draft.benefitsplus.cssny.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6c:05:b2:f7:40:e3:64:50:8e:fd:5b:11:65:37:c3:20:b5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=draft.benefitsplus.cssny.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6c:05:b2:f7:40:e3:64:50:8e:fd:5b:11:65:37:c3:20:b5Serial Number (int): 298094928806457986645712485181032107286709
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 39:5e:a2:b1:08:a7:8e:f1:5a:97:ca:65:72:b9:06:4a:50:07:36:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1d:11:47:a6:92:b7:ca:9a:6b:c6:f8:e8:0c:9e:44:0f:14:26:07:c5
Fingerprint (sha256): 59:23:63:b4:ad:27:39:a3:bd:f0:95:bb:cd:3f:67:9d:96:ec:82:33:b4:9b:69:91:cb:ab:48:44:cc:75:29:e2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate draft.benefitsplus.cssny.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for draft.benefitsplus.cssny.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
draft.benefitsplus.cssny.org
Other certificates including the domain name cssny.org
(limited to 100 certificates)
benefitsplus.cssny.org
helpdesk.cssny.org
helpdesk.log-it.org
shop.benefitsplus.cssny.org
*.sanssl-002.bsdtools.com
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
cssny.org
draft.benefitsplus.cssny.org
benefitsplus.cssny.org
bplc.cssny.org
webmail.cssny.org
helpdesk.dpsgroupglobal.com
donate.cssny.org
mafsdp.maf.ae
helpdesk.dpsgroupglobal.com
webmail.cssny.org
bplc.cssny.org
servicioscompartidos.imagina.pe
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
servicedesk.tpocc.org
bplc.cssny.org
*.sanssl-002.bsdtools.com
benefitsplus.cssny.org
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
servicedesk.alshareef.com.qa
*.sanssl-002.bsdtools.com
helpdesk.log-it.org
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
pbrcmanual.cssny.org
ithelp.converge.org
benefitsplus.cssny.org
servicedesk.cssny.org
bplc.cssny.org
mask17.classy.org
benefitsplus.cssny.org
draft.benefitsplus.cssny.org
draft.benefitsplus.cssny.org
servicedesk.cssny.org
helpdesk.dpsgroupglobal.com
mafsdp.maf.ae
benefitsplus.cssny.org
dtc.cssny.org
helpdesk.dpsgroupglobal.com
nycss-main.edge.bluestate.digital
donate.cssny.org
servicedesk.tpocc.org
benefitsplus.cssny.org
servicedesk.tpocc.org
helpdesk.dpsgroupglobal.com
lync.cssny.org
bplc.cssny.org
benefitsplus.cssny.org
helpdesk.dpsgroupglobal.com
*.sanssl-002.bsdtools.com
donate.cssny.org
mask17.classy.org
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
docs.cssny.org
ewhelp.energyworldnet.com
pbrcmanual.cssny.org
helpdesk.dpsgroupglobal.com
servicioscompartidos.imagina.pe
draft.benefitsplus.cssny.org
*.sanssl-002.bsdtools.com
benefitsplus.cssny.org
pbrcmanual.cssny.org
helpdesk.purkinje.com
benefitsplus.cssny.org
benefitsplus.cssny.org
helpdesk.dpsgroupglobal.com
shop.benefitsplus.cssny.org
benefitsplus.cssny.org
helpdesk.cssny.org
benefitsplus.cssny.org
*.sanssl-002.bsdtools.com
benefitsplus.cssny.org
mafsdp.maf.ae
draft.benefitsplus.cssny.org
helpdesk.vonechina.com
cssny.org
webmail.cssny.org
benefitsplus.cssny.org
mask17.classy.org
helpdesk.dpsgroupglobal.com
mask17.classy.org
bplc.cssny.org
*.sanssl-002.bsdtools.com
cssny.org
mask17.classy.org
nycss-main.edge.bluestate.digital
helpdesk.cssny.org
helpdesk.log-it.org
shop.benefitsplus.cssny.org
*.sanssl-002.bsdtools.com
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
cssny.org
draft.benefitsplus.cssny.org
benefitsplus.cssny.org
bplc.cssny.org
webmail.cssny.org
helpdesk.dpsgroupglobal.com
donate.cssny.org
mafsdp.maf.ae
helpdesk.dpsgroupglobal.com
webmail.cssny.org
bplc.cssny.org
servicioscompartidos.imagina.pe
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
servicedesk.tpocc.org
bplc.cssny.org
*.sanssl-002.bsdtools.com
benefitsplus.cssny.org
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
servicedesk.alshareef.com.qa
*.sanssl-002.bsdtools.com
helpdesk.log-it.org
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
*.sanssl-002.bsdtools.com
helpdesk.dpsgroupglobal.com
pbrcmanual.cssny.org
ithelp.converge.org
benefitsplus.cssny.org
servicedesk.cssny.org
bplc.cssny.org
mask17.classy.org
benefitsplus.cssny.org
draft.benefitsplus.cssny.org
draft.benefitsplus.cssny.org
servicedesk.cssny.org
helpdesk.dpsgroupglobal.com
mafsdp.maf.ae
benefitsplus.cssny.org
dtc.cssny.org
helpdesk.dpsgroupglobal.com
nycss-main.edge.bluestate.digital
donate.cssny.org
servicedesk.tpocc.org
benefitsplus.cssny.org
servicedesk.tpocc.org
helpdesk.dpsgroupglobal.com
lync.cssny.org
bplc.cssny.org
benefitsplus.cssny.org
helpdesk.dpsgroupglobal.com
*.sanssl-002.bsdtools.com
donate.cssny.org
mask17.classy.org
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
docs.cssny.org
ewhelp.energyworldnet.com
pbrcmanual.cssny.org
helpdesk.dpsgroupglobal.com
servicioscompartidos.imagina.pe
draft.benefitsplus.cssny.org
*.sanssl-002.bsdtools.com
benefitsplus.cssny.org
pbrcmanual.cssny.org
helpdesk.purkinje.com
benefitsplus.cssny.org
benefitsplus.cssny.org
helpdesk.dpsgroupglobal.com
shop.benefitsplus.cssny.org
benefitsplus.cssny.org
helpdesk.cssny.org
benefitsplus.cssny.org
*.sanssl-002.bsdtools.com
benefitsplus.cssny.org
mafsdp.maf.ae
draft.benefitsplus.cssny.org
helpdesk.vonechina.com
cssny.org
webmail.cssny.org
benefitsplus.cssny.org
mask17.classy.org
helpdesk.dpsgroupglobal.com
mask17.classy.org
bplc.cssny.org
*.sanssl-002.bsdtools.com
cssny.org
mask17.classy.org
nycss-main.edge.bluestate.digital
Certificate
The complete raw certificate details for draft.benefitsplus.cssny.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISA2wFsvdA42RQjv1bEWU3wyC1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MjUyMzEyMDhaFw0x ODEyMjQyMzEyMDhaMCcxJTAjBgNVBAMTHGRyYWZ0LmJlbmVmaXRzcGx1cy5jc3Nu eS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQqNqoYh+TZlV 1/pGfY6HMfJ3dE+rz/ONKp/nf1jgeIMm7/7CT3g7SDxJNtEO8DBYswfYxBf13CeV X1XAFFORJAX+HNTvYkJgWhSJ/KCPjdH5qVGB4m9lnXEN/QHBNznfX32xxbzPrwHP Bnydg/e9hWDJwF6CtzRGMpJyF1V7qC6c+k2myPE2eJ3cy/tfHrETUqG9pe4m9vJD 2YkAFLLcAHumQreFBO06IThTSfkCIZoeKIqI3iy2T6rMA+rCJAlqkL9jmh6aXEpF Qsxc1SiAADjiwJJVbulYtR19tuR0CD7WPWEH0fCdGrkHskg4kXD7O4KlVZAQkwrj w4I6jxQ/AgMBAAGjggMlMIIDITAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDleorEI p47xWpfKZXK5BkpQBzbvMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wJwYDVR0RBCAwHoIcZHJhZnQuYmVuZWZpdHNwbHVz LmNzc255Lm9yZzCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMB AQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGr BggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVs aWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFu Y2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8v bGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBBQYKKwYBBAHWeQIEAgSB9gSB 8wDxAHcAwRZK4Kdy0tQ5LcgKwQdw1PDEm96ZGkhAwfoHUWT2M2AAAAFmEzf/agAA BAMASDBGAiEAxAV1uanp7t3zrIwYQDwRe8VQS0TZE46FAD8uthmo3HgCIQDDeEF2 s4hGJ+VMVslxWhnr5tQm5c1DNPCzBjhJfaCeUAB2ACk8UZZUyDlluqpQ/FgH1Ldv v1h6KXLcpMMM9OVFR/R4AAABZhM3/3oAAAQDAEcwRQIhAI1y58HkPapyT17JtOl6 VolEcrn22u+15nPHNa7VUWBhAiBXZrV5Qo5qBO94j8RjR5Gu+A3UkQ/ynS1s2Fr2 bjjoTDANBgkqhkiG9w0BAQsFAAOCAQEAGS8RkZVEq79fNVapNujSkD3i3b7kp803 UwyG3VTGjn7GAUcaQTQlZuaUt7gHc7G3EaA7pLeoja5J+AuFTwhI3kSzOBZB5pBo N+tpn6XZLnwEPcwKpyFkZ9nbq10tNA3ooeN3CtRe9EuqB1k0Jsvrcy68Ic4aOtkT vs3odtCYZTtSoYB+/NvS7JfDq0sif9YNmieeXD4Pp42u7JOc4FlPfUvfKnyjGfYA shCcAht6X3iG8H59vjSSvzsMdVwbTCtmsnU27lobG4+BivnmsVBeXMnnEDQVvqK6 rX9lAbrMMFPWGrkKw7SmrJTfLR27hSaVxLQY3zeUneteVrqXkBrckA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00KjaqGIfk2ZVdf6Rn2O hzHyd3RPq8/zjSqf539Y4HiDJu/+wk94O0g8STbRDvAwWLMH2MQX9dwnlV9VwBRT kSQF/hzU72JCYFoUifygj43R+alRgeJvZZ1xDf0BwTc53199scW8z68BzwZ8nYP3 vYVgycBegrc0RjKSchdVe6gunPpNpsjxNnid3Mv7Xx6xE1KhvaXuJvbyQ9mJABSy 3AB7pkK3hQTtOiE4U0n5AiGaHiiKiN4stk+qzAPqwiQJapC/Y5oemlxKRULMXNUo gAA44sCSVW7pWLUdfbbkdAg+1j1hB9HwnRq5B7JIOJFw+zuCpVWQEJMK48OCOo8U PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 298094928806457986645712485181032107286709 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-25 23:12:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-24 23:12:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'draft.benefitsplus.cssny.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26669142940888241181485764624434931306415670675022180223605678589472536487649726008674529443817480187748477691608860972277170501895223019958789163808841689141279148810870695177513731377937102995162438111273696424933929841644674419211181644540900844695319820463922871709830605110227064272772561760527014420019072934446705231504765798982033676067698214660800669795424083501678412791598255149559350133243524856949850444561345695637495983014961983454674561659324004144574945697493447428442849326831863511341274631423069893670618111039609058164724850766967065559707866636636490618039636636472066951475182434954921135510591 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 395ea2b108a78ef15a97ca6572b9064a500736ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draft.benefitsplus.cssny.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001661337ff6a0000040300483046022100c40575b9a9e9eeddf3ac8c18403c117bc5504b44d9138e85003f2eb619a8dc78022100c3784176b3884627e54c56c9715a19ebe6d426e5cd4334f0b30638497da09e50007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001661337ff7a00000403004730450221008d72e7c1e43daa724f5ec9b4e97a56894472b9f6daefb5e673c735aed551606102205766b579428e6a04ef788fc4634791aef80dd4910ff29d2d6cd85af66e38e84c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00192f11919544abbf5f3556a936e8d2903de2ddbee4a7cd37530c86dd54c68e7ec601471a41342566e694b7b80773b1b711a03ba4b7a88dae49f80b854f0848de44b3381641e6906837eb699fa5d92e7c043dcc0aa7216467d9dbab5d2d340de8a1e3770ad45ef44baa07593426cbeb732ebc21ce1a3ad913becde876d098653b52a1807efcdbd2ec97c3ab4b227fd60d9a279e5c3e0fa78daeec939ce0594f7d4bdf2a7ca319f600b2109c021b7a5f7886f07e7dbe3492bf3b0c755c1b4c2b66b27536ee5a1b1b8f818af9e6b1505e5cc9e7103415bea2baad7f6501bacc3053d61ab90ac3b4a6ac94df2d1dbb852695c4b418df37949deb5e56ba97901adc90