nava.app
Issued by R3
About this certificate
This digital certificate with serial number 04:0a:57:91:e3:77:99:4c:0f:b3:dc:ce:8d:5a:57:8d:a5:d0 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nava.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:0a:57:91:e3:77:99:4c:0f:b3:dc:ce:8d:5a:57:8d:a5:d0Serial Number (int): 351968367728510720979223086379841788683728
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 73:c1:5b:34:fe:6d:9f:e0:81:94:30:b8:d9:5a:75:55:74:7d:c7:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b4:7e:54:84:23:3b:90:f4:21:37:ec:72:6c:8b:af:cb:11:03:32:5e
Fingerprint (sha256): 5e:44:fe:e4:14:17:fb:05:cf:3a:18:a8:0a:00:00:70:7f:7f:39:80:76:91:dc:44:86:93:a8:64:d3:4e:b6:b3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nava.app
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nava.app
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nava.app
nava.mettenmeier.de
www.nava.app
nava.mettenmeier.de
www.nava.app
Other certificates including the domain name nava.app
(limited to 100 certificates)
static.ges.digital
app.reelertech.com
www.anthonyharm.com
crystofab.com
centrident.com.mx
appian.app
www.burgas.app
hilfe.nava.app
www.receitasdarute.pt
nava.app
hi.nava.app
api-reward.riraku-sys.jp
martbhiadmin.estore.business
staging.nava.app
bia-app.noldor.co.za
nava.app
sunilphanimanne.com
marmope.ml
admin.sweetupsell.com
nava.app
www.redact.at
member.busybilby.com.au
www.carpiomusic.com
archive.nava.app
character-images.othellonia.com
nava.app
www.sthlmbcl.se
hilfe.nava.app
www.nava.app
www.blissretreat.co.nz
www.erkangunaydin.com
admin.beta.badge.app
dope.stage.drivebuddyai.xyz
voters.topescaperoomsproject.com
runnercounter.escape30.com
go.kollekt.dk
www.andremyers.dev
dentologicom.smartcom.mx
firebase.gregmoy.com
greetings.beckyphan.com
www.ngoan-streetfood.de
www.cobrellon.com
api-dev.nava.app
www.lanbonindia.com
pictures.akily.app
hilfe.nava.app
calebra.cf
carcat.app
gestures.studiomoniker.com
thegscapp.com
pro.link-dev.sikkaapp.in
account.cryptopoli.mplus.fun
www.cabanadavid.ro
yoshikiyarlagadda.com
formlessfunction.com
rossneilson.dev
d3mix.a-zeroproduce.net
www.nickdesisto.com
twitpile.com
nava.app
nava.app
rimechengineering.au
nava.app
www.thefeedbackapp.xyz
nava.app
cyclum.cc
link.azicloud.com
www.tdtt.de
greendroptaxi.in
examainer.audeering.com
pr.unzip.events
dev.nasheedstation.com
simple-ng-chat.tk
docs.parkzenapp.com
www.burgas.app
voters.topescaperoomsproject.com
www.kindlesaleno1.com
nava.app
link.dentacarts.com
dev.defimath.ca
listsmaker.com
www.carinaundmarcel.de
nava.app
nava.app
www.avionics.one
www.isaiaheaso.com
hi.nava.app
hilfe.nava.app
stagingweb.midtown.id
api.nava.app
nava.app
hilfe.nava.app
sistema.inlifestyle.com.br
hilfe.nava.app
mesbro-refurbished.mesbro.in
nava.app
api-dev.nava.app
chrisasfour.com
bia-app.noldor.co.za
ampgular.com
app.reelertech.com
www.anthonyharm.com
crystofab.com
centrident.com.mx
appian.app
www.burgas.app
hilfe.nava.app
www.receitasdarute.pt
nava.app
hi.nava.app
api-reward.riraku-sys.jp
martbhiadmin.estore.business
staging.nava.app
bia-app.noldor.co.za
nava.app
sunilphanimanne.com
marmope.ml
admin.sweetupsell.com
nava.app
www.redact.at
member.busybilby.com.au
www.carpiomusic.com
archive.nava.app
character-images.othellonia.com
nava.app
www.sthlmbcl.se
hilfe.nava.app
www.nava.app
www.blissretreat.co.nz
www.erkangunaydin.com
admin.beta.badge.app
dope.stage.drivebuddyai.xyz
voters.topescaperoomsproject.com
runnercounter.escape30.com
go.kollekt.dk
www.andremyers.dev
dentologicom.smartcom.mx
firebase.gregmoy.com
greetings.beckyphan.com
www.ngoan-streetfood.de
www.cobrellon.com
api-dev.nava.app
www.lanbonindia.com
pictures.akily.app
hilfe.nava.app
calebra.cf
carcat.app
gestures.studiomoniker.com
thegscapp.com
pro.link-dev.sikkaapp.in
account.cryptopoli.mplus.fun
www.cabanadavid.ro
yoshikiyarlagadda.com
formlessfunction.com
rossneilson.dev
d3mix.a-zeroproduce.net
www.nickdesisto.com
twitpile.com
nava.app
nava.app
rimechengineering.au
nava.app
www.thefeedbackapp.xyz
nava.app
cyclum.cc
link.azicloud.com
www.tdtt.de
greendroptaxi.in
examainer.audeering.com
pr.unzip.events
dev.nasheedstation.com
simple-ng-chat.tk
docs.parkzenapp.com
www.burgas.app
voters.topescaperoomsproject.com
www.kindlesaleno1.com
nava.app
link.dentacarts.com
dev.defimath.ca
listsmaker.com
www.carinaundmarcel.de
nava.app
nava.app
www.avionics.one
www.isaiaheaso.com
hi.nava.app
hilfe.nava.app
stagingweb.midtown.id
api.nava.app
nava.app
hilfe.nava.app
sistema.inlifestyle.com.br
hilfe.nava.app
mesbro-refurbished.mesbro.in
nava.app
api-dev.nava.app
chrisasfour.com
bia-app.noldor.co.za
ampgular.com
Certificate
The complete raw certificate details for nava.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISBApXkeN3mUwPs9zOjVpXjaXQMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA3MjgwMzEyMTZaFw0yMTEwMjYwMzEyMTRaMBMxETAPBgNVBAMT CG5hdmEuYXBwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlw5FJF3/ XyobdOPZ5ZPbmId4/jWx9nf6JdOFtWc+6Dlb7kA5gBYVjQNXCfazxl5fFlaNYQlG vY3oT1glxt2d/ziUHs4BF3BIpD9TTJ2DDtrsJhcxLm/kvfX77VXSz3IbYeLQeliy MVXPjqCeIT0dUDm2N04U+Nqcp0ACOMKN/SZl0bmmhd8atksY+KS5kRQP+PqN6S3y +4W9gMgiCASWYU2WRu31/rFQnPmYxzashNuc2VeTHoTYuFgYaofsaJodh+iT1wM/ Q0+egvasjc5qAx1I8ww1n/iDpqTbKATBjbtgkjDgSk3CEklixjGyeG/inXqykULL pcRhJ9iV8uHr3Qe0DjPa4+c9Hz0WLgrEyTwc0YZVKUAsiTANAGVN0vyhXJrpNqal VXIYatwDY3YE0DAyL7mnGV7av69NFu/wqKdEz7ahbjuG7AKloyI69q6PQ2yDdjLz 3RwqdvoEzFdk6xn8Dr3UaW+bwYWwrBasX7kjX1UbhRI41GTsQYRH4kwNFDOocjdT IWxcGZYNu3BL/LKurFCXMg12b8tj3HZ8aaiu6e2H+MAGdCqgf0yaQ3JVbBs8z9to YCwHaUxfJBiBPtTF/sXKHhuN3YjvIV/d3zhUXNirCxpN29/FO+ptnA4CJfA+7l64 aGaZreUVnTTtfRp0I4JNY1EZVQZLDXzEDkcCAwEAAaOCAXMwggFvMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUc8FbNP5tn+CBlDC42Vp1VXR9xyYwHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wNgYDVR0RBC8wLYIIbmF2YS5hcHCCE25hdmEubWV0dGVubWVp ZXIuZGWCDHd3dy5uYXZhLmFwcDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2Zdl3OI wE2UlaTXMXGMx7nwiN0GBW00Ap24sJJo4EiLgz6wcuEMhMYAsJFiOhMDVdOV8gKE 8D6u1S8RsDgQNY4Lj1WCE3CqbSAo4z+qy3tqAQxVqiKbSHNbMR+c34cJV5J7GdAL E2cU791cBkiT0yahuNbr0cg4uLzF2PVRw/urL45uiunvhRwjtwRzamCp93YiLKD3 vuBLk7zwGSHidvksKKy25r4B7LkmdbUKG9X90bT2+4tv1W88KXJrOLL03ebNrV3u watsUovcZtIwIVU0rwS6HiBiML2p3csD6cbgnE1Vfi12g3WHoAOakMFoji2iaL5Q 7HJY1ezXAfurlg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlw5FJF3/XyobdOPZ5ZPb mId4/jWx9nf6JdOFtWc+6Dlb7kA5gBYVjQNXCfazxl5fFlaNYQlGvY3oT1glxt2d /ziUHs4BF3BIpD9TTJ2DDtrsJhcxLm/kvfX77VXSz3IbYeLQeliyMVXPjqCeIT0d UDm2N04U+Nqcp0ACOMKN/SZl0bmmhd8atksY+KS5kRQP+PqN6S3y+4W9gMgiCASW YU2WRu31/rFQnPmYxzashNuc2VeTHoTYuFgYaofsaJodh+iT1wM/Q0+egvasjc5q Ax1I8ww1n/iDpqTbKATBjbtgkjDgSk3CEklixjGyeG/inXqykULLpcRhJ9iV8uHr 3Qe0DjPa4+c9Hz0WLgrEyTwc0YZVKUAsiTANAGVN0vyhXJrpNqalVXIYatwDY3YE 0DAyL7mnGV7av69NFu/wqKdEz7ahbjuG7AKloyI69q6PQ2yDdjLz3RwqdvoEzFdk 6xn8Dr3UaW+bwYWwrBasX7kjX1UbhRI41GTsQYRH4kwNFDOocjdTIWxcGZYNu3BL /LKurFCXMg12b8tj3HZ8aaiu6e2H+MAGdCqgf0yaQ3JVbBs8z9toYCwHaUxfJBiB PtTF/sXKHhuN3YjvIV/d3zhUXNirCxpN29/FO+ptnA4CJfA+7l64aGaZreUVnTTt fRp0I4JNY1EZVQZLDXzEDkcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 351968367728510720979223086379841788683728 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-28 03:12:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-26 03:12:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nava.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 616253663928812185277441383995844586452764342393428700666768681686630934679999177950641851995686973315895838727505965668241261845754808483848998909717978840062038637080630593426341335495142483749595143192889297210779951171646755562750767885586056313704728480068706135971802397742291838268419472090576945707450750954243199436295610594861727232050418217190404378685608569400056473489902035604469022005843432939625362936801428809646932490063624343722169175977243561693514595422977522600957476344047708868520974196528770514817373084188829521482429575634126621989146100924572231681036767337432032937750301178381376192296764344182125302438406707828296663378836494639649928597607768467338357956546620518371003211856955779793270159812698196466652381641107590323911157131429027921239692922344707647273325342066215340369897722871410374612735193065601081805028325658178301149990197257806025106110599054172722321487664267647176493599433168802715829171835837478389692163039326123180763480533734946632043601197312730022254133482806644814624323738317669079626178652630397487015383745990472121256322090696985534204655588071373271164605981983471316439331741223755656018593380063428141978499062845342020649485892798733134456991883536897244271013531207 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 73c15b34fe6d9fe0819430b8d95a7555747dc726 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nava.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nava.mettenmeier.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nava.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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