbHV0aW9ucy5jb22CH2Jlbm5pbmd0b24uYnl3YXRlcnNvbHV0aW9u cy5jb22CIGJyaWdoYW1mcmVlLmJ5d2F0ZXJzb2x1dGlvbnMuY29tghtjYXRhbG9n LmJyb29rc2xpYnJhcnl2dC5vcmeCF2NhdGFsb2cucnV0bGFuZGZyZWUub3JngiJj YXRhbG9nLnNwcmluZ2ZpZWxkdG93bmxpYnJhcnkub3JngiJjYXRhbG9nLndhdGVy YnVyeXB1YmxpY2xpYnJhcnkuY29tgh5jYXRhbW91bnQuYnl3YXRlcnNvbHV0aW9u cy5jb22CGWRybWwuYnl3YXRlcnNvbHV0aW9ucy5jb22CJWZsZXRjaGVybWVtb3Jp YWwuYnl3YXRlcnNvbHV0aW9ucy5jb22CIWd1aWxmb3JkZnJlZS5ieXdhdGVyc29s dXRpb25zLmNvbYIfbWNjdWxsb3VnaC5ieXdhdGVyc29sdXRpb25zLmNvbYIfbW9y cmlzdG93bi5ieXdhdGVyc29sdXRpb25zLmNvbYIZbndwbC5ieXdhdGVyc29sdXRp b25zLmNvbYIkcm95YWx0b25saWJyYXJ5LmJ5d2F0ZXJzb2x1dGlvbnMuY29tgiRz dGFmZi5jYXRhbW91bnQuYnl3YXRlcnNvbHV0aW9ucy5jb22CIXN0YXJrc2Jvcm9w bC5ieXdhdGVyc29sdXRpb25zLmNvbYItd2VzdHJ1dGxhbmRwdWJsaWNsaWJyYXJ5 LmJ5d2F0ZXJzb2x1dGlvbnMuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHm BgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkg b25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkg aW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQg YXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEGBgorBgEE AdZ5AgQCBIH3BIH0APIAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0 eAAAAWS+X/D0AAAEAwBIMEYCIQCRx1cQB7olrD8OXPzI4IahSmqAOGa28nEnKuaB dxk4vgIhAOUe2cWgXVDYdCkZU9w8kxnbL/NEMBKVybUNp+ysl1VYAHcAb1N2rDHw MRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFkvl/xMAAABAMASDBGAiEAthwJ nNp0IoqwrxdBGSmnOSSMy8WzyuUWhGTm8UH6918CIQC2O+EtfYI42HCbjsFlkAMw XXOsjG3u7Lgdd+tML00lpjANBgkqhkiG9w0BAQsFAAOCAQEACcWXk9eFJTwLIG22 Nz4kGd0JSHpQbm3zt1YQCS9pJK4h3sqMgAuabx8zweHddrK37LZepiNBO4T5GWQ4 El5DElphmkyyd4+4o3x9YFMOJNDSMdFAELrU6ZCzv3a7QXFikZ6eYLXMCwb+Amta zGiCcGOo23wlxvOtEf1/lrGAuJKqyz8pcb5v8/uRF9uWjSxcZXgVu29d5l0V795d X8eUgCXdwJ+yDRcishJaBLJKwSp8yuVliMW0r2o/eTm9vqRY28fty8JmIvxMEvCX trBe0rR4Y7JVvoYH/8Nix1XRNjURHLXF5sGr3K2l+rHAOCwiew/TuMvlRReIi4rz yLu4QA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hnJv57Tf5U96xY0Ws3Z lurJVM/c/lFh4Dlc5fL7fTQt/Kkoi78R6K8tWaGIEpPcz2iNZOhfdoKHlMt7aAFk ngPWviMSvSIXzsBb2LSBtGKUUUT8sCuZSaH9Ak2aXZALK8NsZbhkeKEaU0gCZv9p gWDB0P166uCktot0A7WqRL+8gnrLGc+DagGerDVe9jXr1eOKZpQzRBbbtOAfZnih 1LeHlpLkHgshwx97mseBVsZhc+7+oqmEHB0zLrUppDIFdzU8DiWm1D7ylz6r2ER3 xIp9EYkXAaaknkp791Sblyqwsn+WnufYCWDn5Oltb8bAM+QlIKrbvXH70KLeXcmC SwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 402956272921401758489714062141046209904947 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-21 18:45:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 18:45:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'catamount.bywatersolutions.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26522760619145339152627738840814551821508282440376694688689575173092237960794616997057483227487486269596524862828327122647479759621467502863344572453720558028216969040853559765779227399464003352688254324096032454368563229682006380440550336653600745183913015863691198201884855337935606040011302640707766379808894225569545953819355382101349463035684934478173868197647935788593216506071969349128338277211878207951504284309202894416442923131306138019986724415818182902561421302132040979531608263120840929059447550339445990655067074215202177431997595357872024360435109912028299816393011465928361345710988127932686652768843 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 04ba6eb9390147762c2f2317e446d654b59917c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (613 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ainsworth.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bennington.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighamfree.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.brookslibraryvt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.rutlandfree.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.springfieldtownlibrary.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.waterburypubliclibrary.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catamount.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drml.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fletchermemorial.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guilfordfree.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccullough.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morristown.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpl.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaltonlibrary.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.catamount.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starksboropl.bywatersolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westrutlandpubliclibrary.bywatersolutions.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164be5ff0f4000004030048304602210091c7571007ba25ac3f0e5cfcc8e086a14a6a803866b6f271272ae681771938be022100e51ed9c5a05d50d874291953dc3c9319db2ff344301295c9b50da7ecac9755580077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164be5ff1300000040300483046022100b61c099cda74228ab0af17411929a739248ccbc5b3cae5168464e6f141faf75f022100b63be12d7d8238d8709b8ec1659003305d73ac8c6deeecb81d77eb4c2f4d25a6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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