www.basdk12.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:65:37:28:49:63:db:0f:c4:ff:6f:7a:34:95:9e:ef:ba:53 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.basdk12.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:65:37:28:49:63:db:0f:c4:ff:6f:7a:34:95:9e:ef:ba:53Serial Number (int): 295778693574465321952605446797722693646931
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 34:c6:5d:44:57:f8:ad:8c:5e:c4:e0:10:ea:05:db:d5:08:34:18:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): aa:65:c9:b7:87:15:25:f0:e0:66:d6:e8:5f:7e:a9:f9:a9:ac:ff:df
Fingerprint (sha256): 41:c2:86:97:4f:f0:81:02:19:e5:9d:3e:24:3f:fb:27:03:5b:4c:7c:1d:8b:00:d9:ef:87:3b:e9:7c:af:13:75
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.basdk12.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.basdk12.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.basdk12.org
www.butlerareasd.pa.schools.bz
www.butlerareasd.pa.schools.bz
Other certificates including the domain name basdk12.org
(limited to 100 certificates)
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
staff.basdk12.org
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.basdk12.org
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
staff.basdk12.org
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.basdk12.org
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
Certificate
The complete raw certificate details for www.basdk12.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgISA2U3KElj2w/E/296NJWe77pTMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTAyMzI0MDBaFw0y MDA1MTAyMzI0MDBaMBoxGDAWBgNVBAMTD3d3dy5iYXNkazEyLm9yZzCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBANPlud3CWkPFy71lS98pwlWQRNXoDRnh S+37QZrQLsG8rZ4fu50jdDypmWB67YZbDRZtpl03utBiuQm3DhwulEI6NMaKrI+y ejA5rfIiLVvUk1ndpQPKwBR8/ivGKLsaW/bLxXwwNO5kGTDhV/wVB1GE0g51MzCO BaI5hFcFjgFgvCK81OOnGmU2JQbW4kzdKZDjBqX0Gp+5iwrtnOjP9GN2L9SvRNNp LGkATDBqiZCKhSuBci9P5CGkR9L2iNcDYjxtnDkRe25JTgTar92T8798mpt28VwJ JgMnxHrInWOmQp53kJszgEO0bF0eha0PhKdEudL7nElAwtdNBYKWsxNk2P3s/GpD +If1LNKpUM9+yWB4iDvn+Zg/kx+sMCnM69VYF1fk0ZuLTCWkXvhF3mYXmmoKQBIj jNTGROEkLXaqE15FpH1I4AqMZpt+RdVNgjEW36HNCjo8wSc46jaUY19CH+SYd0QT bvOE+azl/Ww0oKge7J4wlMZzM9pj34clw70OJFrf8IeqdPkrqQMcG0JfFAmH24Dj 4Y4kvEzGxHvhwWW59Xnk0HwyZgldXEjUt5G7fndaDRdKO3pqKLMewWDqM+yqsAZU eUtsowQa/1Dawek4q8tDbI4MoSNDGaXPI01stQ6x2MCCZw4Un6Xp2kAwGap08CCD 1LJAS802zkKRAgMBAAGjggKDMIICfzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDTG XURX+K2MXsTgEOoF29UINBjvMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wOgYDVR0RBDMwMYIPd3d3LmJhc2RrMTIub3Jn gh53d3cuYnV0bGVyYXJlYXNkLnBhLnNjaG9vbHMuYnowTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCyHgXMi6LN iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXAxoZ9ZAAAEAwBGMEQCICuOJ3Ek kuweq2B/Yx39lbI2HvdSpsFI7Ab+l7VKVNJLAiBa4blMpAM/tvEXhY2SF+BT2erO UzBFo0OA1BmTw+ameQB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kT AAABcDGhoJMAAAQDAEcwRQIgMHhXgG+zAr+V3KOhWBAac0OTScZPH5trp9DKqHW3 RRECIQDyp7dkQSeJ1v4oduoRMyRFF764GEg2+vegP/RO34pSeTANBgkqhkiG9w0B AQsFAAOCAQEAE+QTLRX6h2w7CguxM/SMALqnGM4dwta/Cb6+GG1hARVMhU4S+/Eb QT8ARrZzE/nt9S56TyuStmJy6KALoQ4kVqIP4TSfwhL+QhwP8IgmqwR7UAxTVPx3 UYOgchiT7Cd1rM4f0ThqB7CXmbmQmE0mJHRzrTF91FTwZUj53q9NIo4kIevfF0ug qlNrStI44QG2Aj93DfE8BBzptAyqUO8m8z7pMO1XHmXqin7IVAEokrfIxTHd+2GO WVands+4ikoxYGRBoJiBA1C8FqiSgdfxgK9osQH4iMcgCcPv5ImLhbg3Qke5veu4 vzQf4LIbpp7HabzIgz4eEKp4dYLWlIbqaA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0+W53cJaQ8XLvWVL3ynC VZBE1egNGeFL7ftBmtAuwbytnh+7nSN0PKmZYHrthlsNFm2mXTe60GK5CbcOHC6U Qjo0xoqsj7J6MDmt8iItW9STWd2lA8rAFHz+K8Youxpb9svFfDA07mQZMOFX/BUH UYTSDnUzMI4FojmEVwWOAWC8IrzU46caZTYlBtbiTN0pkOMGpfQan7mLCu2c6M/0 Y3Yv1K9E02ksaQBMMGqJkIqFK4FyL0/kIaRH0vaI1wNiPG2cORF7bklOBNqv3ZPz v3yam3bxXAkmAyfEesidY6ZCnneQmzOAQ7RsXR6FrQ+Ep0S50vucSUDC100Fgpaz E2TY/ez8akP4h/Us0qlQz37JYHiIO+f5mD+TH6wwKczr1VgXV+TRm4tMJaRe+EXe ZheaagpAEiOM1MZE4SQtdqoTXkWkfUjgCoxmm35F1U2CMRbfoc0KOjzBJzjqNpRj X0If5Jh3RBNu84T5rOX9bDSgqB7snjCUxnMz2mPfhyXDvQ4kWt/wh6p0+SupAxwb Ql8UCYfbgOPhjiS8TMbEe+HBZbn1eeTQfDJmCV1cSNS3kbt+d1oNF0o7emoosx7B YOoz7KqwBlR5S2yjBBr/UNrB6Tiry0NsjgyhI0MZpc8jTWy1DrHYwIJnDhSfpena QDAZqnTwIIPUskBLzTbOQpECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295778693574465321952605446797722693646931 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 23:24:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 23:24:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.basdk12.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864465837713436957133664370581021186105978634243434669334574009989911310416492509864920754090868337906353180688748268310556228029454893338821539610364808320722278094357823694670133456315575561102323368662974326491054211474597917841993963688816555754582776140232053394608339877780671140039616962314188490408459987487258986406036708142200417775290309238100984694362722491198239332255305708166536731586284428333889752851108357594337991580801904797423687654681256334800298862064843778686066413046684706904895797590102506799831992979066007905175266626593465967532811876439740269705639171882629913004475703274737666434634391393244885649908887349926966314318923108690075914165316273425559443167010275511495467474821787076920139629125906814545997116811253007684778502115540211502835235516909007858780705226134873629739268213680706190882867662401100780744417132844622691006160232475510595663755798544035170631016984623359750779011517536267743386358188695241851168933338505914438143358804408160279395844208712012937593271000404663772132258811979776000726320746991415911064805174960180331374423982466089614140746031378541457559371025308084007710172128428159051594997135652024664319837430052966608500674890538955871463881311458934013300243841681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 34c65d4457f8ad8c5ec4e010ea05dbd5083418ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basdk12.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butlerareasd.pa.schools.bz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017031a19f59000004030046304402202b8e27712492ec1eab607f631dfd95b2361ef752a6c148ec06fe97b54a54d24b02205ae1b94ca4033fb6f117858d9217e053d9eace533045a34380d41993c3e6a6790076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017031a1a09300000403004730450220307857806fb302bf95dca3a158101a73439349c64f1f9b6ba7d0caa875b74511022100f2a7b764412789d6fe2876ea1133244517beb8184836faf7a03ff44edf8a5279 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0013e4132d15fa876c3b0a0bb133f48c00baa718ce1dc2d6bf09bebe186d6101154c854e12fbf11b413f0046b67313f9edf52e7a4f2b92b66272e8a00ba10e2456a20fe1349fc212fe421c0ff08826ab047b500c5354fc775183a0721893ec2775acce1fd1386a07b09799b990984d26247473ad317dd454f06548f9deaf4d228e2421ebdf174ba0aa536b4ad238e101b6023f770df13c041ce9b40caa50ef26f33ee930ed571e65ea8a7ec854012892b7c8c531ddfb618e5956a776cfb88a4a31606441a098810350bc16a89281d7f180af68b101f888c72009c3efe4898b85b8374247b9bdebb8bf341fe0b21ba69ec769bcc8833e1e10aa787582d69486ea68