duquesnelawreview.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9b:7b:50:a1:f0:73:47:0a:0e:67:3a:0e:a2:e3:32:37:9f was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=duquesnelawreview.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9b:7b:50:a1:f0:73:47:0a:0e:67:3a:0e:a2:e3:32:37:9fSerial Number (int): 314244538379774811063966597486731339118495
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b7:5f:5a:f1:c4:4b:5a:e3:92:82:48:91:f0:b8:01:97:32:e5:9a:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): dc:c6:31:f1:41:8a:54:0b:3f:b8:f8:b1:5a:11:98:4a:34:cf:d5:ef
Fingerprint (sha256): 6a:09:41:0d:8a:ee:7f:85:8d:4f:8d:eb:9f:f7:5d:18:c4:6b:25:82:55:51:17:e5:f4:26:d2:42:7e:c1:04:81
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate duquesnelawreview.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for duquesnelawreview.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.duquesnelawreview.com
autodiscover.paconstitution.org
cpanel.duquesnelawreview.com
cpanel.paconstitution.org
duquesnelawreview.com
lawreview.duqlawblogs.org
mail.duquesnelawreview.com
mail.paconstitution.org
paconstitution-org.duqlawblogs.org
paconstitution.org
webdisk.duquesnelawreview.com
webdisk.paconstitution.org
webmail.duquesnelawreview.com
webmail.paconstitution.org
www.duquesnelawreview.com
www.lawreview.duqlawblogs.org
www.paconstitution-org.duqlawblogs.org
www.paconstitution.org
autodiscover.paconstitution.org
cpanel.duquesnelawreview.com
cpanel.paconstitution.org
duquesnelawreview.com
lawreview.duqlawblogs.org
mail.duquesnelawreview.com
mail.paconstitution.org
paconstitution-org.duqlawblogs.org
paconstitution.org
webdisk.duquesnelawreview.com
webdisk.paconstitution.org
webmail.duquesnelawreview.com
webmail.paconstitution.org
www.duquesnelawreview.com
www.lawreview.duqlawblogs.org
www.paconstitution-org.duqlawblogs.org
www.paconstitution.org
Other certificates including the domain name duquesnelawreview.com
(limited to 100 certificates)
www.paconstitution-org.duqlawblogs.org
duquesnelawreview.com
duqlawblogs.org
duqlawblogs.org
cpcalendars.duquesnelawreview.com
duquesnelawreview.com
duqcrim.com
acllib.org
paconstitution-org.duqlawblogs.org
duqcrim.com
webdisk.paconstitution.org
paconstitution-org.duqlawblogs.org
duqcrim.com
duquesnelawreview.com
duquesnejurismagazine.com
duquesnelawreview.com
duqlawblogs.org
duqlawblogs.org
cpcalendars.duquesnelawreview.com
duquesnelawreview.com
duqcrim.com
acllib.org
paconstitution-org.duqlawblogs.org
duqcrim.com
webdisk.paconstitution.org
paconstitution-org.duqlawblogs.org
duqcrim.com
duquesnelawreview.com
duquesnejurismagazine.com
Certificate
The complete raw certificate details for duquesnelawreview.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHXjCCBkagAwIBAgISA5t7UKHwc0cKDmc6DqLjMjefMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMzAyMTI1NDVaFw0y MDAyMjgyMTI1NDVaMCAxHjAcBgNVBAMTFWR1cXVlc25lbGF3cmV2aWV3LmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALspmm9Qum4ZhzyyOw2IGouo SC6YCRe6qKgXlfcoj3RS7eFfh/CTrjqw7MTMZ6YOzf4WSP3mLC5QzrV3kZ9a/i5N gXrGVw5ZaZj5oJ7eiJ6pFh0fFSVlpfNPnclnjTh5x2CLQGqCOC6TeaXntaWixqdx wS6FATFmuyxRwcLtUMVMv7yO/89jLtUJzDH+Qyx1NHSLETBau9SMfOz7LwVHrd2r k+TQgwvkBfTBiZRl/ufsIIPGZj1xz5qeWnVVRQ6bFGICdrsAEw316zRhzL6b0QeS 0Ggu+l+hTtHn1ZGuK9JIhKo52ZRtuzEnIEMOPJ7CG7YvkvP9LDxdTxI8roI9dc0C AwEAAaOCBGYwggRiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUt19a8cRLWuOSgkiR 8LgBlzLlmsswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzCCAhoGA1UdEQSCAhEwggINgiJhdXRvZGlzY292ZXIuZHVxdWVz bmVsYXdyZXZpZXcuY29tgh9hdXRvZGlzY292ZXIucGFjb25zdGl0dXRpb24ub3Jn ghxjcGFuZWwuZHVxdWVzbmVsYXdyZXZpZXcuY29tghljcGFuZWwucGFjb25zdGl0 dXRpb24ub3JnghVkdXF1ZXNuZWxhd3Jldmlldy5jb22CGWxhd3Jldmlldy5kdXFs YXdibG9ncy5vcmeCGm1haWwuZHVxdWVzbmVsYXdyZXZpZXcuY29tghdtYWlsLnBh Y29uc3RpdHV0aW9uLm9yZ4IicGFjb25zdGl0dXRpb24tb3JnLmR1cWxhd2Jsb2dz Lm9yZ4IScGFjb25zdGl0dXRpb24ub3Jngh13ZWJkaXNrLmR1cXVlc25lbGF3cmV2 aWV3LmNvbYIad2ViZGlzay5wYWNvbnN0aXR1dGlvbi5vcmeCHXdlYm1haWwuZHVx dWVzbmVsYXdyZXZpZXcuY29tghp3ZWJtYWlsLnBhY29uc3RpdHV0aW9uLm9yZ4IZ d3d3LmR1cXVlc25lbGF3cmV2aWV3LmNvbYIdd3d3Lmxhd3Jldmlldy5kdXFsYXdi bG9ncy5vcmeCJnd3dy5wYWNvbnN0aXR1dGlvbi1vcmcuZHVxbGF3YmxvZ3Mub3Jn ghZ3d3cucGFjb25zdGl0dXRpb24ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAsh4FzIuizYogTodm+Su5 iiUgZ2va+nDnsklTLe+LkF4AAAFuvmt9TAAABAMASDBGAiEA40W+yc5/PqKAb6dz uIffN+47prYCzbMkZqYKn6AylIMCIQC3IEBUTwMcJ7b2qFsFHIIzwJUBnox7sacy HZuvnjqZRwB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbr5r fmUAAAQDAEYwRAIgHLFGlgt+QCeW9gbMxp8nVIdb17bw6pS/j1rDZgS5jTICIDzm +NiB95w2TTMH0FS1UySJqwxcCCUJSFbIR52Wm0uAMA0GCSqGSIb3DQEBCwUAA4IB AQA/qFYcm52iMgntUx2vfkoCjL/VdoBWac81TQDsiZPh75LG8YWEr1pc76c7nENr 4BTIrTARCwxrbSqZNJdQgiouR5nHpEXu48HDBvW59KS18vAipmRpgrSKoY53Eoho 5Kx/oxPbXJNru4dU/n8C7kcRGvMrWdrRNzhnFbnGwLlZJrGWU3JPNdoSy42BwWnw QvGC/G32/qtE+uDtzVXaVd6YYlHZN9iB87FHlMIVKeo3S/XgslN620jAZTLBh8xR jhBiQ/z8DXkSWjqOjq78RDgOfLRVqZS76jM9uxtgKsrZetp8WglMRqWCwVRq25qx w65Bdeqp/ET8nKdIoaRIh80H -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuymab1C6bhmHPLI7DYga i6hILpgJF7qoqBeV9yiPdFLt4V+H8JOuOrDsxMxnpg7N/hZI/eYsLlDOtXeRn1r+ Lk2BesZXDllpmPmgnt6InqkWHR8VJWWl80+dyWeNOHnHYItAaoI4LpN5pee1paLG p3HBLoUBMWa7LFHBwu1QxUy/vI7/z2Mu1QnMMf5DLHU0dIsRMFq71Ix87PsvBUet 3auT5NCDC+QF9MGJlGX+5+wgg8ZmPXHPmp5adVVFDpsUYgJ2uwATDfXrNGHMvpvR B5LQaC76X6FO0efVka4r0kiEqjnZlG27MScgQw48nsIbti+S8/0sPF1PEjyugj11 zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314244538379774811063966597486731339118495 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 21:25:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 21:25:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duquesnelawreview.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23627078361287405022462705240857229975615100821746073288777986873297537673924860186330541433461153144436388311918854872370737359193625551701312633374272405893586719599913080146980640520340561549541298517715487396091676919720337354879809034553295735141376889944498912934160072153972034258984189527758539279982029489042176832658071768980013215996766700231450089529170209732445110783583698035465811347322970796654872356197140479722540600240739715685097200346278006214184672850435969904245078153728505868196052760693586309067218461539761755846477990300848741370761149909564355160469670109984706826711880753033354015503821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b75f5af1c44b5ae392824891f0b8019732e59acb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (529 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.duquesnelawreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.paconstitution.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.duquesnelawreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.paconstitution.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duquesnelawreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawreview.duqlawblogs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.duquesnelawreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.paconstitution.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paconstitution-org.duqlawblogs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paconstitution.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.duquesnelawreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.paconstitution.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.duquesnelawreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.paconstitution.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duquesnelawreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawreview.duqlawblogs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paconstitution-org.duqlawblogs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paconstitution.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ebe6b7d4c0000040300483046022100e345bec9ce7f3ea2806fa773b887df37ee3ba6b602cdb32466a60a9fa0329483022100b72040544f031c27b6f6a85b051c8233c095019e8c7bb1a7321d9baf9e3a99470075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ebe6b7e65000004030046304402201cb146960b7e402796f606ccc69f2754875bd7b6f0ea94bf8f5ac36604b98d3202203ce6f8d881f79c364d3307d054b5532489ab0c5c0825094856c8479d969b4b80 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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