bowen.bryanisd.org
Issued by R3
About this certificate
This digital certificate with serial number 04:0d:7e:03:2c:20:1c:d7:d3:dc:a6:b6:5e:5c:be:0f:c8:4a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=bowen.bryanisd.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:0d:7e:03:2c:20:1c:d7:d3:dc:a6:b6:5e:5c:be:0f:c8:4aSerial Number (int): 353040313696342911876934029926216982579274
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 7f:b0:61:0f:57:32:05:d5:db:af:5f:9a:af:11:a1:56:f5:4d:e2:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e1:3c:60:02:c1:8d:a9:2b:2d:8d:81:5c:01:03:a8:2b:aa:59:6c:d1
Fingerprint (sha256): 7f:89:38:20:84:ea:8a:48:ac:56:49:de:cd:e3:58:24:1d:fb:cf:6c:08:89:8e:ed:01:a0:bd:c9:7b:d2:9d:bd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate bowen.bryanisd.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bowen.bryanisd.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bowen.bryanisd.org
Other certificates including the domain name bryanisd.org
(limited to 100 certificates)
www.chms.mx
acecharterhigh.org
admindavila.bryanisd.org
mitchell.bryanisd.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
abramfriedmanoc.org
admin.bme.manorisd.net
abramfriedmanoc.org
admin.dms.manorisd.net
houston.bryanisd.org
abramfriedmanoc.org
hac.bryanisd.org
admin.hbuhsd.edu
rayburn.bryanisd.org
admin.dms.manorisd.net
long.bryanisd.org
*.bryanisd.org
carver.bryanisd.org
rudderhs.bryanisd.org
athlosaustin.org
admin.cca-denver.org
hms.frenship.us
*.bryanisd.org
adminrayburn.bryanisd.org
www.collegeachievegreaterasburyparkcharterschool.org
gradespeed2.bryanisd.org
admin.dms.manorisd.net
www.infinityhs.org
pgp.bryanisd.org
admin.cca-denver.org
davila.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
acsaregionxv.org
hrbisd.bryanisd.org
admin.mshs.manorisd.net
educationfoundation.bryanisd.org
www.hancockhs.org
fannin.bryanisd.org
acecharterhigh.org
eduphoria.bryanisd.org
rayburn.bryanisd.org
acsaregionxv.org
*.bryanisd.org
www.nhstitans.org
henderson.bryanisd.org
*.bryanisd.org
johnson.bryanisd.org
admin.educationfoundation.bryanisd.org
davila.bryanisd.org
abramfriedmanoc.org
abramfriedmanoc.org
admin.cca-denver.org
navarro.bryanisd.org
bonham.bryanisd.org
*.bryanisd.org
sfaustin.bryanisd.org
neal.bryanisd.org
bryanhs.bryanisd.org
admin.cca-denver.org
tmsa.org
hs.saisd.us
www.bryanisd.org
bonham.bryanisd.org
admin.cca-denver.org
www.buffsci.org
johnson.bryanisd.org
admin.acecharterhigh.org
delbosquemexico.com
abramfriedmanoc.org
sfaustin.bryanisd.org
*.bryanisd.org
admin.daviswolves.org
admin.nhstitans.org
acecharterhigh.org
crockett.bryanisd.org
holyfamilyhs.com
bowen.bryanisd.org
admin.dz.aceroschools.org
ross.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
hanak12school.org
*.bryanisd.org
eq4.equitasacademy.org
mcharris.bryanisd.org
jones.bryanisd.org
admin.cca-denver.org
adulted.sanjacinto.k12.ca.us
admin.cca-denver.org
branch.bryanisd.org
acecharterhigh.org
eq.equitasacademy.org
long.bryanisd.org
destiny.bryanisd.org
bryanisd.org
bryanhs.bryanisd.org
eisner.caminonuevo.org
bryanisd.org
acecharterhigh.org
admindavila.bryanisd.org
mitchell.bryanisd.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
abramfriedmanoc.org
admin.bme.manorisd.net
abramfriedmanoc.org
admin.dms.manorisd.net
houston.bryanisd.org
abramfriedmanoc.org
hac.bryanisd.org
admin.hbuhsd.edu
rayburn.bryanisd.org
admin.dms.manorisd.net
long.bryanisd.org
*.bryanisd.org
carver.bryanisd.org
rudderhs.bryanisd.org
athlosaustin.org
admin.cca-denver.org
hms.frenship.us
*.bryanisd.org
adminrayburn.bryanisd.org
www.collegeachievegreaterasburyparkcharterschool.org
gradespeed2.bryanisd.org
admin.dms.manorisd.net
www.infinityhs.org
pgp.bryanisd.org
admin.cca-denver.org
davila.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
acsaregionxv.org
hrbisd.bryanisd.org
admin.mshs.manorisd.net
educationfoundation.bryanisd.org
www.hancockhs.org
fannin.bryanisd.org
acecharterhigh.org
eduphoria.bryanisd.org
rayburn.bryanisd.org
acsaregionxv.org
*.bryanisd.org
www.nhstitans.org
henderson.bryanisd.org
*.bryanisd.org
johnson.bryanisd.org
admin.educationfoundation.bryanisd.org
davila.bryanisd.org
abramfriedmanoc.org
abramfriedmanoc.org
admin.cca-denver.org
navarro.bryanisd.org
bonham.bryanisd.org
*.bryanisd.org
sfaustin.bryanisd.org
neal.bryanisd.org
bryanhs.bryanisd.org
admin.cca-denver.org
tmsa.org
hs.saisd.us
www.bryanisd.org
bonham.bryanisd.org
admin.cca-denver.org
www.buffsci.org
johnson.bryanisd.org
admin.acecharterhigh.org
delbosquemexico.com
abramfriedmanoc.org
sfaustin.bryanisd.org
*.bryanisd.org
admin.daviswolves.org
admin.nhstitans.org
acecharterhigh.org
crockett.bryanisd.org
holyfamilyhs.com
bowen.bryanisd.org
admin.dz.aceroschools.org
ross.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
hanak12school.org
*.bryanisd.org
eq4.equitasacademy.org
mcharris.bryanisd.org
jones.bryanisd.org
admin.cca-denver.org
adulted.sanjacinto.k12.ca.us
admin.cca-denver.org
branch.bryanisd.org
acecharterhigh.org
eq.equitasacademy.org
long.bryanisd.org
destiny.bryanisd.org
bryanisd.org
bryanhs.bryanisd.org
eisner.caminonuevo.org
bryanisd.org
Certificate
The complete raw certificate details for bowen.bryanisd.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISBA1+AywgHNfT3Ka2Xly+D8hKMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDUwMTMyNDhaFw0yNDAzMDQwMTMyNDdaMB0xGzAZBgNVBAMT EmJvd2VuLmJyeWFuaXNkLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBALMlouCbqWicAXlZiOFWtWCUdEIMqZ1xJYg91qJxabYpieo3s6u/Jiw/Ouh0 +DWd9Qcu1dmoyYpvXeFbJVF3OI89jFG5IpDwYzpWQ9/lyA3KACz2CN35QliQTdEH JGeFPtGwmuJuFMvV1j3iveCqdUvyBSGX2cONkmdhQv06b/Eg8jKOUqvTGXRi2wOU CX7L+gJN/ecTTTMzb4xi8ny0+Kr8aF0VGWdKPi5LM5r0VUyPGPvtryRRR1eZtXwJ 14hQaHaZ+6NucAlRjGinUu7fkAlFTkLnHAP0bSSnMVh9kx+W4n91o1E9G/VmUH4D jX1h40v+pSbwTcU6JFfoHS93swMn26trQpl//Tzg3Ay3ixUZUddDl34t/gDZurLj S2p8TQGBEsDRGhpX+z/Z+jZEU4L/jSp03uKGW5AY/ir5nqujzEROgcDUWvmBJIUf 6KYRLGGsVrQH0Z8l++1PNkh6+raoj1y2IfmwJL3VuqDaMJupKWRvxmTFIgkRhNiF em2q/Y58ajUCfy6lAUyD8umG476lYLcQnoq1K5S7RqM/AH1cC2frDSs2fguaFX64 MiVInCL1lCT/ppyRLsPN2HmgODpCYa+9VRF9G51JGx8ZkkJz3KdaTxWL5+HYc938 HLP/NSXARIoRfHagq1Gdx9b54JieasH3OOF322mWzVCzV4wjAgMBAAGjggEhMIIB HTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFH+wYQ9XMgXV269fmq8RoVb1TeIYMB8G A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo dHRwOi8vcjMuaS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCEmJvd2VuLmJyeWFuaXNk Lm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATATBgorBgEEAdZ5AgQDAQH/BAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAUETxs4cL7Lc7/mbxmZviNVIsEM+rsWA5qA1GNGWJ YQGFoJDTaJKkqj4YjOQi+nrdbygspiw8/LBlojA/TregYGOM9JHVJRGPTZXIWiol 6A8uq54PKRXoUHQHYN/GrdYNjWp5mRF8y/JjSOeyaV6JmaPV79hi8ndcgmLWHaYi 0icGohp9C7ILdkVyFhS+ly+LZNgr0fL7tPs+KN29XNOUqECZFS3mwzCIa7BXJVma R6CGWwW0dKqZ1c5RSYIXl9KSS6WKKLsgRTFJe+qs5uSLeFjy4Nm/a2vhw5rzzc9p pWwOoGUiPzX1ont0fZ6GLuvZtxLrwWWdnKoCWKTA77IVEw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsyWi4JupaJwBeVmI4Va1 YJR0QgypnXEliD3WonFptimJ6jezq78mLD866HT4NZ31By7V2ajJim9d4VslUXc4 jz2MUbkikPBjOlZD3+XIDcoALPYI3flCWJBN0QckZ4U+0bCa4m4Uy9XWPeK94Kp1 S/IFIZfZw42SZ2FC/Tpv8SDyMo5Sq9MZdGLbA5QJfsv6Ak395xNNMzNvjGLyfLT4 qvxoXRUZZ0o+LkszmvRVTI8Y++2vJFFHV5m1fAnXiFBodpn7o25wCVGMaKdS7t+Q CUVOQuccA/RtJKcxWH2TH5bif3WjUT0b9WZQfgONfWHjS/6lJvBNxTokV+gdL3ez Ayfbq2tCmX/9PODcDLeLFRlR10OXfi3+ANm6suNLanxNAYESwNEaGlf7P9n6NkRT gv+NKnTe4oZbkBj+Kvmeq6PMRE6BwNRa+YEkhR/ophEsYaxWtAfRnyX77U82SHr6 tqiPXLYh+bAkvdW6oNowm6kpZG/GZMUiCRGE2IV6bar9jnxqNQJ/LqUBTIPy6Ybj vqVgtxCeirUrlLtGoz8AfVwLZ+sNKzZ+C5oVfrgyJUicIvWUJP+mnJEuw83YeaA4 OkJhr71VEX0bnUkbHxmSQnPcp1pPFYvn4dhz3fwcs/81JcBEihF8dqCrUZ3H1vng mJ5qwfc44XfbaZbNULNXjCMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 353040313696342911876934029926216982579274 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 01:32:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 01:32:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bowen.bryanisd.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730856063418673349698103945768882407871876172751390923826254142532066957244372440160337607167139358310762223840825708957394372555326475008874442804005164144365390437284151394157993499160226426515081400665510070236387517102060159574064377711242227093319789063369257025378408332694772659494215304130782229471691036909481461076787359235472240426219440587650492747466687179414323272975529061767814291307877274174920637529955254886777251968904350076258254967359849436984097290815043525666810194345412957732942286901180396344753157341987890862345400229180775096510621786753639329253185746773407356118087534516656021562349042218005710463159496025732453221292134785077563266358341884885423940373327529552240210086031042552595663091249536954407155369519955809042703964091770416024740221827269869412861533992777464880193554489224056097609560222757654896127081456300426266598376208033146152226652995981590399257702583641155257059387229768054643379094789859440286055903849549295133316392542460197154087066374089833870056158535143196002268037189685349273036323538440163307667869296673986054255396821046293551211864740134477421397580726717000689760429193354991150880508188681714340028842170644054554028239602332194331008479272155064300065191857187 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7fb0610f573205d5dbaf5f9aaf11a156f54de218 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowen.bryanisd.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005044f1b3870becb73bfe66f1999be235522c10cfabb16039a80d46346589610185a090d36892a4aa3e188ce422fa7add6f282ca62c3cfcb065a2303f4eb7a060638cf491d525118f4d95c85a2a25e80f2eab9e0f2915e850740760dfc6add60d8d6a7999117ccbf26348e7b2695e8999a3d5efd862f2775c8262d61da622d22706a21a7d0bb20b7645721614be972f8b64d82bd1f2fbb4fb3e28ddbd5cd394a84099152de6c330886bb05725599a47a0865b05b474aa99d5ce5149821797d2924ba58a28bb204531497beaace6e48b7858f2e0d9bf6b6be1c39af3cdcf69a56c0ea065223f35f5a27b747d9e862eebd9b712ebc1659d9caa0258a4c0efb21513