www.basdk12.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:48:03:44:1c:e8:9e:3a:e9:f0:55:45:6a:03:90:67:e0:56 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.basdk12.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:48:03:44:1c:e8:9e:3a:e9:f0:55:45:6a:03:90:67:e0:56Serial Number (int): 285841529560099416884682283619340190736470
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e2:53:ce:54:d0:f4:28:ff:1a:df:40:43:e7:66:ed:5e:37:b0:16:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2e:c5:b5:bd:9a:9a:72:4e:40:ad:96:8d:e4:47:1a:59:13:62:06:84
Fingerprint (sha256): 4b:a9:f3:47:e5:78:93:09:f4:a4:ee:ae:6e:5e:26:56:8d:33:f9:96:d7:c3:d8:69:5d:bc:d8:3a:2b:f4:4e:21
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.basdk12.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.basdk12.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.basdk12.org
www.butlerareasd.pa.schools.bz
www.butlerareasd.pa.schools.bz
Other certificates including the domain name basdk12.org
(limited to 100 certificates)
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
staff.basdk12.org
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.basdk12.org
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
staff.basdk12.org
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.basdk12.org
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.basdk12.org
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
Certificate
The complete raw certificate details for www.basdk12.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgISA0gDRBzonjrp8FVFagOQZ+BWMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTIyMzI0NDJaFw0y MDAzMTEyMzI0NDJaMBoxGDAWBgNVBAMTD3d3dy5iYXNkazEyLm9yZzCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAKTH6VYY54ESnNEOs5pj8u01qjSRLSqi E5tXTqtTGKp5o6tzoror1K5hynlOdtuFarWMa0yASSPEaC0/yGCsIIo93BowHJw1 sFO9Hv5gd+kedDuMYz98hNRrdglBnAquQ8I1fUZDX32ny3waxCBQeZGR3mOPrNlr iopgSBaWKfOeBJDlP02vSi4bxCGqQZDe/6gDssEr+eSRrnzZw9V/iQzoO9hpKmdB eus8ByIdWdQlMi5P1/ERbKtaYtccnUG3F1NsnTsuI+Zx7/ZGNsLJx4QNyXQVo/kI YM4h0Hm/R/bM0qlwnSTnaeLl/3qsmUk1/lubR5L6N4FCC6oeYALd41X57zBpqCdo CVTFfb5Rs2iqdEgc5w7cookBU5CcXPGZQRzOjmUCxV1BC2lhMdTap8A6XclgLqnF gJOBrrYBD2I4shN9OWIHe02Oj/EeawqQlBG+uNRKhblWvc9g6Mk85MwjWgiG9wzH GTbuvtB+VbYkSczniKB4ZnV2q93l/nJUREyBHytSRUnp2HSipQlsJq+QuEVGWc14 ydwVpJXa8lSPEosJZr1024ihHw4NEOwcR4q29QcTuUQNM1zBJdVr062hTyJyEz4E 3XxGX8NECtn0Sxkp7OF6MrJ24j+GdlstqPKMzsgDFzAjbO50T2GmUotCkY/5epNc sbFLCYHLUdW1AgMBAAGjggKGMIICgjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOJT zlTQ9Cj/Gt9AQ+dm7V43sBboMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wOgYDVR0RBDMwMYIPd3d3LmJhc2RrMTIub3Jn gh53d3cuYnV0bGVyYXJlYXNkLnBhLnNjaG9vbHMuYnowTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwBep3P531bA 57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW78pLOtAAAEAwBIMEYCIQDEOb5C YpgjujnsAUVZ44a2xot9chqdCWLRC4oybFMwCgIhAKlqxwsvAqGRqsmcUzso95hr FkgfEeSe034ABELNUhjfAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L kF4AAAFu/KS1jwAABAMASDBGAiEAzk30Bf1/i7zoj/50zf6zV1UvcFJY1fHUup/v FfjNP9ICIQCCm6aMSXSgG9PGVa6VzbxBtBR8Zm5VcccqrYBUboHGLjANBgkqhkiG 9w0BAQsFAAOCAQEAOsFTYFI8JNdxYioOROc3xBVTfkjYeDxsOeoUa7Tz53K/Z6aA wYcSv09r/qvF6ulUUAQYuMPFqqO7+kvyBgLI1HGCJye5PBPCYr8mUT8zp/eghhs1 qnotbccSpoQ/UnwJXaOvZGLZpS9VLFeoqUZjexGS09PccCBAYRzhlRfF1LLcJRFt BlF9OufN6Slfj9UteSMZatxujJHntixCiGzKcSi0uK0wl0KqxIWBl0EDE/bSQOwf xoTOsCLEB5K2NYwajJeHeBzDmU86zgiqoYmaw7mRlrzDfsRKF2ZDH4x8UfGK79Aj nGTzK3EymuirMttqSS4lFCFuOQiEW11piz2qmA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApMfpVhjngRKc0Q6zmmPy 7TWqNJEtKqITm1dOq1MYqnmjq3OiuivUrmHKeU5224VqtYxrTIBJI8RoLT/IYKwg ij3cGjAcnDWwU70e/mB36R50O4xjP3yE1Gt2CUGcCq5DwjV9RkNffafLfBrEIFB5 kZHeY4+s2WuKimBIFpYp854EkOU/Ta9KLhvEIapBkN7/qAOywSv55JGufNnD1X+J DOg72GkqZ0F66zwHIh1Z1CUyLk/X8RFsq1pi1xydQbcXU2ydOy4j5nHv9kY2wsnH hA3JdBWj+QhgziHQeb9H9szSqXCdJOdp4uX/eqyZSTX+W5tHkvo3gUILqh5gAt3j VfnvMGmoJ2gJVMV9vlGzaKp0SBznDtyiiQFTkJxc8ZlBHM6OZQLFXUELaWEx1Nqn wDpdyWAuqcWAk4GutgEPYjiyE305Ygd7TY6P8R5rCpCUEb641EqFuVa9z2DoyTzk zCNaCIb3DMcZNu6+0H5VtiRJzOeIoHhmdXar3eX+clRETIEfK1JFSenYdKKlCWwm r5C4RUZZzXjJ3BWkldryVI8SiwlmvXTbiKEfDg0Q7BxHirb1BxO5RA0zXMEl1WvT raFPInITPgTdfEZfw0QK2fRLGSns4XoysnbiP4Z2Wy2o8ozOyAMXMCNs7nRPYaZS i0KRj/l6k1yxsUsJgctR1bUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 285841529560099416884682283619340190736470 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 23:24:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 23:24:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.basdk12.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672247438259500032735944588170817414263056142070718015687802170376484277324518208194823531499323616033877727884154342041275413259936503704217543510762373371691570179490153703842229211496264687686656595642440453392228304842273192970801234894312584016795890104763584062308656032615242217152286005331635534196487929846212203192882477780098386937606369194511328358242710793313723559610290754338965560614169462834118295693165008228096799355046126950451934646695238298194058595168589778436617565703030116137316416470001566100003745782153155833996451592030570063353598736408110977674208149677934971926639529544094391246657111152994034485786708354197677195576037574577079383860701701038335372337963227629058186317611169779550399279006480412715867135671155983647756770641170097416188882233646188557425586650066544205621806780521800133686441822354566166119907599983583210618983254506604285420484593506530427567179770266916480734753005593906944881069280148866327129808277707251438753150141422189515334838171422328920553990393810464887753288983215344235685405266216577255457577301708469551070745482132537951921441794659260192177460124896390071678321559117912736092242690569613603128007410791699826475171216799047382100796951940523266158154077621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e253ce54d0f428ff1adf4043e766ed5e37b016e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basdk12.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butlerareasd.pa.schools.bz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016efca4b3ad0000040300483046022100c439be42629823ba39ec014559e386b6c68b7d721a9d0962d10b8a326c53300a022100a96ac70b2f02a191aac99c533b28f7986b16481f11e49ed37e000442cd5218df007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016efca4b58f0000040300483046022100ce4df405fd7f8bbce88ffe74cdfeb357552f705258d5f1d4ba9fef15f8cd3fd2022100829ba68c4974a01bd3c655ae95cdbc41b4147c666e5571c72aad80546e81c62e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003ac15360523c24d771622a0e44e737c415537e48d8783c6c39ea146bb4f3e772bf67a680c18712bf4f6bfeabc5eae954500418b8c3c5aaa3bbfa4bf20602c8d471822727b93c13c262bf26513f33a7f7a0861b35aa7a2d6dc712a6843f527c095da3af6462d9a52f552c57a8a946637b1192d3d3dc702040611ce19517c5d4b2dc25116d06517d3ae7cde9295f8fd52d7923196adc6e8c91e7b62c42886cca7128b4b8ad309742aac4858197410313f6d240ec1fc684ceb022c40792b6358c1a8c9787781cc3994f3ace08aaa1899ac3b99196bcc37ec44a1766431f8c7c51f18aefd0239c64f32b71329ae8ab32db6a492e2514216e3908845b5d698b3daa98