www2.roostify.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:fa:82:98:75:83:0a:48:61:e0:f1:19:af:90:34:56:8e:dd was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www2.roostify.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:fa:82:98:75:83:0a:48:61:e0:f1:19:af:90:34:56:8e:ddSerial Number (int): 346581040777513887434582668070326982053597
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 12:44:2f:8a:70:a1:6a:82:fe:44:9e:58:2e:41:34:10:b8:c1:c2:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): cd:31:98:22:14:94:6e:d9:9c:3f:75:8d:10:0c:98:6e:c2:56:c5:6c
Fingerprint (sha256): 3a:de:e6:87:4c:d5:e6:9f:84:fb:5a:8e:82:24:03:3b:b0:67:25:26:20:2a:80:2e:1d:c1:cd:a9:28:ab:6f:dd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www2.roostify.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www2.roostify.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www2.roostify.com
Other certificates including the domain name roostify.com
(limited to 100 certificates)
mortgage.1stbmt.com.roostify.com
guild-admin.roostify.com
roostify.com
books-lb8.airmason.com
insights.roostify.com
books-lb8.airmason.com
homeward-prod-equifax.roostify.com
apply.superiorcu.com
perf-test.roostify.com
guild-admin.roostify.com
www2.roostify.com
www2.roostify.com
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
homeward-prod-equifax.roostify.com
dev-borrower.roostify.com
books-lb8.airmason.com
demo.roostify.com
tdbank-test-optimal.roostify.com
apply.superiorcu.com
www.roostify.com
apply.truecore.org
dev.roostify.com
*.roostify.com
www.roostify.com
roostify.com
books-lb8.airmason.com
books-lb8.airmason.com
roostify.com
clientsuccess.roostify.com
apply.superiorcu.com
ammac-test.roostify.com
apply.truecore.org
bok-qa.roostify.com
demo.roostify.com
books-lb8.airmason.com
roostify.com
insights-dev.roostify.com
apply.truecore.org
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
books-lb8.airmason.com
ammac-test.roostify.com
apply.gomortgagebeast.com
www.roostify.com
www.roostify.com
www2.roostify.com
myapp.guildmortgage.com
books-lb8.airmason.com
mortgage.1stbmt.com
books-lb8.airmason.com
*.roostify.com
www2.roostify.com
guild-admin.roostify.com
www.roostify.com
www.roostify.com
template.roostify.com
www.roostify.com
www.roostify.com
nfcu-test.roostify.com
roostify.com
bok-qa.roostify.com
*.roostify.com
www2.roostify.com
www.roostify.com
roostify.com
mortgage.banksanjuans.com
www2.roostify.com
template.roostify.com
insights-dev.roostify.com
demo.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
books-lb8.airmason.com
clientsuccess.roostify.com
www.roostify.com
bok-qa.roostify.com
roostify.com
www.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
dev.roostify.com
*.roostify.com
bok-qa.roostify.com
botw-test.roostify.com
test-frame.roostify.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.roostify.com
*.roostify.com
books-lb8.airmason.com
perf-test.roostify.com
demo.roostify.com
ammac-test.roostify.com
www.roostify.com
apply.truecore.org
demo.roostify.com
ammac-test.roostify.com
guild-admin.roostify.com
roostify.com
books-lb8.airmason.com
insights.roostify.com
books-lb8.airmason.com
homeward-prod-equifax.roostify.com
apply.superiorcu.com
perf-test.roostify.com
guild-admin.roostify.com
www2.roostify.com
www2.roostify.com
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
homeward-prod-equifax.roostify.com
dev-borrower.roostify.com
books-lb8.airmason.com
demo.roostify.com
tdbank-test-optimal.roostify.com
apply.superiorcu.com
www.roostify.com
apply.truecore.org
dev.roostify.com
*.roostify.com
www.roostify.com
roostify.com
books-lb8.airmason.com
books-lb8.airmason.com
roostify.com
clientsuccess.roostify.com
apply.superiorcu.com
ammac-test.roostify.com
apply.truecore.org
bok-qa.roostify.com
demo.roostify.com
books-lb8.airmason.com
roostify.com
insights-dev.roostify.com
apply.truecore.org
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
books-lb8.airmason.com
ammac-test.roostify.com
apply.gomortgagebeast.com
www.roostify.com
www.roostify.com
www2.roostify.com
myapp.guildmortgage.com
books-lb8.airmason.com
mortgage.1stbmt.com
books-lb8.airmason.com
*.roostify.com
www2.roostify.com
guild-admin.roostify.com
www.roostify.com
www.roostify.com
template.roostify.com
www.roostify.com
www.roostify.com
nfcu-test.roostify.com
roostify.com
bok-qa.roostify.com
*.roostify.com
www2.roostify.com
www.roostify.com
roostify.com
mortgage.banksanjuans.com
www2.roostify.com
template.roostify.com
insights-dev.roostify.com
demo.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
books-lb8.airmason.com
clientsuccess.roostify.com
www.roostify.com
bok-qa.roostify.com
roostify.com
www.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
dev.roostify.com
*.roostify.com
bok-qa.roostify.com
botw-test.roostify.com
test-frame.roostify.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.roostify.com
*.roostify.com
books-lb8.airmason.com
perf-test.roostify.com
demo.roostify.com
ammac-test.roostify.com
www.roostify.com
apply.truecore.org
demo.roostify.com
ammac-test.roostify.com
Certificate
The complete raw certificate details for www2.roostify.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgISA/qCmHWDCkhh4PEZr5A0Vo7dMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTcxODAwMTRaFw0x OTA0MTcxODAwMTRaMBwxGjAYBgNVBAMTEXd3dzIucm9vc3RpZnkuY29tMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlegVYrar9MW5GqU98cDwL10vyAOw 3ncDDj47Tictzco1p1gGqZJrnG1DCpQavHAdXZcHfbdn/xHLJDz6yzkEJiUhVGuE iHPLdr9vufV25PDpXTnan0PcJKkOWkFHuqTpn02qyLJiHu39SFUFDFJLk3PlzwXL V83FJudiGTTf3DAoAKY/ONhznxRyExqdSpYd6NLHM9JxuwZCZuhJm+uANey+zMHf bFQWUHyZ8OXWISFQNkK6MhUZKleUXwsSw5jOpVKOLmjcp42kiaeQAkisZpkE/93i TfbDVfNGm8l6eDTWhAaImHpgHIVnZQXfL3O5EigxgpJ5nlWSoo+Rq9eBOj+Nrfpm CinG+ippPhZE0P62qMLg166Z2LAhNcMj6oLcO+Lj74v1IofEw1MqPU8iQvih4jwI Bl/9Ag5Uqd6F1TbI67+QVlTUpp1AwD4ncelSerLdQ/ZOYsINf+OXLGeD2s9yLDFj E/P8q5zk8oEJfkwWL3g+60GsDRa7D4iBM6hDjhvf3qohylhHcjbc04hJDxE35IJ+ 1MLJi03k4C30PUcQPNd11DpD7pKgqQIOVOfNaRvRE0ritAMjs9xm+0tIB/5I289K LPZ99ooCTLqA4WBpy5akD3Z59AsaSAL8eh/HOgULuCv0tdVHNTauReVgnqGFJs2U 29TQzu2iUPrUItECAwEAAaOCAmYwggJiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU EkQvinChaoL+RJ5YLkE0ELjBwtcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF3d3cyLnJvb3N0aWZ5 LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC BAIEgfUEgfIA8AB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAAB aF0vZ0wAAAQDAEcwRQIhANpDp9DMUOiZ4QkumUY9/4K9udTXwzStWqIMqXWbR2VI AiAZMpVF1D9lzi0IuCx4vyFWPdZa1pU2VdKK7lMOM7VCWAB2AGPy283oO8wszwty hCdXazOkjWF3j711pjixx2hUS9iNAAABaF0vZ08AAAQDAEcwRQIhAKltNivPSaHD JmIsuqayXKKBEb8+8iR4cSjih5Hzm3SzAiAxh0+Nn77RRt5+eOwKI8ythOhzuSCv XVn6KVVVUU71izANBgkqhkiG9w0BAQsFAAOCAQEAVNY6CEt639wnUjxxo1i4l4Ws /eLtKVb+iGVbKDwLJUN+WvouPuN5U2iaX9g7WZZMAkFc36e8u9p6NOuDbNjMKqFR WKjt8PtzK0j4cHYfc53oRZvl3VZRm6ibqH5QpvlCBQ1+PYM8bPyAn264uwPntloz ogngfOmg3o9Oel1y/hJnzf1tr+yXDs/yycXkGpZRM/fqJA32mIzQW0FWEnFQOgbr nI2a0/tIpX5UJdWe7oLwFpF4CHF7xxwyhI0qwtqq/TfBWDj15CcrO/ikrCtNv7PF 7/SbP7CbTQdRN+gF87doJOA59bM5yxuFF/XhHIUHwSdG93i6nZPYqmwz7XCgvw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlegVYrar9MW5GqU98cDw L10vyAOw3ncDDj47Tictzco1p1gGqZJrnG1DCpQavHAdXZcHfbdn/xHLJDz6yzkE JiUhVGuEiHPLdr9vufV25PDpXTnan0PcJKkOWkFHuqTpn02qyLJiHu39SFUFDFJL k3PlzwXLV83FJudiGTTf3DAoAKY/ONhznxRyExqdSpYd6NLHM9JxuwZCZuhJm+uA Ney+zMHfbFQWUHyZ8OXWISFQNkK6MhUZKleUXwsSw5jOpVKOLmjcp42kiaeQAkis ZpkE/93iTfbDVfNGm8l6eDTWhAaImHpgHIVnZQXfL3O5EigxgpJ5nlWSoo+Rq9eB Oj+NrfpmCinG+ippPhZE0P62qMLg166Z2LAhNcMj6oLcO+Lj74v1IofEw1MqPU8i Qvih4jwIBl/9Ag5Uqd6F1TbI67+QVlTUpp1AwD4ncelSerLdQ/ZOYsINf+OXLGeD 2s9yLDFjE/P8q5zk8oEJfkwWL3g+60GsDRa7D4iBM6hDjhvf3qohylhHcjbc04hJ DxE35IJ+1MLJi03k4C30PUcQPNd11DpD7pKgqQIOVOfNaRvRE0ritAMjs9xm+0tI B/5I289KLPZ99ooCTLqA4WBpy5akD3Z59AsaSAL8eh/HOgULuCv0tdVHNTauReVg nqGFJs2U29TQzu2iUPrUItECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 346581040777513887434582668070326982053597 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 18:00:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 18:00:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.roostify.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 611565474834391870084470657268433466551451086360120265787311592466154612992831542911805286862524899710102973696661229288716245579631382608173716687223334047990229366679941049721974619719329862848223551817926691728075663435019137607193165788672090506076746672166372958451213977059562120135111351258683497558966875850755623217021197848799413862787403607976486769792827893275781936508622819411362279135223528690369881192548460230624786854120431736809729450935974872386397671470736253113752280069103613272204556466052370975354665110298255395082437388725190985238781172150413893490279860201169884337471129030621965011524066550756213415020569863998298375943254009024754942285517052127554562077067987151838631945869038768086808841242839535781836963882956732599096313672493609930216382020517806167718677444991872557017098234291680413840894881596729091098165296764899333916572049072066576673569790690584113077419019002890536966010343490374378639994032411770206825134751394904277711393417118571023061112156088790344529733155666846840098621317136519755851796969068761520263267703448198234975779218286360340490616900985970036804706059971035978906868364211914262407455787737924769444574167873130293179795159036840125048996231807032832024007418577 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 12442f8a70a16a82fe449e582e413410b8c1c2d7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.roostify.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001685d2f674c0000040300473045022100da43a7d0cc50e899e1092e99463dff82bdb9d4d7c334ad5aa20ca9759b476548022019329545d43f65ce2d08b82c78bf21563dd65ad6953655d28aee530e33b5425800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001685d2f674f0000040300473045022100a96d362bcf49a1c326622cbaa6b25ca28111bf3ef224787128e28791f39b74b3022031874f8d9fbed146de7e78ec0a23ccad84e873b920af5d59fa295555514ef58b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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