ocean.standish.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a1:a2:3e:34:c2:a4:98:30:e0:fb:c8:4b:ec:13:62:d1:f5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ocean.standish.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a1:a2:3e:34:c2:a4:98:30:e0:fb:c8:4b:ec:13:62:d1:f5Serial Number (int): 316337976797380720535011626176790590050805
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 15:55:cd:32:04:3d:0b:fb:af:9b:2e:fe:ca:f1:7c:a0:0c:33:78:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ac:4e:89:39:b7:d9:f8:3c:77:e4:46:01:fc:03:80:33:d3:ca:ca:63
Fingerprint (sha256): 66:fa:3c:71:7e:d8:a0:ef:a8:23:6f:b2:78:86:0a:97:de:b0:be:06:bb:84:85:d6:31:fa:27:0d:c4:f1:39:f4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ocean.standish.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ocean.standish.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ocean.standish.ca
Other certificates including the domain name standish.ca
(limited to 100 certificates)
ers.standish.ca
v2.standish.ca
fischertanks.com
clients.standish.ca
maidlabs2.standish.ca
vertendre.standish.ca
site3.beaucage.standish.ca
cavallonew.standish.ca
clients.standish.ca
clients.standish.ca
site3.beaucage.standish.ca
borealis.standish.ca
cancer.standish.ca
cavallo2.standish.ca
lafermemartinette.standish.ca
dsavary.standish.ca
signaturetool.standish.ca
signaturetool.standish.ca
fischertanks.com
pepin.standish.ca
*.dev.standish.ca
cavallo2.standish.ca
standish.ca
cavallo.standish.ca
borealis.standish.ca
beaucage.standish.ca
sni.cloudflaressl.com
clients.standish.ca
cavallo.standish.ca
cavallo2.standish.ca
limotrique.standish.ca
v2.standish.ca
site3.beaucage.standish.ca
dsavary.standish.ca
sansnoeud.standish.ca
cavallo.standish.ca
ers.standish.ca
beaucage.standish.ca
signaturetool.standish.ca
sansnoeud.standish.ca
villegia.standish.ca
crypto.standish.ca
beaucage.standish.ca
beaucage.standish.ca
fcdj.standish.ca
crypto.standish.ca
standish.ca
cavallo3.standish.ca
standish.ca
site3.beaucage.standish.ca
standish.ca
cavallo3.standish.ca
beaucage.standish.ca
efbcapital.standish.ca
fischertanks.com
beaucage.standish.ca
chenerouge.standish.ca
villemagog.standish.ca
villegia.standish.ca
cavallo2.standish.ca
borealis.standish.ca
clients.standish.ca
fcdj.standish.ca
cavallo.standish.ca
v2.standish.ca
fischertanks.com
cavallo.standish.ca
fischertanks.com
dsavary.standish.ca
clients.standish.ca
woo.standish.ca
site3.beaucage.standish.ca
ecoleskamloup.standish.ca
shape2.standish.ca
arkel-od3.standish.ca
cavallo2.standish.ca
kamloup.standish.ca
site3.beaucage.standish.ca
cavallonew.standish.ca
clients.standish.ca
clients.standish.ca
sni.cloudflaressl.com
shape2.standish.ca
cavallo3.standish.ca
ecoleskamloup.standish.ca
beaucage.standish.ca
clients.standish.ca
beaucage.standish.ca
site3.beaucage.standish.ca
ecoleskamloup.standish.ca
clients.standish.ca
beaucage.standish.ca
limotrique.standish.ca
villegia.standish.ca
hyundaimagog.standish.ca
cavallo.standish.ca
arkel-od.standish.ca
ocean.standish.ca
arkel-od.standish.ca
villegia.standish.ca
v2.standish.ca
fischertanks.com
clients.standish.ca
maidlabs2.standish.ca
vertendre.standish.ca
site3.beaucage.standish.ca
cavallonew.standish.ca
clients.standish.ca
clients.standish.ca
site3.beaucage.standish.ca
borealis.standish.ca
cancer.standish.ca
cavallo2.standish.ca
lafermemartinette.standish.ca
dsavary.standish.ca
signaturetool.standish.ca
signaturetool.standish.ca
fischertanks.com
pepin.standish.ca
*.dev.standish.ca
cavallo2.standish.ca
standish.ca
cavallo.standish.ca
borealis.standish.ca
beaucage.standish.ca
sni.cloudflaressl.com
clients.standish.ca
cavallo.standish.ca
cavallo2.standish.ca
limotrique.standish.ca
v2.standish.ca
site3.beaucage.standish.ca
dsavary.standish.ca
sansnoeud.standish.ca
cavallo.standish.ca
ers.standish.ca
beaucage.standish.ca
signaturetool.standish.ca
sansnoeud.standish.ca
villegia.standish.ca
crypto.standish.ca
beaucage.standish.ca
beaucage.standish.ca
fcdj.standish.ca
crypto.standish.ca
standish.ca
cavallo3.standish.ca
standish.ca
site3.beaucage.standish.ca
standish.ca
cavallo3.standish.ca
beaucage.standish.ca
efbcapital.standish.ca
fischertanks.com
beaucage.standish.ca
chenerouge.standish.ca
villemagog.standish.ca
villegia.standish.ca
cavallo2.standish.ca
borealis.standish.ca
clients.standish.ca
fcdj.standish.ca
cavallo.standish.ca
v2.standish.ca
fischertanks.com
cavallo.standish.ca
fischertanks.com
dsavary.standish.ca
clients.standish.ca
woo.standish.ca
site3.beaucage.standish.ca
ecoleskamloup.standish.ca
shape2.standish.ca
arkel-od3.standish.ca
cavallo2.standish.ca
kamloup.standish.ca
site3.beaucage.standish.ca
cavallonew.standish.ca
clients.standish.ca
clients.standish.ca
sni.cloudflaressl.com
shape2.standish.ca
cavallo3.standish.ca
ecoleskamloup.standish.ca
beaucage.standish.ca
clients.standish.ca
beaucage.standish.ca
site3.beaucage.standish.ca
ecoleskamloup.standish.ca
clients.standish.ca
beaucage.standish.ca
limotrique.standish.ca
villegia.standish.ca
hyundaimagog.standish.ca
cavallo.standish.ca
arkel-od.standish.ca
ocean.standish.ca
arkel-od.standish.ca
villegia.standish.ca
Certificate
The complete raw certificate details for ocean.standish.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISA6GiPjTCpJgw4PvIS+wTYtH1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMDUwNTAxMjhaFw0x OTAzMDUwNTAxMjhaMBwxGjAYBgNVBAMTEW9jZWFuLnN0YW5kaXNoLmNhMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArzQ9d/p2tQlhDJt5SVBI6OPfL4kT mZb0elAEul38QhLhA2K2eH3IDKObuOk4FprijCJYkdR3uy3lvjoohd1LXljAgdPM YwHKl7wJH1FjjD6Rd7DafHupM9VEF07GRrvdA8sE98Q81eNaKV4Qk0PraxD6QEkZ XUjyFib2bgMBcLsByk3E8BKJITeAQsWsB1KLqvydokZmflI3uVlKICY/+dPda8qU 1vMBFJQGl/KglQPMrX0lJMNAzDJ62SgkamSigpldFMA8jJqnqUzLegbqeAmlBOgL jjgee8AydvsVNI/BWP3e4U5wYR0yeKid5LdZaZWRwhdFimm60+uXhKjxCTv7uIA2 RvT9t7+K9nCBK+XNPe91QxRiVgJoPvrvs1uqZ6hCEfNvJFbZVVCY2woGjbXWyiw/ Y/bKYzxeBDDzlieNCFhRm18oO8t6Y2202aOsZ/YITuHMt+xoNvLEtOZJICc5QAHs 4Fg4OumFJv/9ik5x9Dbx/p3SrgZ++4WLd5afyVeSL3Zk1DvTaGtBBVmPzvWu10bP yD54GFCepS6nf+hscV2RHiIRKsCjFm8Xx+m7zMj+ONTJ0raIIpD8NnN/TsoM74y4 lmMxZcjxY/wixyLfWTeWbNlDnX2w0gM1gaCe8qHreAIrsQv2G8vv9px7Tip+GN9T gvHn4nvuYZPRxpkCAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU FVXNMgQ9C/uvmy7+yvF8oAwzeGwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFvY2Vhbi5zdGFuZGlz aC5jYTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkC BAIEgfcEgfQA8gB3AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAAB Z3z0+gQAAAQDAEgwRgIhAIOYOeE1BfaT18dBmDLNy8yNTiB2cZh/doLWndJ3AZDK AiEA5IT7HQzyUGpDXvNvLWUxcrFCGdXBbw/Ip5pu/YyPJOwAdwB0ftqDMa0zEJEh nM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWd89Pu9AAAEAwBIMEYCIQC6DmNENnE9 NPLnTcpEUq0a0U4PMD9R+BtWj+MA/Z9AAgIhAKhXPFcOX7HnppatWnSe9XZo3J6r RvPp0fVAM+qSZeVaMA0GCSqGSIb3DQEBCwUAA4IBAQBvkdxv7MxTTingDDRTLses 5D/fTEMcebaLoBwR2pUxpWAYVmtIjNSr4uVFxok37hGvZARkHPEZdPx48LibrEkt 31/6bC+gRicmmCOEPFjIanX2V/lX6nYmHG6SoZRCShHvUV7PWHvuIFzGzwuy2iD1 9WKAboe2BCha/aVaDYs0WapA7Huorr5VeyV3pFYfm3azm6ufLxizMdQZs+mBBp2i Qa06yRuRH2V1IrmfUa8Fjtar38JZqXWclXz/a/9qxEH0lpheoG8Z6SjxzcCkiLhX NrcCMHqo5McSrxF45TpHjymnTlL0PSFIgSsGPA9wr4Hm3mcYqlW8u5W9m9oiXQBI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArzQ9d/p2tQlhDJt5SVBI 6OPfL4kTmZb0elAEul38QhLhA2K2eH3IDKObuOk4FprijCJYkdR3uy3lvjoohd1L XljAgdPMYwHKl7wJH1FjjD6Rd7DafHupM9VEF07GRrvdA8sE98Q81eNaKV4Qk0Pr axD6QEkZXUjyFib2bgMBcLsByk3E8BKJITeAQsWsB1KLqvydokZmflI3uVlKICY/ +dPda8qU1vMBFJQGl/KglQPMrX0lJMNAzDJ62SgkamSigpldFMA8jJqnqUzLegbq eAmlBOgLjjgee8AydvsVNI/BWP3e4U5wYR0yeKid5LdZaZWRwhdFimm60+uXhKjx CTv7uIA2RvT9t7+K9nCBK+XNPe91QxRiVgJoPvrvs1uqZ6hCEfNvJFbZVVCY2woG jbXWyiw/Y/bKYzxeBDDzlieNCFhRm18oO8t6Y2202aOsZ/YITuHMt+xoNvLEtOZJ ICc5QAHs4Fg4OumFJv/9ik5x9Dbx/p3SrgZ++4WLd5afyVeSL3Zk1DvTaGtBBVmP zvWu10bPyD54GFCepS6nf+hscV2RHiIRKsCjFm8Xx+m7zMj+ONTJ0raIIpD8NnN/ TsoM74y4lmMxZcjxY/wixyLfWTeWbNlDnX2w0gM1gaCe8qHreAIrsQv2G8vv9px7 Tip+GN9TgvHn4nvuYZPRxpkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316337976797380720535011626176790590050805 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 05:01:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 05:01:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ocean.standish.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714770216055593647613161857019226814621325880104162186582416934278568794911454069024085633683307701412988200339447940401512234996396329966809939721941315077711945970055987608886350817544038831460533238333933745587934910151795610918648307911353113730630753821638481292616366226747814488784761190141097961214776056699241187755526357412597323435390085726815498241885418222758276011441274541270555250876229241299764356703770254228873684858402604842528154684638213975028735700978321617106021722297742532366412833439325948633618768344411761963672032707175144696395466029711586749280848712192893996000401272320433081669495045332759277173745488118644896442708415475185347511017599665555639277076967903123425645001098149767741355168085814175279952724767682599683315818937154374619150164112587920516759628666003484756782571023411139856927077785667318693697002339271838434441040291320775478518319507679146996651437680786735283331040806866207452725195136454387624707106562064973601490699763746647525179807048700395767006360865075470145161610744741818412233119848100018755144305476379060015289731985145501406982314123656212968372712889249692132127587584306970708796299668524446944594038032389585480615303044396152977530249793937479329874170726041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1555cd32043d0bfbaf9b2efecaf17ca00c33786c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocean.standish.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001677cf4fa040000040300483046022100839839e13505f693d7c7419832cdcbcc8d4e207671987f7682d69dd2770190ca022100e484fb1d0cf2506a435ef36f2d653172b14219d5c16f0fc8a79a6efd8c8f24ec007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001677cf4fbbd0000040300483046022100ba0e634436713d34f2e74dca4452ad1ad14e0f303f51f81b568fe300fd9f4002022100a8573c570e5fb1e7a696ad5a749ef57668dc9eab46f3e9d1f54033ea9265e55a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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