www.gipcgoa.com
Issued by R3
About this certificate
This digital certificate with serial number 03:6c:87:af:78:43:0d:97:2b:4d:1c:43:0f:8e:85:7d:3b:eb was issued on by Let's Encrypt.
With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.gipcgoa.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6c:87:af:78:43:0d:97:2b:4d:1c:43:0f:8e:85:7d:3b:ebSerial Number (int): 298267710293324946615659958233192495660011
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ae:58:1a:b2:be:60:6f:ad:96:32:40:a6:2d:26:47:60:63:9f:4c:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 08:80:2d:9b:d7:d7:fa:df:63:59:f0:7f:87:61:5b:17:93:10:bf:4c
Fingerprint (sha256): 5c:c2:b8:d1:a1:90:59:d1:87:1d:af:1a:ab:4f:21:e1:7d:9b:d1:e3:12:e3:4e:2c:ce:35:06:c9:0d:28:c5:ae
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.gipcgoa.com
37
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.gipcgoa.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
backstage.grnetsolution.com
backstage.hamedazimi.me
backstage.jdwtech.com
event.opnmynd.com
event.secureelance.com
event.ytj-show.jp
evento.reciclagem.de
eventos.facilitandoamamentacao.com.br
eventos.the-smart-store.com
events.abacusworldwide.org
events.caseware.com.au
events.centralillinoispride.com
events.creativezone.ae
events.cybiant.com
events.destifind.sa
events.gosmartvalue.com
events.hamedazimi.me
events.hideawayweddings.com.au
events.hindueconomy.org
events.informasoft.ca
events.lcac19.org
events.maappen.com
events.marianasworkinggroup.org
events.meritkahn.com
events.pathwaystoresilience.org
events.saludcontech.com
events.speir.tv
events.thinxtra.com
events.vueav.com
events.workplacelearning.ial.edu.sg
live.theeventzteam.com
walk.lymphewarriors.co.za
www.afawaseries-tz.com
www.fmbm.info
www.gipcgoa.com
www.myshows.ca
www.virtis.in
backstage.hamedazimi.me
backstage.jdwtech.com
event.opnmynd.com
event.secureelance.com
event.ytj-show.jp
evento.reciclagem.de
eventos.facilitandoamamentacao.com.br
eventos.the-smart-store.com
events.abacusworldwide.org
events.caseware.com.au
events.centralillinoispride.com
events.creativezone.ae
events.cybiant.com
events.destifind.sa
events.gosmartvalue.com
events.hamedazimi.me
events.hideawayweddings.com.au
events.hindueconomy.org
events.informasoft.ca
events.lcac19.org
events.maappen.com
events.marianasworkinggroup.org
events.meritkahn.com
events.pathwaystoresilience.org
events.saludcontech.com
events.speir.tv
events.thinxtra.com
events.vueav.com
events.workplacelearning.ial.edu.sg
live.theeventzteam.com
walk.lymphewarriors.co.za
www.afawaseries-tz.com
www.fmbm.info
www.gipcgoa.com
www.myshows.ca
www.virtis.in
Other certificates including the domain name gipcgoa.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.gipcgoa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG1DCCBbygAwIBAgISA2yHr3hDDZcrTRxDD46FfTvrMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjExMDIwODMxNDlaFw0yMzAxMzEwODMxNDhaMBoxGDAWBgNVBAMT D3d3dy5naXBjZ29hLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCgceDBh IazMy+L/DL35crofO8/Ni6Qup0btPJF53Py6H+sbbaiWh0b6v67fxI0j/3PSl8al FX4xzclaZ6/hcvSjggTFMIIEwTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFK5YGrK+ YG+tljJApi0mR2Bjn0xmMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLG MFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iu b3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIDhgYDVR0R BIIDfTCCA3mCG2JhY2tzdGFnZS5ncm5ldHNvbHV0aW9uLmNvbYIXYmFja3N0YWdl LmhhbWVkYXppbWkubWWCFWJhY2tzdGFnZS5qZHd0ZWNoLmNvbYIRZXZlbnQub3Bu bXluZC5jb22CFmV2ZW50LnNlY3VyZWVsYW5jZS5jb22CEWV2ZW50Lnl0ai1zaG93 LmpwghRldmVudG8ucmVjaWNsYWdlbS5kZYIlZXZlbnRvcy5mYWNpbGl0YW5kb2Ft YW1lbnRhY2FvLmNvbS5icoIbZXZlbnRvcy50aGUtc21hcnQtc3RvcmUuY29tghpl dmVudHMuYWJhY3Vzd29ybGR3aWRlLm9yZ4IWZXZlbnRzLmNhc2V3YXJlLmNvbS5h dYIfZXZlbnRzLmNlbnRyYWxpbGxpbm9pc3ByaWRlLmNvbYIWZXZlbnRzLmNyZWF0 aXZlem9uZS5hZYISZXZlbnRzLmN5YmlhbnQuY29tghNldmVudHMuZGVzdGlmaW5k LnNhghdldmVudHMuZ29zbWFydHZhbHVlLmNvbYIUZXZlbnRzLmhhbWVkYXppbWku bWWCHmV2ZW50cy5oaWRlYXdheXdlZGRpbmdzLmNvbS5hdYIXZXZlbnRzLmhpbmR1 ZWNvbm9teS5vcmeCFWV2ZW50cy5pbmZvcm1hc29mdC5jYYIRZXZlbnRzLmxjYWMx OS5vcmeCEmV2ZW50cy5tYWFwcGVuLmNvbYIfZXZlbnRzLm1hcmlhbmFzd29ya2lu Z2dyb3VwLm9yZ4IUZXZlbnRzLm1lcml0a2Fobi5jb22CH2V2ZW50cy5wYXRod2F5 c3RvcmVzaWxpZW5jZS5vcmeCF2V2ZW50cy5zYWx1ZGNvbnRlY2guY29tgg9ldmVu dHMuc3BlaXIudHaCE2V2ZW50cy50aGlueHRyYS5jb22CEGV2ZW50cy52dWVhdi5j b22CI2V2ZW50cy53b3JrcGxhY2VsZWFybmluZy5pYWwuZWR1LnNnghZsaXZlLnRo ZWV2ZW50enRlYW0uY29tghl3YWxrLmx5bXBoZXdhcnJpb3JzLmNvLnphghZ3d3cu YWZhd2FzZXJpZXMtdHouY29tgg13d3cuZm1ibS5pbmZvgg93d3cuZ2lwY2dvYS5j b22CDnd3dy5teXNob3dzLmNhgg13d3cudmlydGlzLmluMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIo5PjhwMy4NaBpqeUkVN+gEpoAf3o8TrUlWH6xkMama7B3MRFcR7q rW4sF8Lc1Y5jMjhclWofrPbeDHvzu7V+cIQdu1Loui/oF2J6a/zkqgyHxnFyTlVx qSo34nLYbf5r+xD8ef9WwjPUAN+5Ge/IzjjAdbfyLmve/7tbAXiDPX7HOU3csNX7 8HnpaHg+bzPo9YGATvFJxiaKnemwywYdXfc0Nta2xzH98VRImICvN2/xyiecG7Lo 5kzJhoXBtNQkXg6rC98vD0i90upCBTfRUDybQVUkSuDgpPzrz0RmT9kwZGGZy2// Q9puI0qHau5gPhQvnJT6zlTxuxzVa9sE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEKBx4MGEhrMzL4v8Mvflyuh87z82L pC6nRu08kXnc/Lof6xttqJaHRvq/rt/EjSP/c9KXxqUVfjHNyVpnr+Fy9A== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 298267710293324946615659958233192495660011 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-02 08:31:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 08:31:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gipcgoa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004281c78306121accccbe2ff0cbdf972ba1f3bcfcd8ba42ea746ed3c9179dcfcba1feb1b6da8968746fabfaedfc48d23ff73d297c6a5157e31cdc95a67afe172f4 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ae581ab2be606fad963240a62d264760639f4c66 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (893 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.grnetsolution.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.hamedazimi.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.jdwtech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.opnmynd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.secureelance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.ytj-show.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evento.reciclagem.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.facilitandoamamentacao.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.the-smart-store.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.abacusworldwide.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.caseware.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.centralillinoispride.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.creativezone.ae' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.cybiant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.destifind.sa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.gosmartvalue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hamedazimi.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hideawayweddings.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hindueconomy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.informasoft.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.lcac19.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.maappen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.marianasworkinggroup.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.meritkahn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.pathwaystoresilience.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.saludcontech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.speir.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.thinxtra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.vueav.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.workplacelearning.ial.edu.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.theeventzteam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walk.lymphewarriors.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afawaseries-tz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmbm.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gipcgoa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myshows.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virtis.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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