crushuniversity.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e1:64:da:ba:41:3b:43:d4:46:35:7f:22:bb:59:5f:d7:6f was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=crushuniversity.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e1:64:da:ba:41:3b:43:d4:46:35:7f:22:bb:59:5f:d7:6fSerial Number (int): 338034448850481904857528461162470761813871
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ac:f2:3e:45:ac:3f:b9:4c:c5:3e:bd:5c:de:15:18:36:1f:e7:9c:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fe:73:42:43:f9:1f:55:41:f6:8a:9b:0b:15:87:d6:5a:6e:bc:d8:ea
Fingerprint (sha256): 74:f2:bf:36:3c:af:25:92:b5:e8:50:53:fa:cd:79:78:a1:49:14:af:63:6a:56:2d:a1:4f:ce:3c:ff:31:aa:f8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate crushuniversity.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for crushuniversity.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.caughtbetweenadreamandajob.com
autodiscover.crushuniversity.com
caughtbetweenadream.delmcneal.com
caughtbetweenadreamandajob.com
cpanel.caughtbetweenadreamandajob.com
cpanel.crushuniversity.com
crushuniversity.com
crushuniversity.delmcneal.com
mail.caughtbetweenadreamandajob.com
mail.crushuniversity.com
webdisk.caughtbetweenadreamandajob.com
webdisk.crushuniversity.com
webmail.caughtbetweenadreamandajob.com
webmail.crushuniversity.com
www.caughtbetweenadream.delmcneal.com
www.caughtbetweenadreamandajob.com
www.crushuniversity.com
www.crushuniversity.delmcneal.com
autodiscover.crushuniversity.com
caughtbetweenadream.delmcneal.com
caughtbetweenadreamandajob.com
cpanel.caughtbetweenadreamandajob.com
cpanel.crushuniversity.com
crushuniversity.com
crushuniversity.delmcneal.com
mail.caughtbetweenadreamandajob.com
mail.crushuniversity.com
webdisk.caughtbetweenadreamandajob.com
webdisk.crushuniversity.com
webmail.caughtbetweenadreamandajob.com
webmail.crushuniversity.com
www.caughtbetweenadream.delmcneal.com
www.caughtbetweenadreamandajob.com
www.crushuniversity.com
www.crushuniversity.delmcneal.com
Other certificates including the domain name crushuniversity.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for crushuniversity.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHqDCCBpCgAwIBAgISA+Fk2rpBO0PURjV/IrtZX9dvMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTMwNTA5MDBaFw0x OTExMTEwNTA5MDBaMB4xHDAaBgNVBAMTE2NydXNodW5pdmVyc2l0eS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c5NMWXXtoQWa/3AQ2m22z3PV HWCQ4as3pXptvoAHtN8ITrtI4t+PwTw3ZXoBvD8Y7R13i+FKOaZAoKHpN0kqGgEB wP3y9/mPVgH3UX8gE8xgP3jnVtWPYdI3nER1EYEv5n0KxvGQwsiFomPFvZm/ctxX yqgNBxJSBJbev0liS7uk5tnDXwO+PNEF3eQkcXDv8KlhNxVMnRncfwCg9ZbcwyEy BXBCyE/zL9u8ly13SMPgAbaXIQCEJwfwySoEj4HIQkUm+0XP22LRmiXHOpL2+Wq6 XHQJoa8lzSRUpXcOHRplaXdTUWSVoiim6bN3P8OO4tTz7PtbtlKx0/R3U1aTAgMB AAGjggSyMIIErjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKzyPkWsP7lMxT69XN4V GDYf55wWMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggJmBgNVHREEggJdMIICWYIrYXV0b2Rpc2NvdmVyLmNhdWdodGJl dHdlZW5hZHJlYW1hbmRham9iLmNvbYIgYXV0b2Rpc2NvdmVyLmNydXNodW5pdmVy c2l0eS5jb22CIWNhdWdodGJldHdlZW5hZHJlYW0uZGVsbWNuZWFsLmNvbYIeY2F1 Z2h0YmV0d2VlbmFkcmVhbWFuZGFqb2IuY29tgiVjcGFuZWwuY2F1Z2h0YmV0d2Vl bmFkcmVhbWFuZGFqb2IuY29tghpjcGFuZWwuY3J1c2h1bml2ZXJzaXR5LmNvbYIT Y3J1c2h1bml2ZXJzaXR5LmNvbYIdY3J1c2h1bml2ZXJzaXR5LmRlbG1jbmVhbC5j b22CI21haWwuY2F1Z2h0YmV0d2VlbmFkcmVhbWFuZGFqb2IuY29tghhtYWlsLmNy dXNodW5pdmVyc2l0eS5jb22CJndlYmRpc2suY2F1Z2h0YmV0d2VlbmFkcmVhbWFu ZGFqb2IuY29tght3ZWJkaXNrLmNydXNodW5pdmVyc2l0eS5jb22CJndlYm1haWwu Y2F1Z2h0YmV0d2VlbmFkcmVhbWFuZGFqb2IuY29tght3ZWJtYWlsLmNydXNodW5p dmVyc2l0eS5jb22CJXd3dy5jYXVnaHRiZXR3ZWVuYWRyZWFtLmRlbG1jbmVhbC5j b22CInd3dy5jYXVnaHRiZXR3ZWVuYWRyZWFtYW5kYWpvYi5jb22CF3d3dy5jcnVz aHVuaXZlcnNpdHkuY29tgiF3d3cuY3J1c2h1bml2ZXJzaXR5LmRlbG1jbmVhbC5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWyJ mBGCAAAEAwBIMEYCIQDQ/18sqhQMrePJiWJvHBASGjkKXTg1aGDz8YwiOcVwQgIh ALwpvUN7jhllEiF20R7i6RLLjzb5FklT4Wg+Y/nZY9sMAHUAKTxRllTIOWW6qlD8 WAfUt2+/WHopctykwwz05UVH9HgAAAFsiZgRJAAABAMARjBEAiA0ns41oc2LoZ8j BvIOUWnEKdExVzrTum1LDABO2Ca+RgIgMfNYvpsVJnrVUjBUD3qz4XSSF4wF0V2J rYHwBB3evIEwDQYJKoZIhvcNAQELBQADggEBAA5IpDmCSgsSrUmZMgrneIYhlnRs EcZAQnhwsplN6HsJCnIpDTiYxjtJBrec9CmooeJK2euOVO/GfYsmVqbzEooGy7FS wlTLxrKh42xqPgpTtrf4KlsVDmeM8SK//YJpQ5DWneYDA70H3NeZ3k2x3HjJOvkj sZodK5K6KOYsz73NmjiizGv1GP65z3d7IrB3zogoW+j2/JHEXjxOhp2UOgwGQRPE qJ3Sc4eYe4BkRf2Z+3xwBpl9rrl8jXrAsPrgyNJIHgUvplEOSE3tOQIkP/s4VeF9 teTVDgpKR0GPKdgTBLn8IODJTjbXFmOrH4hSWJWcOsqFfzzJHI1x/Fx/7kw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHOTTFl17aEFmv9wENpt ts9z1R1gkOGrN6V6bb6AB7TfCE67SOLfj8E8N2V6Abw/GO0dd4vhSjmmQKCh6TdJ KhoBAcD98vf5j1YB91F/IBPMYD9451bVj2HSN5xEdRGBL+Z9CsbxkMLIhaJjxb2Z v3LcV8qoDQcSUgSW3r9JYku7pObZw18DvjzRBd3kJHFw7/CpYTcVTJ0Z3H8AoPWW 3MMhMgVwQshP8y/bvJctd0jD4AG2lyEAhCcH8MkqBI+ByEJFJvtFz9ti0ZolxzqS 9vlqulx0CaGvJc0kVKV3Dh0aZWl3U1FklaIopumzdz/DjuLU8+z7W7ZSsdP0d1NW kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 338034448850481904857528461162470761813871 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 05:09:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 05:09:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crushuniversity.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22779887239751614441225097424201428651326396319686392917798942792662276318530877998996750381533965969837335300959789508232599325444670657655103699757069305087340174872889504868400295466161807192888935794031392462335733788100392944844802678023099218178527882646487035308342383055301049154298805756153943248118983078936153521229103123167976031665922437082972052020409299968780482509244498373585837712473748267305595597950759222842107659725064919825034846573221502493406332030317400323323280306391286889877909174292378056969232280232832275108704497703522501909236396584479960723549150958942472836514391593477575072241299 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) acf23e45ac3fb94cc53ebd5cde1518361fe79c16 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.caughtbetweenadreamandajob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.crushuniversity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caughtbetweenadream.delmcneal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caughtbetweenadreamandajob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.caughtbetweenadreamandajob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.crushuniversity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crushuniversity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crushuniversity.delmcneal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.caughtbetweenadreamandajob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.crushuniversity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.caughtbetweenadreamandajob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.crushuniversity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.caughtbetweenadreamandajob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.crushuniversity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caughtbetweenadream.delmcneal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caughtbetweenadreamandajob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crushuniversity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crushuniversity.delmcneal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c899811820000040300483046022100d0ff5f2caa140cade3c989626f1c10121a390a5d38356860f3f18c2239c57042022100bc29bd437b8e1965122176d11ee2e912cb8f36f9164953e1683e63f9d963db0c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c8998112400000403004630440220349ece35a1cd8ba19f2306f20e5169c429d131573ad3ba6d4b0c004ed826be46022031f358be9b15267ad55230540f7ab3e17492178c05d15d89ad81f0041ddebc81 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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