assist.mgi.digital
Issued by R3
About this certificate
This digital certificate with serial number 03:67:c1:a8:66:b2:60:e3:8a:db:02:1f:48:61:b3:bf:d0:13 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=assist.mgi.digital
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:67:c1:a8:66:b2:60:e3:8a:db:02:1f:48:61:b3:bf:d0:13Serial Number (int): 296643356980134502433951212449428469174291
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 85:d5:86:b1:20:6e:08:d8:dc:14:0f:5e:14:d3:ae:de:30:7e:d6:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a8:fa:84:cb:64:08:0a:d0:ae:17:24:93:aa:15:13:fc:c1:f9:7b:1b
Fingerprint (sha256): 76:5b:53:8b:fb:e6:bb:30:99:60:99:d3:40:22:1a:a8:c0:5f:c9:d5:d0:79:f0:61:59:6c:da:21:77:87:68:50
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate assist.mgi.digital
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for assist.mgi.digital
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
assist.barrowbc.gov.uk
assist.digital-startklar.de
assist.hanspunt.com
assist.mgi.digital
assist.monitorsanywhere.com
assist.ohhdeer.com
assist.orandke.com
assist.tutis3.com
assist.updateyou.fr
join.themoneygeeks.co.uk
remote.velocity-eu.com
remotesupport.icecostorelogs.co.uk
support.carewatch.co.uk
support.dempseydyer.co.uk
assist.digital-startklar.de
assist.hanspunt.com
assist.mgi.digital
assist.monitorsanywhere.com
assist.ohhdeer.com
assist.orandke.com
assist.tutis3.com
assist.updateyou.fr
join.themoneygeeks.co.uk
remote.velocity-eu.com
remotesupport.icecostorelogs.co.uk
support.carewatch.co.uk
support.dempseydyer.co.uk
Other certificates including the domain name mgi.digital
(limited to 100 certificates)
assistance.essentielweb.com
assist.voramedic.de
techsup.camelott.co.uk
assist.orandke.com
assist.werbas.com
assist.diavicom.com
assist.mgi.digital
assist.littleit.net
assist.mgi.digital
assist.oneeightyone.com
assist.mgi.digital
mgi.digital
assist.oneeightyone.com
help.mensinga.it
helpdesk.ictzaak.nl
mgi.digital
assist.abctelephonie.com
assist.werbas.com
remotesupport.icecostorelogs.co.uk
assist.oneeightyone.com
assist.voramedic.de
support.exsto.be
assist.oneeightyone.com
join.themoneygeeks.co.uk
assistenza.dieffesistemi.it
help.mensinga.it
assist.oneeightyone.com
assist.baeumlin-management.ch
asistencia.tuchoconsultoria.com
support.ukictltd.com
assist.abctelephonie.com
assist.oneeightyone.com
assist.diavicom.com
assist.bool.ie
assist.oneeightyone.com
asistencia.okadrive.com
assist.okam.ch
support.exsto.be
assistance.essentielweb.com
join.themoneygeeks.co.uk
help.mensinga.it
assist.mgi.digital
assist.hanspunt.com
asistencia.tuchoconsultoria.com
support.citylegalservices.co.uk
assist.voramedic.de
join.byzz.plus
assist.sladetech.co.uk
hilfe.skycom.gmbh
asistencia.tuchoconsultoria.com
assist.oneeightyone.com
assist.oneeightyone.com
assist.hanspunt.com
support.dempseydyer.co.uk
assist.mgi.digital
assist.mgi.digital
assist.nichecrm.builders
assist.voramedic.de
assist.okam.ch
support.citylegalservices.co.uk
support.citylegalservices.co.uk
assist.sladetech.co.uk
assist.baeumlin-management.ch
help.mensinga.it
join.byzz.plus
assist.mgi.digital
mgi.digital
asistencia.tuchoconsultoria.com
assist.baeumlin-management.ch
assist.sladetech.co.uk
support.ukictltd.com
assist.abctelephonie.com
assist.oneeightyone.com
assist.oneeightyone.com
assist.nichecrm.builders
assist.mgi.digital
assist.oneeightyone.com
join.byzz.plus
assistenza.dieffesistemi.it
support.citylegalservices.co.uk
assist.baeumlin-management.ch
assist.sladetech.co.uk
helpdesk.ictzaak.nl
hilfe.skycom.gmbh
mgi.digital
support.ukictltd.com
assist.hanspunt.com
remotesupport.icecostorelogs.co.uk
assist.mgi.digital
assistance.essentielweb.com
assist.oneeightyone.com
remotesupport.icecostorelogs.co.uk
assist.bool.ie
assist.nichecrm.builders
mgi.digital
support.dempseydyer.co.uk
assist.orandke.com
helpdesk.ictzaak.nl
support.ukictltd.com
support.dempseydyer.co.uk
assist.voramedic.de
techsup.camelott.co.uk
assist.orandke.com
assist.werbas.com
assist.diavicom.com
assist.mgi.digital
assist.littleit.net
assist.mgi.digital
assist.oneeightyone.com
assist.mgi.digital
mgi.digital
assist.oneeightyone.com
help.mensinga.it
helpdesk.ictzaak.nl
mgi.digital
assist.abctelephonie.com
assist.werbas.com
remotesupport.icecostorelogs.co.uk
assist.oneeightyone.com
assist.voramedic.de
support.exsto.be
assist.oneeightyone.com
join.themoneygeeks.co.uk
assistenza.dieffesistemi.it
help.mensinga.it
assist.oneeightyone.com
assist.baeumlin-management.ch
asistencia.tuchoconsultoria.com
support.ukictltd.com
assist.abctelephonie.com
assist.oneeightyone.com
assist.diavicom.com
assist.bool.ie
assist.oneeightyone.com
asistencia.okadrive.com
assist.okam.ch
support.exsto.be
assistance.essentielweb.com
join.themoneygeeks.co.uk
help.mensinga.it
assist.mgi.digital
assist.hanspunt.com
asistencia.tuchoconsultoria.com
support.citylegalservices.co.uk
assist.voramedic.de
join.byzz.plus
assist.sladetech.co.uk
hilfe.skycom.gmbh
asistencia.tuchoconsultoria.com
assist.oneeightyone.com
assist.oneeightyone.com
assist.hanspunt.com
support.dempseydyer.co.uk
assist.mgi.digital
assist.mgi.digital
assist.nichecrm.builders
assist.voramedic.de
assist.okam.ch
support.citylegalservices.co.uk
support.citylegalservices.co.uk
assist.sladetech.co.uk
assist.baeumlin-management.ch
help.mensinga.it
join.byzz.plus
assist.mgi.digital
mgi.digital
asistencia.tuchoconsultoria.com
assist.baeumlin-management.ch
assist.sladetech.co.uk
support.ukictltd.com
assist.abctelephonie.com
assist.oneeightyone.com
assist.oneeightyone.com
assist.nichecrm.builders
assist.mgi.digital
assist.oneeightyone.com
join.byzz.plus
assistenza.dieffesistemi.it
support.citylegalservices.co.uk
assist.baeumlin-management.ch
assist.sladetech.co.uk
helpdesk.ictzaak.nl
hilfe.skycom.gmbh
mgi.digital
support.ukictltd.com
assist.hanspunt.com
remotesupport.icecostorelogs.co.uk
assist.mgi.digital
assistance.essentielweb.com
assist.oneeightyone.com
remotesupport.icecostorelogs.co.uk
assist.bool.ie
assist.nichecrm.builders
mgi.digital
support.dempseydyer.co.uk
assist.orandke.com
helpdesk.ictzaak.nl
support.ukictltd.com
support.dempseydyer.co.uk
Certificate
The complete raw certificate details for assist.mgi.digital in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEszCCA5ugAwIBAgISA2fBqGayYOOK2wIfSGGzv9ATMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTA0MTMxNzA3MjlaFw0yMTA3MTIxNzA3MjlaMB0xGzAZBgNVBAMT EmFzc2lzdC5tZ2kuZGlnaXRhbDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABPsU S/NkEGbpup5LKlz4RKgPiXRt9c5UI6RwrlpMQZtuU2Sz4zUcjSzuqsvdSDcIYiGZ twO4RIkj54FT3MGAEMujggKhMIICnTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIXV hrEgbgjY3BQPXhTTrt4wftZSMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIBYgYD VR0RBIIBWTCCAVWCFmFzc2lzdC5iYXJyb3diYy5nb3YudWuCG2Fzc2lzdC5kaWdp dGFsLXN0YXJ0a2xhci5kZYITYXNzaXN0LmhhbnNwdW50LmNvbYISYXNzaXN0Lm1n aS5kaWdpdGFsghthc3Npc3QubW9uaXRvcnNhbnl3aGVyZS5jb22CEmFzc2lzdC5v aGhkZWVyLmNvbYISYXNzaXN0Lm9yYW5ka2UuY29tghFhc3Npc3QudHV0aXMzLmNv bYITYXNzaXN0LnVwZGF0ZXlvdS5mcoIYam9pbi50aGVtb25leWdlZWtzLmNvLnVr ghZyZW1vdGUudmVsb2NpdHktZXUuY29tgiJyZW1vdGVzdXBwb3J0LmljZWNvc3Rv cmVsb2dzLmNvLnVrghdzdXBwb3J0LmNhcmV3YXRjaC5jby51a4IZc3VwcG9ydC5k ZW1wc2V5ZHllci5jby51azBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8vjkRAfCK+a nIeH1rS3qQkvYfSZQc7ZLAC1hnwne02065oA7QEP2qWMXeco9lJsQo8fIcctrE6+ Cq709yMR4N7p8U9KUR8D+dqhVLhAeKzADjZhPIH0Y+85jIdivhYWB7i26XHgG33G q7csmBcGZNgEOJlsV9nHQHR3zGhTe+D7Oc0fqonS/H/Fi1bZ3RrgCNGhviYisHkL 70tQlekr8TOEsxo4kxo7mqqfLJX/c6UBEUXbYGIQcYs3nLK7ABxIkbvCrik9G9Pw EYJjstXTVDGERh70BR0pYqOWdBBGTH4/STAxAs7hd5MCUnEtCbV23WX+cHFB+awf NsAIQHyv3Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE+xRL82QQZum6nksqXPhEqA+JdG31 zlQjpHCuWkxBm25TZLPjNRyNLO6qy91INwhiIZm3A7hEiSPngVPcwYAQyw== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 296643356980134502433951212449428469174291 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-13 17:07:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-12 17:07:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assist.mgi.digital' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004fb144bf3641066e9ba9e4b2a5cf844a80f89746df5ce5423a470ae5a4c419b6e5364b3e3351c8d2ceeaacbdd483708622199b703b8448923e78153dcc18010cb . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 85d586b1206e08d8dc140f5e14d3aede307ed652 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (345 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.barrowbc.gov.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.digital-startklar.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.hanspunt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.mgi.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.monitorsanywhere.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.ohhdeer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.orandke.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.tutis3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.updateyou.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.themoneygeeks.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.velocity-eu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesupport.icecostorelogs.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.carewatch.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dempseydyer.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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