cxd.article.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b8:db:17:37:b5:21:a1:31:a6:41:92:14:65:fb:75:e7:a8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cxd.article.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b8:db:17:37:b5:21:a1:31:a6:41:92:14:65:fb:75:e7:a8Serial Number (int): 411352320724281540233725538527523997345704
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: dc:b9:e1:6e:b9:a2:a4:68:71:a9:fa:94:bb:33:31:4e:5b:91:3d:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 41:50:ea:10:2c:db:fb:fa:72:34:8a:77:16:01:d0:31:9a:f5:c2:a3
Fingerprint (sha256): 40:6d:8b:b6:cb:e4:19:95:ee:8b:aa:26:2e:c0:98:1a:b7:a4:96:c6:90:12:d5:91:71:89:80:fc:3b:b2:4b:d5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate cxd.article.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cxd.article.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cxd.article.com
Other certificates including the domain name article.com
(limited to 100 certificates)
*.article.com
about.ksting.com
fluxx.totemapp.net
article.com
trade.article.com
archmission.totemapp.net
*.backbone.article.com
archmission.totemapp.net
trade.article.com
business.article.com
about.ksting.com
*.article.com
easymarkit.totemapp.net
p.article.com
*.article.com
article.com
data.article.com
business.article.com
adamlyonsw.totemapp.net
archmission.totemapp.net
dojo-madness.totemapp.net
about.ksting.com
business.article.com
about.ksting.com
about.ksting.com
it.article.com
aboutbuildings.article.com
article.com
article.com
about.ksting.com
schedule.article.com
about.ksting.com
about.ksting.com
*.kraken.article.com
about.ksting.com
welldesigned.article.com
gyro.article.com
it.article.com
archmission.totemapp.net
tls.automattic.com
welldesigned.article.com
article.com
*.article.com
archmission.totemapp.net
press.getsundaily.com
cxd.article.com
*.staging-kraken.article.com
it.article.com
about.ksting.com
welldesigned.article.com
it.article.com
welldesigned.article.com
dodo.totemapp.net
about.ksting.com
imgs.article.com
welldesigned.article.com
totem.alltrails.com
fluxx.totemapp.net
cxd.article.com
press.swipecast.com
trade.article.com
welldesigned.article.com
warehouse.article.com
article.com
picachocoffee.totemapp.net
about.ksting.com
bonusly.totemapp.net
intothewhoknows.totemapp.net
*.article.com
archmission.totemapp.net
about.ksting.com
about.ksting.com
about.ksting.com
business.article.com
*.article.com
press.getsundaily.com
archmission.totemapp.net
*.staging-kraken.article.com
archmission.totemapp.net
*.article.com
trade.article.com
about.ksting.com
gyro-backend.article.com
britttest.totemapp.net
archmission.totemapp.net
article.com
*.staging-backbone.article.com
about.ksting.com
*.article.com
people.article.com
business.article.com
article.com
fourpointsbar.totemapp.net
about.ksting.com
about.ksting.com
*.backbone.article.com
gyro-backend.article.com
insitome.totemapp.net
about.ksting.com
beardedbastard.totemapp.net
about.ksting.com
fluxx.totemapp.net
article.com
trade.article.com
archmission.totemapp.net
*.backbone.article.com
archmission.totemapp.net
trade.article.com
business.article.com
about.ksting.com
*.article.com
easymarkit.totemapp.net
p.article.com
*.article.com
article.com
data.article.com
business.article.com
adamlyonsw.totemapp.net
archmission.totemapp.net
dojo-madness.totemapp.net
about.ksting.com
business.article.com
about.ksting.com
about.ksting.com
it.article.com
aboutbuildings.article.com
article.com
article.com
about.ksting.com
schedule.article.com
about.ksting.com
about.ksting.com
*.kraken.article.com
about.ksting.com
welldesigned.article.com
gyro.article.com
it.article.com
archmission.totemapp.net
tls.automattic.com
welldesigned.article.com
article.com
*.article.com
archmission.totemapp.net
press.getsundaily.com
cxd.article.com
*.staging-kraken.article.com
it.article.com
about.ksting.com
welldesigned.article.com
it.article.com
welldesigned.article.com
dodo.totemapp.net
about.ksting.com
imgs.article.com
welldesigned.article.com
totem.alltrails.com
fluxx.totemapp.net
cxd.article.com
press.swipecast.com
trade.article.com
welldesigned.article.com
warehouse.article.com
article.com
picachocoffee.totemapp.net
about.ksting.com
bonusly.totemapp.net
intothewhoknows.totemapp.net
*.article.com
archmission.totemapp.net
about.ksting.com
about.ksting.com
about.ksting.com
business.article.com
*.article.com
press.getsundaily.com
archmission.totemapp.net
*.staging-kraken.article.com
archmission.totemapp.net
*.article.com
trade.article.com
about.ksting.com
gyro-backend.article.com
britttest.totemapp.net
archmission.totemapp.net
article.com
*.staging-backbone.article.com
about.ksting.com
*.article.com
people.article.com
business.article.com
article.com
fourpointsbar.totemapp.net
about.ksting.com
about.ksting.com
*.backbone.article.com
gyro-backend.article.com
insitome.totemapp.net
about.ksting.com
beardedbastard.totemapp.net
Certificate
The complete raw certificate details for cxd.article.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgISBLjbFze1IaExpkGSFGX7deeoMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTQwNDI3NTFaFw0x OTA4MTIwNDI3NTFaMBoxGDAWBgNVBAMTD2N4ZC5hcnRpY2xlLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAPVN2VipaWv9BcAZfBI67v0y9QhiAVbl 4Zl8hYA5YDaLL5xHKfNeyMMzrWsCziskSzUttl3M2Y2apJKXSGKWTjOzWfptseKV Bv65WW8CRRc9As4sX4B/S0Hu8hU7hK0VLws9xG3d/fVB57bwKfM+8MWZGqX/vFPV EehzwHUoHdSPX/57MBX5/N44czBPd0cjFRm47z5Xkdh9E62migmyVoCzlp5E2iac Oes1sgb6rImaiDIPZyYJwfWz492skR9F5S/OKzRC3IWa0Ej38Svm98qTitYZjLHJ Lmf7Xh2Bjx/Iqv7kflvofvhorCuk7bXlZ4q+VlaRAJnipAJQxLR8RpTE0RDU9OQ9 ttzk1eePukEf7lNFG4cJfuhxkdwzppVU4oXG4xy0540RYIOysZdiI11Vvx2qk06I QAK6QNKmaiPvoxo69EutgDDr2Y0n9JP/4N59Nz65jnRILp+ECuxKLIRxG/Axd2xj kjzagaHaGVy7q/W2K6/TIFHNZ1X4eMjB/gPdmd4uPXw/5dN9rCZl5gKWNH3cgf9z BsIVSNF1lDA2dJyGzR6FW0Z7Pc6VwshEu8brhdtL76XElo1ifazKxycd72oHpVs3 TkemTaBKBlfSWCEwFM0xwqOovYFCXyLWxt0bO4Ck3zgNVsjNqorTEm6xSQqaOH1V 4x5tT7ph3m6FAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNy5 4W65oqRocan6lLszMU5bkT09MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPY3hkLmFydGljbGUuY29t MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFqtM+y zAAABAMARzBFAiEA1hGdu6wvCCt8YLBhjEMDoA39tNkJUlLKLZgnX64Jq8oCIBwO Tu4jLRmRegxz+q9fG/2ZWKTiqFKBXwLduTt/bzlJAHYAY/Lbzeg7zCzPC3KEJ1dr M6SNYXePvXWmOLHHaFRL2I0AAAFqtM+yhgAABAMARzBFAiBchiE90fQ/1qqQlJ6b iQDovuzxzHZvKqtejJFktkYyvgIhAIYDVFrx+x+/Y3IYJjPK6/pUm6JeiYFRZia7 QxYOWR6BMA0GCSqGSIb3DQEBCwUAA4IBAQBK8Mv33FLbrCldsggYf0o2/XZG3jSk IcCa5RUykJh90lYHub/f8pO25ufNwQNc5RRr+J8Wl+oFLfKToGsWCUPEJ4BI/Kon xIUwmo+7Et7rzP7TrXaVRrcETgyyEMKz0NK00nVY5yHKjkjP+LhbDWYH8FS/w+T8 MVOfOZBd+RWWbXcWETPiezjFsj0jq8/sIAijhh/2xDOQ8dNnoPrEfO8axBIrLN8N Ni5IRnzgb4WTT22sIkCsi8Cr5dYKAj90c2ulf8KPr5y3AVH3HsBT/JxdtsynLUyY v72XHW2qxPbaQ/jFvQkse9wVkxArcb5SmEsIVJZE6I1+7FfN80ugtLTq -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9U3ZWKlpa/0FwBl8Ejru /TL1CGIBVuXhmXyFgDlgNosvnEcp817IwzOtawLOKyRLNS22XczZjZqkkpdIYpZO M7NZ+m2x4pUG/rlZbwJFFz0CzixfgH9LQe7yFTuErRUvCz3Ebd399UHntvAp8z7w xZkapf+8U9UR6HPAdSgd1I9f/nswFfn83jhzME93RyMVGbjvPleR2H0TraaKCbJW gLOWnkTaJpw56zWyBvqsiZqIMg9nJgnB9bPj3ayRH0XlL84rNELchZrQSPfxK+b3 ypOK1hmMsckuZ/teHYGPH8iq/uR+W+h++GisK6TtteVnir5WVpEAmeKkAlDEtHxG lMTRENT05D223OTV54+6QR/uU0Ubhwl+6HGR3DOmlVTihcbjHLTnjRFgg7Kxl2Ij XVW/HaqTTohAArpA0qZqI++jGjr0S62AMOvZjSf0k//g3n03PrmOdEgun4QK7Eos hHEb8DF3bGOSPNqBodoZXLur9bYrr9MgUc1nVfh4yMH+A92Z3i49fD/l032sJmXm ApY0fdyB/3MGwhVI0XWUMDZ0nIbNHoVbRns9zpXCyES7xuuF20vvpcSWjWJ9rMrH Jx3vagelWzdOR6ZNoEoGV9JYITAUzTHCo6i9gUJfItbG3Rs7gKTfOA1WyM2qitMS brFJCpo4fVXjHm1PumHeboUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 411352320724281540233725538527523997345704 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 04:27:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 04:27:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cxd.article.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1000753407009706177809349237158803225934481702813707463737251967239178088404364355787795118768626709489033581073170229702143235066210705357272159695430160633779127666571626396630393065292903832946761137825602102919709740158962160219098395616641120428064883449676401695893675793725587724243909379060263770526350554589796336939263400390570558351664386061000072433117847672537986649049549747672830102680617396743446182093567367272644407051314697173439493661086904482725968174751789181016735182583999256748873741961819149528369972727180606943045042432114007875847641464812809174352496453569672792342289803064747853294856816165836142085820084184392039703047870154712485094785186001941611520743954004952424717472176373389406981124109251499853513934698826740028406161131101622256543287551715415652316672355498202257872791471870763228872906592392187481685226396821837436842455119200730159942174058255421741217629007065606760239918756791385446898286356575941954275136644526240309810660874660968391065745908758433997677115192401031609324979022585933760427103564673398616324296595294866157650670582830242089199394406357559588647074119997975470689933668665875010627161863472033368881862622549375318683415028338978348993882720499356576368402787973 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dcb9e16eb9a2a46871a9fa94bb33314e5b913d3d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxd.article.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ab4cfb2cc0000040300473045022100d6119dbbac2f082b7c60b0618c4303a00dfdb4d9095252ca2d98275fae09abca02201c0e4eee232d19917a0c73faaf5f1bfd9958a4e2a852815f02ddb93b7f6f394900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab4cfb286000004030047304502205c86213dd1f43fd6aa90949e9b8900e8beecf1cc766f2aab5e8c9164b64632be0221008603545af1fb1fbf6372182633caebfa549ba25e8981516626bb43160e591e81 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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